Privacy Policy

SIPILU VIAJES PARA TODOS SL makes available to you, through the websites andaluciaapie.com, cordobapie.es, sevillapie.es, malagapie.es and granadatours.com.es, this privacy policy with the aim of informing you in detail about how we process your personal data and protect your privacy and the information you provide to us. Should we make any changes to this policy in the future, we will notify you via the website or through other means so that you are aware of any new privacy conditions introduced.

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation, and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights, we inform you of the following:

Data Controller
Holder: SIPILU VIAJES PARA TODOS SL
Tax ID: B56123839
Registered address: Plaza de los Carrillos, 5, Local, 14001, Córdoba
Telephone: 625085254
Email: administracion@cordobaembrujada.com
Websites: andaluciaapie.com, cordobapie.es, sevillapie.es, malagapie.es and granadatours.com.es

For what purposes do we process your personal data?:

We collect and process your personal information generally in order to manage the relationship we maintain with you. The main purposes we have identified are as follows:

Managing and contracting the services offered by our company
Handling requests for information, suggestions and complaints you may send us
Keeping you informed about events, offers, products and services that may be of interest to you through various communication channels, provided you have given your consent
Managing the employment relationship in the case of our employees
Managing the commercial relationship with our suppliers
Managing recruitment processes
Ensuring the safety of people and premises

How do we collect your information?

We collect your personal information through different means, but you will always be informed at the point of collection through informational clauses about the data controller, the purpose and legal basis for processing, the recipients of the data and the retention period, as well as how you can exercise your data protection rights.

In general, the personal information we process is limited to identifying data (name and surname, date of birth, address, national ID number, telephone and email), services contracted and payment and billing data.

We obtain data from our potential clients/users relating to identification (name, surname, tax ID, postal address, telephone, email) and professional information (job title, workplace, sector) directly from them when they request information or make enquiries.

In cases involving employment management and recruitment, we collect academic and professional data in order to fulfil obligations arising from the employment relationship or, where applicable, to bring new members on board.

We use social media, which is another way we may reach you. Information collected through messages and communications you publish may contain personal information that is publicly available online. These social networks have their own privacy policies explaining how they use and share your information, so we recommend reviewing them before use to confirm you agree with how your information is collected, processed and shared.

Through our website, we collect personal information related to your browsing activity via the use of cookies. For clear and precise information about the cookies we use, their purposes and how to configure or disable them, please consult our Cookie Policy.

In addition, our premises are equipped with a video surveillance system whose purpose is to ensure the safety of people and property. Your image may therefore be recorded simply by entering the premises. Such footage is retained for a maximum period of one month from the date of capture and would only be shared with law enforcement authorities if strictly necessary.

User responsibility

By providing us with your data through electronic channels, the user guarantees that they are over 14 years of age and that the data provided is truthful, accurate, complete and up to date. By doing so, the user confirms that they are responsible for the accuracy of the information submitted and that they will keep it appropriately updated to reflect their actual situation. The user accepts responsibility for any false or inaccurate data they provide, as well as for any direct or indirect damages that may arise as a result.

How long do we retain your information?

We only retain your information for the period of time necessary to fulfil the purpose for which it was collected, to comply with legal obligations imposed on us and to address any potential liabilities that may arise from the fulfilment of the purpose for which the data was gathered.

If you wish to join our team and apply for one of our positions, the data you provide will be added to our employment database and retained for the duration of the selection process and for a maximum of two years, or until you exercise your right to erasure.

If at any point we have collected your data to approach you as a potential user of our services or to respond to an information request made by you, that data will be retained for a maximum of two years from the date of collection and will be deleted once that period has elapsed, provided no contractual relationship has been formalised, or at the moment you request it.

In all cases, and as a general rule, we will retain your personal information for as long as a contractual relationship binds us or until you exercise your right to erasure and/or restriction of processing. In such cases, the information will be blocked and not used beyond its retention, whilst it may be necessary for the exercise or defence of claims or where any form of liability may need to be addressed.

To whom do we share your data?

In general, we do not share your personal information, except in cases where we are required to do so by law.

However, on occasion and in order to develop and deliver the service you have requested, we may share your data with other partner companies.

You may inform us of your objection to the sharing of your data, although in that case it would not be possible to provide the requested service. Although this does not constitute a transfer of data, in order to provide the service you have requested, third-party companies acting as our suppliers may access your information to carry out the service we have engaged them to perform. These processors access your data in accordance with our instructions and may not use it for any other purpose, maintaining strict confidentiality at all times. Should it be necessary as a result of an incident recorded by our security cameras, your footage could be shared with law enforcement authorities in accordance with applicable legislation.

Furthermore, your personal information will be made available to public authorities, courts and tribunals to address any potential liabilities arising from the processing.

International data transfers

There are no international transfers of your data to countries outside the European Economic Area (EEA).

We have agreed with our suppliers that, for the provision of contracted services, they will use servers located within the EEA. Should we need to make use of servers located outside EU territory in the future, appropriate measures will be adopted and incorporated into this Privacy Policy, ensuring that such suppliers are covered by the Privacy Shield agreement or that other adequate safeguards are in place.

What are your rights regarding the processing of your data and how can you exercise them?

Data protection regulations allow you to exercise your rights of access, rectification, erasure and portability of data, as well as objection and restriction of processing, and the right not to be subject to decisions based solely on automated processing of your data, where applicable.

These rights are characterised as follows:

Their exercise is free of charge, unless the requests are manifestly unfounded or excessive (e.g. repetitive in nature), in which case we may charge a fee proportionate to the administrative costs incurred or refuse to act
You may exercise your rights directly or through a legal or voluntary representative
We must respond to your request within one month, although this period may be extended by a further two months where the complexity and volume of requests warrants it
We are obliged to inform you of the means by which you may exercise these rights, which must be accessible. We may not refuse the exercise of a right solely on the grounds that you have chosen a different method. Where the request is submitted electronically, the information will be provided by electronic means where possible, unless you request otherwise
If we do not act on your request, we will inform you within one month of the reasons for not doing so and of the possibility of lodging a complaint with a supervisory authority

To facilitate the exercise of your rights, we provide the following links to the request form for each right:

Right of access request form
Right of rectification request form
Right of objection request form
Right of erasure request form (right to be forgotten)
Right to restriction of processing request form
Right to data portability request form
Right not to be subject to automated individual decisions request form

To exercise your rights, we make the following means available to you:
1. By written and signed request addressed to the company, Ref. Exercise of GDPR Rights.
2. By sending a scanned and signed form to the email address indicated above, stating Exercise of GDPR Rights in the subject line.

In both cases, you must verify your identity by providing a photocopy or, where applicable, a scanned copy of your national ID or equivalent document, so that we can confirm we are responding only to the data subject or their legal representative, who must in that case provide proof of representation.

Furthermore, and especially if you feel that your rights have not been fully satisfied, please note that you may lodge a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid.

How do we protect your information?

We are committed to protecting your personal information.

We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and ensuring your privacy. In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of personal data.

In the contracts we enter into with our suppliers, we include clauses requiring them to maintain the duty of confidentiality with regard to personal data accessed in the course of the work assigned to them, and to implement the technical and organisational security measures necessary to ensure the ongoing confidentiality, integrity, availability and resilience of data processing systems and services.

All of these security measures are reviewed periodically to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed and no security system is impenetrable. In the event that any information under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the supervisory authority and, where applicable, inform any affected users so that they may take appropriate action.

Cargando...