BOOKROAD TRAVEL NETWORK complies with the guidelines of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (GDPR), ensuring at all times to guarantee correct use and processing of the user’s personal data.
WHAT DATA DO WE COLLECT THROUGH THE WEBSITE?
You can visit and use the services of the website www.bookroad.tours without identifying yourself or revealing any personal information about yourself.
The only personal data that BOOKROAD TRAVEL NETWORK will have access to will be those that the user voluntarily provides when contacting BOOKROAD TRAVEL NETWORK via email or any other means provided on the website.
We can process your IP, what operating system or browser you use, and even the duration of your visit anonymously.
WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR DATA?
The acceptance and consent of the interested party. In those cases where to make a request it is necessary to fill out a form and click on the send button, doing so will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to said form or acceptance of the privacy policy.
FOR WHAT PURPOSE WILL WE PROCESS YOUR PERSONAL DATA?
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you that the personal data that you voluntarily provide to us through the various input forms provided for this purpose on the website www.bookroad.tours or any other channel for collecting such data will be incorporated into the processing records under the responsibility of BOOKROAD TRAVEL NETWORK for the management of the data collected for the following purposes:
Resolve any query, request or petition made
Manage the requested service, answer your request or process your request
Manage electronic transactions through the Secure Payment platform
Keep you informed of any change or modification that may seem to be of interest to us through any means provided
Information by electronic means relating to your request
Send you commercial information about our products/services prior to your request request or consent.
Perform analysis and improvements on the website regarding new products and services
Management of the access extranet for Taxiberia Partners
Unsubscribe from our services
TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?
The data collected is adequate, pertinent and not excessive in relation to the scope and purposes described. Your data will be treated and stored in compliance with the security measures described in accordance with current regulations and guaranteeing its integrity and confidentiality at all times.
Your data will not be transferred to third parties, except under legal obligation, nor will it be shared with companies or entities outside of BOOKROAD TRAVEL NETWORK. You are informed of the following possible transfers of your data:
to public and private bodies for compliance with legal obligations under current regulations
to companies and collaborators for administrative and/or commercial management, for the management of the purposes described above, for the provision of services and the correct management of the company
to those in charge of the treatment necessary for the execution of the agreement
to companies in charge of our web support and maintenance, computer system, etc.
Any international transfer of data when using American applications will be subject to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy
In these cases, only for the purposes and uses that are exclusively necessary for the development of their activity for which their services were required, and they may not be used for a different purpose. For any transfer other than that specified above, you will be duly informed, and may exercise your right to object at any time.
Consent will be deemed to have been given as long as you do not expressly notify us of the revocation of consent to any of the treatments indicated above.
The fields marked with an asterisk (*) in the different forms are mandatory for the formalization of the corresponding request.
By providing us with your email, you expressly consent that we may contact you through this means.
The user of the website www.bookroad.tours will be the only party responsible for the truthfulness and accuracy of the data provided, with BOOKROAD TRAVEL NETWORK acting in good faith as a mere service provider. In the event that false data or data from third parties have been provided without their consent, BOOKROAD TRAVEL NETWORK reserves the right to immediately destroy the aforementioned data in order to protect the rights of the owner or owners of the same, exempting BOOKROAD TRAVEL NETWORK from any liability for failure to comply with this requirement.
BOOKROAD TRAVEL NETWORK is committed to fulfilling its obligation to keep personal data confidential and its duty to store them and will adopt all technical and organizational measures to guarantee the security of personal data and prevent their alteration, loss, processing or unauthorized access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed, all in accordance with the provisions of the regulations.
DATA OF MINORS?
We do not process data of minors under 14 years of age. Therefore, please refrain from providing them if you are not that age or, where applicable, from providing data of third parties who are not of that age. BOOKROAD TRAVEL NETWORK is exempt from any liability for failure to comply with this provision.
WHAT RIGHTS DO YOU HAVE?
To know whether we are processing your data or not
To access your personal data
To request the rectification of your data if it is inaccurate
To request the deletion of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw the consent granted
To request the limitation of the processing of your data, in some cases, in which case we will only keep it in accordance with current regulations
To transfer your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send it to the new controller you designate. It is only valid in certain cases
To file a claim with the Spanish Data Protection Agency or competent control authority, if you believe that we have not attended to you correctly
To revoke consent for any treatment for which you have consented, at any time.
