Privacy Policy

This Privacy Policy was last updated on 22.02.2021

The Privacy Policy is part of the General Conditions that govern the www.travelgatex.es Booking website URL, https://knowledge.travelgatex.com (TravelgateX knowledge base)  https://docs.travelgatex.com/ (TravelgateX documentation site) https://status.travelgatex.com/ (TravelgateX status site) along with the Cookie Policy and the Legal Notice. 

XML TRAVELGATE SL, reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Website. In the event that a user has registered on the Website and accesses his or her account or profile, when accessing the Website, he or she will be informed of any substantial changes in relation to the processing of his or her personal data.

 

Who is responsible for the processing of your data?

The data collected or voluntarily provided by you through the Website, either by browsing it, as well as all those you may provide us with in the contact forms, via email or telephone, will be collected and processed by the Data Controller, whose details are indicated below:

 

XML TRAVELGATE SL  CIF: B57737660

Domicilio: Edificio Europa, Local 1, bajos, Parc Bit, 07121 Palma

Inscrita en el Registro Mercantil de Palma de Mallorca, Tomo 2482, Folio 215, Hoja PM-68734, insc. 1 

Contact at XML TRAVELGATE SL for the protection of your personal data.

C/ Edificio Europa, Local 1, bajos, Parc Bit, 07121 Palma

Phone: 871 968 181

Mail: dpo@xmltravelgate.com

If, for any reason, you wish to contact us in any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

 

What data do we collect through the website?

By the simple act of browsing the Website, XML TRAVELGATE SL will collect information regarding:

  • IP address.
  • Browser version.
  • Operating System.
  • Duration of the visit or navigation through the Website.

This information is stored by means of Google Analytics, so we refer to Google's Privacy Policy, as Google collects and processes this information. http://www.google.com/intl/en/policies/privacy/

Similarly, the Web Page provides the utility of Google Maps, which can access your location, if you allow it, in order to provide greater specificity on the distance and / or paths our headquarters. In this regard, we refer to the Privacy Policy used by Google Maps, in order to know the use and treatment of such data http://www.google.com/intl/en/policies/privacy/

The information that we handle will not be related to a specific user and will be stored in our databases, with the purpose of making statistical analyses, improvements in the Website, about our products and/or services and will help us to improve our commercial strategy. The data will not be communicated to third parties.

User registration on the website/ Sending of forms

In order to access certain products and/or services it is necessary for the user to fill out a form. To do so, the registration form asks for a series of personal data. The data are necessary and mandatory to carry out such registration. In the case of not providing such fields, the registration will not be carried out.

In this case, the navigation data will be associated to the user's registration data, identifying the same specific user who navigates the Web Page. In this way, it will be possible to personalize the offer of products and/or services that, to our criterion, more adjusts to the user.

The registration data of each user will be incorporated into the databases of XML TRAVELGATE SL, along with the history of operations carried out by the same, and will be stored in the same until the account of the registered user is deleted. Once such an account has been deleted, said information will be removed from our databases, keeping those data related to the transactions made in a separate section for 10 years, without access to or alteration of the same, in order to comply with the terms of the law. The data that are not linked to the transactions carried out will be kept unless you withdraw your consent, in which case they will be deleted immediately (always taking into account the legal deadlines).

The legal basis for the processing of your personal data is the execution of a contract between the parties.

In relation to the sending of communications and promotions by electronic means and the response to requests for information, the legitimacy of the treatment is the consent of the user.

The purposes of the treatment will be the following:

  • To manage your access to the Website.
  • Manage the reservation or purchase of the products and/or services and the utilities made available to you through the Website.
  • Keep you informed of the processing and status of your requests.
  • Respond to your request for information.

Thus, we inform you that you can receive communications via email and/or telephone, in order to inform you of possible incidents, errors, problems and / or status of your requests.

