Privacy Policy

IMPORTANT:

We invite you to carefully read this Privacy Statement to understand why we collect your personal data and how it is processed by SUITOURS, S.A., Avda. Montserrat, 5, 08397, Pineda de Mar, Barcelona.
This policy is subject to change, so it is advisable to review it each time you visit us.

This Privacy Policy was last updated on 09/12/2024.

This online privacy statement from SUITOURS, S.A. is public and accessible to all users and customers of SUITOURS, S.A. and applies to all websites of SUITOURS, S.A., with www.suitours.com being the main site or domain.

It also applies to any documents or messages issued by SUITOURS, S.A. that link to this policy or privacy statement or, where applicable, indicate that you should access it to understand how SUITOURS, S.A. uses your personal data.

Below, we provide general information on how your personal information is used. Further details on its use and processing follow.

Information regarding the use of personal data, as stipulated by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, concerning the protection of natural persons regarding the processing of personal data and the free movement of such data (GDPR) and Organic Law 3/2018, of December 5, on Personal Data Protection and the Guarantee of Digital Rights, which adapts the Regulation to Spanish legal framework and complements and develops its provisions (LOPDGDD).
SUITOURS, S.A. respects your right to privacy and complies with all applicable regulations to protect the personal data of its customers and users.
Your personal data is processed with the utmost confidentiality, and SUITOURS, S.A., as the Data Controller, has adopted the necessary technical and organizational measures to ensure the confidentiality and security of personal data, preventing alteration, loss, processing, or unauthorized access.
To receive information and, if applicable, to book or use the products and services that SUITOURS, S.A. offers through its website(s), it is necessary to provide certain personal data to tailor our services to your interests and needs.
We remind you that it is your responsibility to notify SUITOURS, S.A. of any changes to your data that you have registered on our sites so that we can maintain accurate records. To improve the services we offer, you may receive a satisfaction survey after using our services. In this survey, you will be asked to rate the services received and provide a brief comment on your experience.
We collect your personal information for several reasons:
• To respond to service requests
• To provide services
• To prepare quotes
• To send status updates on ongoing services
• To send promotions we believe may be of interest to our customers
• To conduct quality and satisfaction surveys to improve the services provided by SUITOURS, S.A.
• To complete necessary documentation for processing any incidents/assistance covered by your insurance company

Additionally, we may collect information related to your use of our websites through various technologies, such as the use of cookies. You may revoke this consent at any time and exercise your rights of access, rectification, deletion, processing restriction, data portability, and objection by following the procedures outlined in the "EXERCISING RIGHTS" section of this document.

SUITOURS, S.A. collects personal data through various channels: on the website www.suitours.com; via SUITOURS, S.A.'s customer service center; in SUITOURS, S.A.'s physical offices when requesting a quote or service; and through SUITOURS, S.A.'s pages on Facebook, Instagram, X (Twitter), and YouTube.
In all cases, whenever applicable, we will offer you the option to opt out of receiving advertising messages or communications.

For the management and fulfillment of contractual obligations, it may be necessary (and mandatory for service provision) to share your data (including information about allergies, food intolerances, etc.) with suppliers such as:
• Partner companies managing human resources, such as administrative service providers and/or law firms.
• Partner companies providing contracted services, such as transportation, accommodations, excursions, travel packages, etc.
• IT service providers, third parties that assist in providing digital and e-commerce services, CRM, web analytics, and search engines, among others.
• Third-party transportation companies, such as postal and courier services.
• Third parties that help provide IT services, such as platform providers, hosting services, database maintenance, and support for our software and applications that may contain your data.
All these third-party companies are highly trusted, and they are provided only with the necessary information to perform the service contracted by you. The agreements between these companies and SUITOURS, S.A. explicitly state that they cannot use your personal data for any purpose other than fulfilling your contracted service. We make every effort to ensure that all third parties we work with maintain the security of your personal data.
These providers may be located in countries requiring an international data transfer, including those that do not offer a level of protection equivalent to that required by the EU. Such transfers are expressly authorized by the data subject.
Additionally, in accordance with U.S. federal law, your personal data will be accessible to the U.S. Customs Department if you book a flight that originates, has a destination, or makes a stopover in the United States.
You authorize the disclosure of data such as name, tax ID, and banking details to financial entities with which SUITOURS, S.A. works solely for managing transfers, collections, and payments arising from the commercial relationship and the use of our services.
Public authorities may access data within their legal competences. According to Royal Decree 933/2021 of October 26, establishing registration and reporting obligations for businesses offering accommodation and vehicle rentals, data collected may be accessible to law enforcement agencies and public authorities within their competencies for crime prevention, detection, and investigation.
Personal data will not be shared with third parties except where legally required or by judicial request.
Finally, you authorize us to send necessary information to process any incidents/assistance covered by your insurance company.

