Privacy Policy
Here is the detailed and organized English translation of your privacy policy:
PRIVACY POLICY
At MOVVIENDO TOURISM GROUP S.L., we care about privacy and transparency. Furthermore, we are committed to processing your data in compliance with the current Data Protection regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
Below, we detail the processing of personal data that we carry out, as well as all relevant information related to it.
1. Who is the data controller for your data?
- Commercial name: MOVVIENDO TOURISM GROUP S.L.
- Corporate tax name: MOVVIENDO TOURISM GROUP S.L.
- CIF (Tax ID): B18579458
- Registered office: C/ LA NIÑA S/N, 18194 CHURRIANA DE LA VEGA, GRANADA (SPAIN)
- Phone: +34 619 03 93 00
- Email: marketing@movviendo.com
1.1. Contact details of the Data Protection Officer (DPO):
- Commercial name: GRUPO ALTABIR
- Corporate tax name: FORMACONT S. L.
- CIF (Tax ID): B18955195
- Registered office: C/ Luis Amador 26, Centro de Negocios Cámara de Comercio de Granada, P.0 - Of.B, 18014 Granada (Spain)
- Email: dpo@altabir.es
2. For what purpose do we process your personal data?
At MOVVIENDO TOURISM GROUP S.L., we process the information provided by data subjects for different purposes. The purposes are described below according to the data processing carried out:
- Processing of client data collected in the website's purchase section: We process the information provided by data subjects in order to process their order; carry out the administrative, accounting, and tax management of the order; improve their experience on this website; and send promotional communications about our products/services.
- Processing of data collected in the website's contact form: We process the information provided by data subjects in order to address and manage their request.
- Processing of data through cookies and similar technologies: We process the information obtained through cookies and similar technologies used to enable proper website navigation and core functionalities; remember user preferences and personalize the browsing experience; measure and analyze website activity to improve its performance and functionality; and display personalized ads based on interests and browsing habits.
- Processing of data for the exercise of data subjects' rights: We process the information provided by data subjects in order to manage and respond to requests from individuals exercising their rights established under data protection regulations.
- Processing of data for the notification of security breaches: We process the collected information in order to manage and assess security breaches, draft reports, and notify the Supervisory Authority and the data subjects, where applicable.
3. How long will we keep your data?
Each type of data processing has a specific retention period. Therefore, we indicate the retention times based on the different data operations we perform at MOVVIENDO TOURISM GROUP S.L.:
- Processing of client data collected in the website's purchase section: The data will be kept as long as the data subject does not request its erasure, and, where appropriate, for the necessary years to comply with legal obligations.
- Processing of data collected in the website's contact form: The data will be kept for the time necessary to resolve the requests, provided that the data subject does not request its erasure.
- Processing of data through cookies and similar technologies: Data collected through cookies will be kept for the strictly necessary time depending on the purpose of each cookie, as detailed in the Cookies Policy.
- Processing of data for the exercise of data subjects' rights: The data will be kept for the time necessary to resolve the requests and at least for three years to address potential claims.
- Processing of data for the notification of security breaches: The data will be kept for four years to fulfill the notification purpose, and for the necessary time to handle potential liabilities.
4. What is the lawful basis for the processing of your data?
Each data processing activity is based on a different legal ground. Therefore, we specify the lawful basis for each of the treatments we perform at MOVVIENDO TOURISM GROUP S.L.:
- Processing of client data collected in the website's purchase section:
- Performance of a contract or pre-contractual measures: Tax, accounting, and administrative management of clients (GDPR Art. 6.1.b).
- Legitimate interest of the Controller: Sending promotional communications, including by electronic means (GDPR Recital 47, LSSICE Art. 21.2).
- Processing of data collected in the website's contact form:
- Performance of a contract or pre-contractual measures: To address your request (GDPR Art. 6.1.b).
- Processing of data through cookies and similar technologies:
- Performance of a contract or pre-contractual measures: Use of necessary/technical cookies to provide the services offered through our website (GDPR Art. 6.1.b).
- Consent of the data subject: Use of non-necessary cookies (analytical, functional, and advertising) for the purposes described in the Cookies Policy (GDPR Art. 6.1.a).
- Processing of data for the exercise of data subjects' rights:
- Compliance with a legal obligation: Managing and responding to requests from data subjects exercising their rights established under data protection regulations (GDPR Art. 6.1.c).
- Processing of data for the notification of security breaches:
- Compliance with a legal obligation: The processing is necessary for compliance with a legal obligation to which the controller is subject, as contained in Articles 33 and 34 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.
5. To which recipients will your data be communicated?
Depending on the processing activity, data disclosures to other recipients may occur. To that end, we outline the disclosures for each data process we carry out at MOVVIENDO TOURISM GROUP S.L.:
- Processing of client data collected in the website's purchase section:
- Tax Administration, for the purpose of complying with legal obligations (statutory requirement).
- Financial institutions, for the purpose of processing the corresponding charges/receipts (contractual requirement).
- Processing of data collected in the website's contact form: No data will be transferred to third parties, unless there is a legal obligation to do so.
- Processing of data through cookies and similar technologies: Third-party service providers, including international providers of advertising, data analysis, or web service provision (prior consent required).
- Processing of data for the exercise of data subjects' rights: Supervisory authorities, public administration bodies, and the Ombudsman, where applicable, for the purpose of managing and responding to requests and potential claims (statutory requirement).
- Processing of data for the notification of security breaches: Supervisory authorities, public administration bodies, and organizations directly related to the Controller, for the purpose of managing potential security breaches (statutory requirement).
6. Data transfers to third countries
Depending on the data processing, data transfers to third countries may take place. We break down each treatment performed at MOVVIENDO TOURISM GROUP S.L. to indicate if any international transfer is planned:
- Processing of client data collected in the website's purchase section: No data transfers to third countries are planned.
- Processing of data collected in the website's contact form: No data transfers to third countries are planned.
- Processing of data through cookies and similar technologies: In the event of an international data transfer, it will be indicated in the Cookies Policy, and the appropriate safeguards provided for in the GDPR (standard contractual clauses, adequacy decisions, etc.) will be adopted.
- Processing of data for the exercise of data subjects' rights: No data transfers to third countries are planned.
- Processing of data for the notification of security breaches: No data transfers to third countries are planned.
7. What are your rights when you provide us with your data?
Anyone has the right to obtain confirmation as to whether or not MOVVIENDO TOURISM GROUP S.L. is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. They also have the right to data portability.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defense of legal claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, MOVVIENDO TOURISM GROUP S.L. will stop processing the data, unless there are compelling legitimate grounds, or for the exercise or defense of potential claims.
You may materially exercise your rights in the following way: by writing to dpo@altabir.es or to C/ Luis Amador 26, Centro de Negocios Cámara de Comercio de Granada, P.0 - Of.B.
When commercial communications are sent using the legitimate interest of the controller as a legal basis, the data subject may object to the processing of their data for that purpose.
If you have granted your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
In the event that you feel your rights have been violated regarding the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es.
8. How did we obtain your data?
The personal data we process at MOVVIENDO TOURISM GROUP S.L. comes from: The data subject themselves.