For the sending of commercial communications, the express consent of the user will be requested at the time of registration. In this regard, the user may revoke the consent given, addressing XML TRAVELGATE SL, using the means indicated above. In any case, in each commercial communication, the possibility will be given to unsubscribe at the time of receipt, either by means of a link and/or email address.

 

Sending of Newsletter

If the option to subscribe to the Newsletter of XML TRAVELGATE SL is enabled, it will be necessary to provide us with an email address to which it will be sent.

Such information will be stored in a database of XML TRAVELGATE SL, which will be registered until the interested party requests the cancellation of the same or, where appropriate, XML TRAVELGATE SL stops sending it.

The legal basis for the processing of these personal data is the express consent given by all those interested who subscribe to this service by checking the box provided for that purpose.

The data of the e-mails will be only treated and stored with the purpose of managing the sending of the Newsletter by the users who request it.

To send the Newsletter, the express consent of the user will be requested at the time of registration by checking the box for this purpose. In this regard, the user may revoke the consent given by contacting XML TRAVELGATE SL, using the means indicated above. In any case, in each communication, you will be given the opportunity to unsubscribe at the time of receipt, either through a link and/or email address.

 

If you are one of the following groups, please consult the drop-down information:

 

  • Web or E-mail contacts

For what purposes will we process your personal data?

  • To answer your queries, requests or requests.
  • To manage the requested service, to answer your request, or to process your request.
  • To provide you with information about your request by electronic means.
  • Commercial or event information by electronic means, provided that there is express authorization.

What is the legitimacy for the processing of your data?

The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill out a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.

All our forms have a checkbox with the following formula, in order to send the information:   I have read and accept the Privacy Policy.

 

  • Customers

For what purposes will we process your personal data?

  •  Preparation of the budget and monitoring of it through communications between both parties.
  • Information by electronic means, regarding your request.
  • Commercial or event information by electronic means, as long as there is express authorization.
  •  To manage the administrative, communication and logistics services carried out by the person in charge.
  •  Carry out the corresponding transactions.
  •  Invoicing and declaration of the opportune taxes.
  •  Control and recovery management.

What is the legitimacy for the treatment of your data?

The legal basis is your consent and the execution of a contract.

 

  • Suppliers

For what purposes will we treat your personal data?

  •   Information by electronic means, concerning your request.
  • Commercial or event information by electronic means, provided that there is express authorization.
  •  To manage the administrative, communications and logistics services carried out by the person in charge.
  •   Invoicing.
  •   Carry out the corresponding transactions.
  •   Invoicing and declaration of the opportune taxes.
  •   Control and recovery management.

What is the legitimacy for the treatment of your data?

    The legal basis is the acceptance of a contractual relationship, or in its absence your consent when contacting us or offering us your products by any means.

 

  • Partners

For what purposes will we process your personal data?

  • To organize the necessary actions to achieve the aims of the company.
  • Internal management and legal compliance.
  • Calling of meetings.
  • Carrying out the corresponding transactions.
  • Declaration of the opportune taxes.

What is the legitimacy for the treatment of your data?

The legal basis is contractual, the acceptance of a contract of sale of shares or similar, or the participation in the constitution of the company.

 

  • Social Network Contacts

For what purposes will we process your personal data?

  • To answer your queries, requests or requests.
  • To manage the requested service, to answer your request, or to process your request. 
  • To relate to you and create a community of followers.

What is the legitimacy for the processing of your data?

The acceptance of a contractual relationship in the environment of the social network that corresponds, and according to its privacy policies: 

             Facebook http://www.facebook.com/policy.php?ref=pf 

Instagram https://help.instagram.com/155833707900388 

Twitter    http://twitter.com/privacy 

Linkedin             http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv 

Youtube https://www.youtube.com/howyoutubeworks/policies/community-guidelines/







How long will we keep personal data?

We can only consult or cancel your data in a restricted way when you have a specific profile. We will treat them as long as you let us by following us, being friends or giving "like", "follow" or similar buttons.