If you modify any data, we appreciate that you let us know so that we can keep them updated.
The user of the WEB www.bookroad.tours may at any time exercise these rights under the terms established in the current regulations, by contacting the person responsible for the treatment:
In writing to the company address: Ctra. Zorroza-Castrejana, 42 (48013 Bilbao, Bizkaia)
By email to the address bookings@bookroad.tours
DO YOU WANT A FORM TO EXERCISE YOUR RIGHTS?
We have forms for exercising your rights. Please ask us for them by email or, if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or accompanied by a photocopy of your ID. If you are representing someone, you must attach a copy of their ID or have them sign it with their electronic signature.
HOW LONG DOES IT TAKE US TO RESPOND TO YOUR EXERCISE OF RIGHTS?
It depends on the right, but at most within one month from your request, and two months if the issue is very complex and we notify you that we need more time.
HOW LONG WILL WE KEEP YOUR PERSONAL DATA?
Personal data will be kept as long as you remain linked to us
Once you are no longer linked, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a Judge or Court may require them in accordance with the statute of limitations for legal actions
The data processed will be kept as long as the legal periods mentioned above do not expire, if there is a legal obligation to maintain them, or if there is no such legal period, until the interested party requests their deletion or revokes the consent granted
We will keep all information and communications related to the provision of our service, as long as the guarantees of the services last to address possible claims
SECURITY, COOKIES AND IP ADDRESSES?
The website uses information security techniques generally accepted in the industry, such as firewalls, access control procedures and cryptographic mechanisms, all with the aim of preventing unauthorized access to the data. To achieve these purposes, the user accepts that the provider obtains data for the purposes of the corresponding authentication of the access controls.
NOTIFICATION OF PERSONAL DATA SECURITY BREACHES
In the event of a breach of personal data security, unless it is unlikely that such a breach of security constitutes a risk to the rights and freedoms of natural persons, BOOKROAD TRAVEL NETWORK will notify the Spanish Data Protection Agency within 72 hours after having become aware of the incident, describing the nature of the breach, the possible consequences that could arise and the measures adopted or proposed to remedy the security breach; and if possible, the categories and approximate number of interested parties and data affected will be made known.
Likewise, BOOKROAD TRAVEL NETWORK will notify interested parties as soon as possible when it is likely that the breach of personal data security entails a high risk to the rights and freedoms of natural persons, describing the possible consequences that could arise and the measures adopted or proposed to remedy the security breach.
USE OF COOKIES AND ACTIVITY FILE
If we use any other type of cookies than those required, you can consult the cookie policy in the corresponding link from the start of our website.
The provider, on its own account or through a third party contracted to provide measurement services, may use cookies when a user browses the website. Cookies are files sent to the browser via a web server in order to record the user’s activities during their browsing time. The cookies used by the website are only associated with an anonymous user and their computer, and do not provide the user’s personal data by themselves. By using cookies, it is possible for the server where the website is located to recognise the web browser used by the user in order to make browsing easier, allowing, for example, access to users who have previously registered, access to areas, services, promotions or contests reserved exclusively for them without having to register on each visit. They are also used to measure the audience and traffic parameters, control the progress and number of entries. The user has the option of configuring his browser to be notified of the receipt of cookies and to prevent their installation on his computer. Please consult the instructions and manuals of your browser for further information. In order to use the website, it is not necessary for the user to allow the installation of cookies sent by the website, or by the third party acting on its behalf, without prejudice to the fact that it is necessary for the user to log in as such in each of the services whose provision requires prior registration or login. The cookies used on this website are, in any case, temporary in nature with the sole purpose of making subsequent transmission more efficient. Under no circumstances will cookies be used to collect personal information.
IP ADDRESSES
The website servers can automatically detect the IP address and domain name used by the user. An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a duly registered server activity file that allows the subsequent processing of the data in order to obtain purely statistical measurements that allow us to know the number of page impressions, the number of visits made to the web services, the order of visits, the access point, etc.