An international data transfer involves the processing of personal data that entails its transmission outside the European Economic Area (EEA). This may include both the transfer or communication of data and the processing of data on behalf of the data controller within Spanish territory.
An international transfer involves the following entities:
• Data exporter: a natural or legal person, public or private entity, or administrative body established in Spain that, in accordance with the General Data Protection Regulation (GDPR), transfers personal data to a country outside the EEA.
• Personal data importer: a natural or legal person, public or private entity, or administrative body that receives the data in the destination country, acting as a data controller, data processor, or third party in an international data transfer.
To fulfill the service contracted with us, it may be necessary to transfer and store your personal data in a country outside the EEA. Additionally, your information may be processed by personnel outside this region who work for us or for our service providers.
SUITOURS, S.A. carries out international data transfers securely and in compliance with legal requirements. Since some countries lack regulations governing the use and transfer of personal data, we take measures to ensure that third parties adhere to the commitments outlined in this Policy. Such measures may include reviewing the privacy and security standards of third parties and signing specific contracts based on the standard contractual clauses adopted by the European Commission.
Service providers located outside the EEA, such as Facebook, Inc. or Google, LLC, may have access to your personal data. These providers adhere to the "Privacy Shield," which commits them to protecting your personal data under the rules and safeguards established by the European Union.

You may revoke at any time the authorization you have granted for the use of your data for a specific purpose. Such revocation of authorization cannot have retroactive effects.

Execution and management of the contracted service and invoicing

Without the requested data, the service cannot be performed.

Personal data, as well as service-related data, will be retained in our records for the time necessary to ensure the warranty of the provided service (5 years).

Billing-related data will be retained in our records for the period necessary to comply with applicable legal and tax obligations (5 years + the current year).

Regarding this data processing, you may, if you deem it necessary, exercise the following rights:

• Access, to know what data we retain and process.
• Rectification, if you consider that the data is incorrect or has changed (e.g., your contact details).

Inquiry processing

Personal data, contact details, and images will be retained in our records for the time necessary to handle your inquiry.

Regarding this data processing, you may, if you deem it necessary, exercise the following rights:

• Access, to know what data we retain and process.
• Objection and restriction, to prevent personal data from being processed—from the moment your request is processed—for the purpose of information services.
• Rectification, if you consider that the data is incorrect or has changed.
• Deletion, if you withdraw your consent for this processing.

Quality Service

To fulfill our quality commitments to customers, we occasionally conduct surveys to assess customer satisfaction with our services in order to improve them.

These surveys are conducted electronically (you receive an email with a link to the survey website), and no additional personal data beyond what you have previously provided is collected.

In any case, the contact details collected for sending the quality survey will only be used if you give us your explicit consent.

Personal data related to this processing will be retained for 3 months.

Regarding this data processing, you may, if you deem it necessary, exercise the following rights:

• Objection and restriction, to prevent personal data from being processed—from the moment your request is processed—for the purpose of the quality service.
• Rectification, if you consider that the data is incorrect or has changed.

Information about SUITOURS, S.A. services

To keep you informed about the services provided by SUITOURS, S.A. and special promotions, we need to process your contact details.

In each communication sent, you will have the option to unsubscribe; additionally, you can exercise the rights listed below at any time.

Regarding this data processing, you may, if you deem it necessary, exercise the following rights:

• Objection and restriction, to prevent personal data from being processed—from the moment your request is processed—for the purpose of information services.
• Rectification, if you consider that the data is incorrect or has changed.
• Deletion, if you withdraw your consent for this processing.

Quotation Preparation

The data you provide for quotation purposes will be retained in our records until you inform us of your decision to decline the execution of the quotation, or for up to 2 years. After this period, the data will be deleted. Otherwise, it will become part of the Service Execution processing.

Regarding this data processing, you may, if you deem it necessary, exercise the following rights:

• Access, to know what data we retain and process.
• Rectification, if you consider that the data is incorrect or has changed (e.g., your contact details).
• Deletion, if you definitively reject the quoted service by SUITOURS, S.A.

Job Application Review

The data you provide for participation in our recruitment processes will be retained for a maximum of 1 year, after which it will be deleted. If you are selected for the next phase, we will inform you of this decision.

Regarding this data processing, you may, if you deem it necessary, exercise the following rights:

• Access, to know what data we retain and process.
• Rectification, if you consider that the data is incorrect or has changed (e.g., your contact details).
• Deletion, if you withdraw your consent for this processing.