Any correction of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.

 

  • Video Surveillance

For what purposes will we process your personal data?

  • Video surveillance of our facilities.
  • Control of our employees.
  • Sometimes they can be given to the courts and tribunals for the exercise of legitimate actions.

What is the legitimacy for the treatment of your data?

The unequivocal consent of the interested party when accessing our facilities after visualizing the informative poster of the video-surveillance area, as well as the legitimate interest of the person in charge.

 

  • Job Seekers

For what purposes will we process your personal data?

  • Organization of selection processes for the hiring of employees.
  • Appointing you for job interviews and evaluating your application.
  • If you have given us your consent, we may pass it on to collaborating or related entities, with the sole aim of helping you find employment.

What is the legitimacy for the processing of your data?

The legal basis is your unequivocal consent, by giving us your CV and receiving and signing information regarding the treatment we will carry out.

How long will we keep the personal data?

The CV will be stored for a period of one year, after which, if we have not contacted you, it will be deleted.

 

  • Human Resources

For what purposes will we process your personal data?

  • Management of the labor relationship and the worker's file.
  • To carry out all those administrative, fiscal and accounting procedures necessary to comply with our contractual commitments, obligations in the field of labour regulations, Social Security, prevention of occupational hazards, tax and accounting.
  • Management of payroll payments through financial institutions.
  • Hourly control through the access control system by means of fingerprint/card (if applicable).
  • Management of group insurance / pension plan of the entity.
  • Carrying out training activities, both subsidized and non subsidized.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is the execution of your employment contract. The fulfillment of the relevant legal obligations. The consent of the interested party.

 

Do we include personal data of third parties?

    No, as a general rule we only process the data provided by the owners. If you provide us with third party data, you must previously inform and request consent from such persons, or else you exempt us from any responsibility for non-compliance with this requirement.

 

And data of minors?

We do not process data of minors under 14 years old, so please do not provide them if you are not that age.

 

Will we communicate by electronic means?

We will only communicate with you in order to manage your request, if it is one of the means of contact you have provided us with.

If we make commercial communications, they will have been previously and expressly authorized by you.

 

What security measures do we apply?

You can rest assured: We have adopted an optimum level of protection for the personal data we handle, and have installed all the technical means and measures at our disposal, according to the state of technology, to prevent the loss, misuse, alteration, unauthorized access and theft of personal data.

 

To what extent will decision making be automated?

XML TRAVELGATE SL does not use fully automated decision-making processes to establish, develop or terminate a contractual relationship with the user. In the event that we use such processes in a particular case, we will keep you informed and communicate your rights in this regard if prescribed by law.

 

Will profiling take place?

In order to offer you products and/or services in accordance with your interests and to improve your user experience, we may create a "business profile" based on the information you provide. However, no automated decisions will be made based on that profile.

 

To which recipients will your data be communicated?

Your data will not be passed on to third parties, unless legally obliged to do so. Specifically, they will be communicated to the State Agency of the Tax Administration and to banks and financial entities for the collection of the service provided or product acquired, as well as to those in charge of the processing necessary for the execution of the agreement.

In case of purchase or payment, if you choose any application, web, platform, bank card, or any other online service, your data will be transferred to that platform or will be treated in its environment, always with the maximum security.

In the event that you have given us your consent for the processing of your name and images and other information, related to the activity of XML TRAVELGATE SL, will be disclosed on various social networks and website of XML TRAVELGATE SL.

 

International transfers

In the event that it is necessary for XML TRAVELGATE SL to carry out international data transfers, the company will ensure that such transfers are possible in accordance with the General Data Protection Regulations or any other requirement established by applicable regulations. To this end, the company shall adopt the necessary agreements to guarantee a level of data protection equivalent to that provided for in European regulations. All this under the qualification of the article 49.c) of the General Regulation of Data Protection or any other mechanism that guarantees a level of data protection equivalent to the one foreseen in the European regulations.

