Introduction
Welcome to Andaluxian Journeys (“Company”, “we”, “our”, or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and safeguard your information when you visit our website (the “Site”) and use our services, including payment processing by GetNet by Santander.
By using our Site and services, you agree to the terms of this Privacy Policy.
Data Controller
The data controller for the purposes of the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable privacy laws is:
Andaluxian Journeys
C. Fernando Camino 11, Malaga, 29016 Spain
Email: discover@andaluxianjourneys.com
Telephone: +34 674 107 072
Data We Collect
We collect the following types of personal data:
– Identity Information: Name, surname, nationality, passport/ID number.
– Contact Information: Email address, phone number, mailing address.
– Payment Information: Credit/debit card details, billing address (processed securely via GetNet by Santander;
we do not store payment details).
– Booking Information: Travel preferences, itineraries, and related details.
– Technical Data: IP address, browser type, device information, and website usage statistics.
– Communication Data: Emails, customer support inquiries, and messages.
All data collected is processed in compliance with Spanish law (Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales) and GDPR.
How Long We Keep Your Data
We retain your data only for as long as necessary to fulfill our services. Customer booking data is stored for up to 5 years for legal compliance. Newsletter subscription data is retained until you unsubscribe.
Purposes of Data Processing
We process your data for the following purposes:
– To process bookings and payments securely via GetNet by Santander.
– To manage your travel arrangements and provide customer support.
– To comply with legal and regulatory obligations, including financial and anti-fraud regulations.
– To improve our services and enhance the user experience.
– To send transactional emails regarding your bookings and payments.
– To send marketing communications, if you have given explicit consent.
We do not sell, rent, or share your personal data with third parties for marketing or any other purposes. Your information remains strictly confidential and is only shared when necessary for fulfilling services or complying with legal obligations.
Payment Processing and Security
We use GetNet by Santander, a PCI-DSS-compliant payment gateway, to process all online transactions securely. Your payment data is:
– Encrypted using industry-standard SSL/TLS protocols.
– Stored only by GetNet by Santander and not retained by Andaluxian Journeys.
– Monitored for fraud prevention and compliance with Spanish banking regulations.
By making a payment on our site, you agree to GetNet by Santander’s privacy policy and terms of service.
Legal Basis for Processing
We process your personal data based on:
– Contractual necessity: To fulfill our travel service agreement with you.
– Legal obligations: Compliance with tax, banking, and anti-fraud laws.
– Legitimate interest: Service improvement and security measures.
– Consent: Where required, for marketing communications.
Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds: (a) Consent – when you subscribe to our newsletter or accept cookies; (b) Contractual necessity – when you book a tour with us; (c) Legal obligation – when required by law; (d) Legitimate interest – for marketing and service improvement.
Data Retention
We retain your data only for as long as necessary:
– Transaction records: Retained for 5 years per Spanish financial regulations.
– Customer support data: Retained for 2 years after service completion.
– Marketing preferences: Retained until you withdraw consent.
After the retention period, data is securely deleted or anonymized.
Data Sharing and Disclosure
We only share data when necessary:
– With GetNet by Santander for payment processing.
– With Spanish regulatory authorities when required by law.
– With third-party service providers (only those compliant with GDPR and Spanish data laws) to facilitate bookings and support
services.
We do not transfer personal data outside the European Economic Area (EEA) unless adequate protections are in place. We also do not sell, rent, or share data with third parties for any commercial purposes, ensuring strict confidentiality and security.
Your Rights Under GDPR
Under GDPR, you have the right to:
– Access your personal data.
– Rectify inaccuracies in your data.
– Erase your data (right to be forgotten).
– Restrict processing under certain conditions.
– Object to data processing.
– Withdraw consent for marketing communications.
– Lodge a complaint with the Spanish Data Protection Authority (AEPD – www.aepd.es) if you believe your rights are violated.
Under GDPR, you have the right to access, correct, delete, or restrict the processing of your personal data. You may also request data portability or withdraw your consent at any time.
To exercise these rights, please contact us at discover@andaluxianjourneys.com.
International Data Transfer
Some of our service providers are located outside the EEA, including cloud hosting and payment processors. We ensure that all transfers comply with GDPR through Standard Contractual Clauses (SCCs) and other safeguards.
Cookies and Tracing Technologies
Our Site uses cookies for:
– Essential website functionality.
– Analyzing traffic and performance.
– Enhancing user experience.
By using our Site, you consent to our use of cookies. You can manage cookie preferences in your browser settings.
Data Security Measures
We implement strict security measures to protect your data:
– End-to-end encryption for sensitive information.
– Secure servers and firewalls.
– Regular audits for compliance with banking and data protection laws.
– Restricted access to authorized personnel only.
In case of a data breach, we will notify affected users and authorities as required by law.
Changes to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated “Last Updated” date. If required by law, we will seek your consent for significant changes.
Contact Us
For any data-related inquiries, please contact our Data Protection Officer at:
Andaluxian Journeys
C. Fernando Camino 11, Malaga, 29016 Spain
Email: discover@andaluxianjourneys.com
Telephone: +34 674 107 072