Browsing

While browsing SUITOURS, S.A., non-identifiable data may be collected, including IP addresses, approximate geographic location, records of how services and sites are used, and other data that cannot be used to identify the user. Non-identifiable data also includes browsing habits through third-party services.

We use this information to analyze trends, administer the site, track user movements across the site, and collect demographic information about our user base as a whole.

reCAPTCHA Service

The IP address used for browsing will be sent to Google as part of the system that distinguishes a human from an automated form-filling system.

All details about Google's privacy policy can be read at https://policies.google.com/privacy?hl=en

Communication with IATA-Associated Airlines

The data you provide may be communicated to airlines for the following purposes: Real-time flight updates, proactive notifications in case of service interruptions (cancellations, delays, etc.), baggage-related updates, and automatic transmission of rebooking information or boarding passes for available flights.

These contact details will be managed by IATA-associated airlines under their own conditions. You can check the aspects related to the use of this data and your data protection rights on the website of the corresponding airline, which is indicated on your ticket or flight reservation.

We use the reCAPTCHA service provided by Google Inc. (Google) to protect data submitted through the forms on our users' pages. This service differentiates between data submitted by individuals and automated messages and involves transmitting the IP address and other data required by Google for reCAPTCHA service usage. For this purpose, the data will be transmitted to Google for processing. The IP address will be encrypted by Google within EU member states and associated EEA states. Only in exceptional cases will IP addresses be transmitted to Google's servers in the United States for encryption. On behalf of this website’s owner, Google will use this information to evaluate user interactions with the service. The IP address transmitted by reCAPTCHA will remain separate from other Google data. Google's privacy policy applies to these data. You can read all the details of Google's privacy policy at https://policies.google.com/privacy?hl=en.

By using the reCAPTCHA service, the user consents to Google's processing of data about them in the manner and for the purposes outlined above.

This website uses Google Analytics, a web analytics service provided by Google, Inc., a Delaware company with its principal office at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, United States ("Google").

Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users interact with the site. The information generated by the cookie about your website use (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information on our behalf for the purpose of tracking website usage, compiling reports on website activity, and providing other services related to website activity and internet usage.
Google may transfer this information to third parties when required by law or when such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.

You may refuse the processing of your data or information by rejecting the use of cookies through your browser settings; however, please be aware that if you do this, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of your information by Google in the manner and for the purposes stated above.

In line with our philosophy, we consider the protection of your personal data to be fundamental. Therefore, we inform you that regarding your data privacy, you have the following rights:

• Right to Transparency: You have the right to receive clear and simple information about how we use your personal data. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right of Access: You have the right to know and access all personal data our company holds about you. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right to Erasure (also known as the Right to be Forgotten): You have the right to request the deletion of your personal information from internet service providers, provided there is no legitimate reason to retain the data. If requested, we are obliged to notify third parties with whom we have shared your data to delete any links, copies, or replications of such information. The goal is to completely remove your data from the internet and search engines. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right to Restriction of Processing: You have the right to request that our company limits the processing of your data if they are inaccurate, if processing is improper, if they are no longer needed for our purposes, or if you have objected under Article 21, Paragraph 1 of the GDPR while it is determined whether our company’s legitimate reasons override your interests. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right to Data Portability: The European Data Protection Regulation, along with Spain's Organic Law 3/2018 on Personal Data Protection and Digital Rights, and Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI), allows for the transmission, transfer, copying, or movement of data from our databases to others. This grants you the right to have your personal data transferred directly where technically possible. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right to Rectification: You have the right to have inaccurate or outdated personal data corrected or to have incomplete data completed. If you wish to exercise this right, please use one of the channels indicated at the end of this section.
• Right to Object: You have the right to object at any time to our company processing your personal data. If you wish to exercise this right, please use one of the channels indicated at the end of this section.

You may submit written requests to exercise your rights to:
SUITOURS, S.A.
A-58782541
Registered in the Mercantile Registry of Barcelona, in volume T. 10.045, L. 9.146, sec. 2ª, F. 059, H. 116.862, ins. 1.
By sending your requests to the following address:

SUITOURS, S.A.
Avda. Montserrat, 5, 08397, Pineda de Mar, Barcelona

You can also contact us through the following channels:

• In person at our offices
• By email at gdpr[-at-]suitours.com
• By phone at +34 937 670 901, where we are available to assist you.

Requests for data may require you to provide additional documentation to verify your identity.

You may also file a complaint directly with the Spanish Data Protection Agency (AEPD) in the following situations:

1. If you have requested to exercise your rights and have not received a response from the data controller within one month.
2. If you have received a response but disagree with it.
3. If you believe the data controller has violated data protection regulations in any of its activities.

For general information on privacy and data protection, visit: www.agpd.es.

This original text in Spanish can be found here