PRIVACY POLICY

PRIVACY POLICY

 

DATA PROTECTION, SECURITY AN PRIVACY

Viajes El Corte Inglés, SA, whose registered office is Calle Hermosilla, 112, 28009 Madrid (Spain), is responsible for processing the personal data provided by users through InBusines.

At Viajes El Corte Inglés, we undertake to ensure that your personal information is protected and is not used improperly.

In this document we explain who is responsible for processing your data, for what purpose your personal information is processed, the legal grounds for the processing, how we collect it, why we collect it, how we use it, your rights, and also the processes we have put in place to protect your privacy.

By providing us with your personal information and using our websites, we understand that you have read and understood the terms set out relating to information on personal data protection. At Viajes El Corte Inglés, we assume responsibility for complying with the Spanish and European data protection legislation currently in force, and our objective is to process your data lawfully, fairly and transparently.

Who is responsible for processing your data?

According to current regulations, it is the natural or legal person who, along or together with others, determines the purposes of and the means used for the processing.

Viajes El Corte Inglés is responsible for any processing it carries out using its customers’ personal information.

For what purpose do we collect your personal information?

For purposes covered in the contractual relationship:

The main reason why we collect your personal information is because it is necessary to manage your travel request and, once your request has been confirmed, to uphold the contractual relationship.

What are the legal grounds for processing the personal information?

We base our right to process your personal information, on several legal grounds:

* To comply with a contract and/or commercial relationship, and/or on the consent requested.

To whom can we communicate your personal information?

We will not transfer the data you provide us with under any circumstances.

Likewise, your personal data will be at the disposal of government authorities, judges and courts, for the purpose of dealing with any liabilities arising out of processing it.

International transfers

Viajes El Corte Inglés does not expect to transfer data to other countries. The personal information that we collect is kept in Spain; although some companies in the group may have a presence in other countries and your personal information may be collected in the country in which you live, we subsequently install and store this information in our systems. The third parties with whom we share your personal data can manage or transfer it outside Spain and the European Union to other countries where they have facilities. In this case they will comply with the requirements established by the Spanish Data Protection Agency and the European Union.

We will ensure both that any transfers of your personal data carried out by us or by those third parties with whom we share it, and the way in which we manage your personal data, comply with the legislation applicable to us. In any event, the transfer, storage and management of your personal data by us will always be governed by this Privacy Policy.

How can you exercise your rights?

You are entitled to have control over the personal data we collect; in this way we also ensure that it is accurate and truthful.

You are entitled to obtain access to your personal data, as well as to request that any inaccurate data be corrected or, where appropriate, to request it be erased when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under certain circumstances, and for reasons relating to your particular situation, you may object to your data being processed. Your personal data will cease to be processed for those purposes to which you have expressed your objection. Likewise, you can exercise the right to limit any processing of your personal data and request conservation thereof.

Under certain circumstances, you may request that your data be transferred to another data processing controller.

You may exercise your rights at no cost whatsoever, and receive a response within the deadlines established by the data protection legislation in force. You can choose between the following means:

* By sending a request together with a photocopy and/or scanned copy of the National ID Document of the requesting party to the email address protecciondedatos@viajeseci.es.

You can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), particularly when you are dissatisfied with the response to your exercise of your rights. For more details, you can visit their website at www.agpd.es

How can you change the way we contact you to inform you about our products and services?

You can change the way we contact you as follows:

* By sending a request together with a photocopy and/or scanned copy of the National ID Document of the requesting party to the email address protecciondedatos@viajeseci.es.

For how long do we store your personal data?

We only store your personal data for as long that we need it to be able to use it in accordance with the purpose for which it was collected and according to the legal grounds for the processing thereof, in accordance with applicable law. We will keep your personal data while there is a contractual and/or commercial relationship with you, or so long as you do not exercise your right to erase, cancel and/or limit the processing of your data.

How do we protect your personal data?

We undertake to protect your personal data. We use the appropriate technical and organisational measures, with the purpose of protecting your personal data and your privacy and we review these measures regularly. We protect your personal data through the use of a combination of both physical and computer or logical security controls, including access controls restricting and handling the way in which your personal information and data is processed, administered and managed. We also ensure that our employees are appropriately trained to protect your personal data. Our procedures state that we can request you to prove your identity before sharing your personal data with you.

Recommendations and precautions

These are some of the precautions that we advise our clients to take:

* Do not provide your username or password to anyone.

* Do not write them down in places which can be easily accessed: computer, agenda.

* Always use our SSL security system.

* Always disconnect the browser session after having accessed a security zone or entered the username or password.

Amendments to this data protection information

If we have your email address or mobile telephone number, we will also send you an email or SMS with information about the changes. If necessary, we will renew your consent so that you confirm to us that you agree with these amendments.

This data protection information was last reviewed and updated in December 2018.