In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you about the processing of your personal data.
We may process the data you provide through the Website forms (contact and online purchase) and through your communications with us: identification data (name, surname, ID number), contact details (email, phone, postal address), billing data and passenger details required to provide the contracted service. We do not process special categories of data unless they are essential for the trip (e.g. accessibility needs) and you provide them voluntarily.
| Purpose | Legal basis |
|---|---|
| Handling enquiries made through the contact form or by email. | Consent of the data subject (Art. 6.1.a GDPR). |
| Managing the booking and purchase of trips and products, including confirmation messages, payment instructions, travel documents and after-sales support. | Performance of a contract (Art. 6.1.b GDPR). |
| Complying with tax and accounting obligations and those arising from package travel legislation. | Legal obligation (Art. 6.1.c GDPR). |
| Managing access to the restricted area for partner travel agencies. | Performance of a contractual or pre-contractual relationship (Art. 6.1.b GDPR). |
Your data may be shared with the providers required to deliver the contracted service (accommodation, transport companies, insurers, guides and local operators), with banks for payment processing, and with public authorities where required by law. When the destination is outside the European Economic Area, transferring data to destination providers is necessary for the performance of the contract (Art. 49.1.b GDPR).
Data will be kept for as long as the contractual relationship lasts and thereafter for the legally required periods (generally six years for accounting and tax records). Contact enquiry data will be kept for as long as necessary to handle them and for a maximum of one year.
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by sending a request to info@squaretravel.es enclosing a copy of your ID. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
We have adopted the technical and organisational measures necessary to guarantee the security of the data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art and the nature of the data processed.
We reserve the right to amend this policy to adapt it to legislative changes or changes in our activities. The version in force will always be the one published on this Website.
Provisional text pending legal review.