 

What rights do you have?

  • To know if we are treating your data or not.
  • To access your personal data.
  • To request the rectification of your data if they are inaccurate.
  • To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
  • To request the limitation of the treatment of your data, in some cases, in which case we will only keep them in accordance with the regulations in force.
  • To carry your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new person in charge you designate. This is only valid in certain cases.
  • To file a complaint with the Spanish Data Protection Agency, if you believe that we have not attended you correctly.
  • To revoke the consent for any treatment for which you have consented, at any time.

If you modify any data, we thank you for informing us so that we can keep them updated.

 

Would you like a form to exercise your rights?    

  • We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use the ones elaborated by the Spanish Agency of Protection of Data or third parties.
  • These forms must be electronically signed or accompanied by a photocopy of your ID.
  • If someone represents you, you must attach a copy of their ID card, or have them sign it with their electronic signature.
  • The forms can be submitted in person, sent by letter or by mail to the address of the person in charge at the beginning of this text.

You have the right to file a complaint with the Spanish Data Protection Agency, in the event that you consider that your request for rights has not been properly addressed.

The maximum period for resolution by XML TRAVELGATE SL is one month, counting from the effective receipt of your request by us.

You have the right to revoke at any time the consent for any of the treatments for which you have granted it. 

 

Do we use cookies?

If we use other types of cookies than those required, you can consult the cookie policy in the corresponding link from the beginning of our website.

 

How long will we keep your personal data?

  • Personal data will be kept for as long as you continue to be linked to us.
  • Once you have left our site, the personal data processed for each purpose will be kept for the legally established period of time, including the period in which a judge or court may require them in accordance with the statute of limitations for legal actions.
  • The data processed shall be maintained until the legal periods referred to above expire, if there is a legal obligation to maintain it, or if no such legal period exists, until the interested party requests its deletion or revokes the consent granted.
  • We will keep all the information and communications related to your purchase or to the provision of our service, as long as the guarantees of the products or services last, in order to attend to possible claims.
  • In each treatment or typology of data, we provide you with a specific period, which you can consult in the following table:

 

File

Document

Storage

Customers

Bills. Forms and coupons. Contracts

10 years. 15 years. 5 years

Human Resources

Pay slips, TC1, TC2, etc. CVs. Dismissal compensation docs. Contracts. Data of temporary workers. Worker's file.

10 years. Until the end of the selection process, and 1 year more with your consent. 4 years. For up to 5 years after leaving.

Marketing

Databases or web visitors

While processing is taking plac

Suppliers

Bills. Contracts.

10 years. 5 years 

Access control and video surveillance


Visitors list. Videos

30 days. 30 days block. 3 years destruction

Accounting

Accounting books and documents. Partner and management boards agreements, company bylaws, minutes, board of directors regulation and delegated committees. Financial statements, audit reports. Records and documents related to grants.

6 years

Fiscal

Running the administration of the RSB RIGGING SOLUTIONS SL, rights and obligations related to the payment of taxes. Administration of dividend payments and tax withholdings.

10 years 

Health and safety

Medical Records

5 years

Insurance 

Insurance policies

6 years (general rule). 2 years (damages). 5 years (personal). 10 years (life)

Purchases

Register all deliveries of goods or services, intra-community acquisitions, imports and exports for VAT purposes.

5 years

Legal

Documents Intellectual and Industrial Property. Contracts and agreements. Permits, licences, certificates. Confidentiality and non-competition agreements

5 years. 6 years from expiry date of permit, licence or certificate. 10 years (limitation period for bringing criminal action). Always the term of the obligation or confidentiality.

Protection of personal data

Processing of personal data, if different from the processing notified to the AEPD (Spanish Data Protection Agency). Personal data of employees stored in the networks, computers and communications equipment used by them, access controls and internal management/administration systems.

3 years. 5 years