Basic Information on Data Protection
Responsible: EARRA SERVICIOS TURIST S.L.
Purpose: To attend your request for information, execution of the contract for the provision of the service, sending commercial communications with your consent.
Legitimation: Execution of contract and consent of the data subject (art. 6.1 a) and b) RGPD).
Recipients: No data will be transferred to third parties, unless legally required.
Rights: You have the right to access, rectify and delete the data, as well as other rights, indicated in the additional information, which can be exercised by contacting CALLE XABIER LIZARDI 13 BAJO A, SAN SEBASTIAN, 20018, GIPUZKOA.
General:
For the purposes of the provisions of the European Data Protection Regulation EU 2016/679, of 27 April, of the Parliament and the Council, in Law 3/2018, of 5 December, on Data Protection and Guarantee of Digital Rights and other national legislation in force, EARRA SERVICIOS TURIST S.L., informs you that it fully complies with current legislation on the protection of personal data, and with the confidentiality commitments inherent to its activity.
EARRA SERVICIOS TURIST S.L. informs you of the existence of an information processing system, owned by EARRA SERVICIOS TURIST S.L., for the purposes of management, communication and information. This system is described in the corresponding Register of Processing Activities of the RT.
Security measures and levels of security:
EARRA SERVICIOS TURIST S.L. has adopted the necessary measures to ensure the security of information, as required by art. 32 of the RGPD, according to the nature of the personal data processed and the circumstances of the treatment, in order to avoid, as far as possible and always according to the state of the art, its alteration, loss, treatment or unauthorized access, thereby ensuring the confidentiality, integrity and availability of the same.
Scope of application:
The security measures that EARRA SERVICIOS TURIST S.L. has described in the Register of Processing Activities will be applied to all assets of the information processing system in which personal data are processed, in order to comply with current legislation on data protection.
All staff hired by EARRA SERVICIOS TURIST S.L. and its data processors are obliged to comply with the above regulations, with special attention to their functions and obligations, including the duty of secrecy that will be duly determined by EARRA SERVICIOS TURIST S.L..
International transfer of data:
EARRA SERVICIOS TURIST S.L., informs that when using the contact option Whatsapp, in relation to the personal data of which it is the owner and is treated by this way, are subject to International Data Transfer because the owners of the application are located outside the European Economic Area, specifically the headquarters of WhatsApp LLC, is located in Menlo Park, California, United States.
Data collection:
The acceptance of these conditions, requires the user to collect some essential data for the provision of its services, which will be requested personally through forms or the Web page. At the time of data collection, the user will be duly informed of their rights.
So that the information contained in our processing system is always updated and does not contain errors, we ask our customers and users to inform us, as soon as possible, of any changes and corrections to their personal data.
Exercise of rights:
To exercise your rights of access, challenge, rectification, cancellation, deletion or opposition, portability, limitation of treatment, you should contact EARRA SERVICIOS TURIST S.L., CALLE XABIER LIZARDI 13 BAJO A, SAN SEBASTIAN, 20018, GIPUZKOA. by written communication or by e-mail to the address info@earratours.eus. You can also file a complaint with the AEPD.
Consent:
The user will give his consent so that EARRA SERVICIOS TURIST S.L. can make use of their personal data in order to provide a correct fulfillment of the contracted services.
The completion of the form on the site or sending emails or other communications to EARRA SERVICIOS TURIST S.L., implies the express consent of the user to the inclusion of their personal data in the aforementioned processing system, owned by EARRA SERVICIOS TURIST S.L..
At the time of the request for this information, the customer or user will be informed of the recipient of the information, the purpose for which the data is collected, the identity and address of EARRA SERVICIOS TURIST S.L. and the power of the user to exercise their rights of access, challenge, rectification, cancellation, deletion or opposition, portability, limitation of treatment and to file a complaint with the AEPD.
Transfer to third parties:
EARRA SERVICIOS TURIST S.L. does not transfer personal data without the express consent of their owners, which must be granted on each occasion, being only transferred for the purpose expressed and always with the consent of the user or customer.
Confidentiality and professional secrecy:
The data collected in all private communications between EARRA SERVICIOS TURIST S.L. and customers or users will be treated with absolute confidentiality, committing EARRA SERVICIOS TURIST S.L. to the obligation of secrecy of personal data, its duty to keep them and take all necessary measures to prevent alteration, loss and unauthorized access or treatment, in accordance with the provisions of current regulations.
In addition, the information of any kind that the parties exchange with each other, that which they agree to be of such nature, or that which simply concerns the content of such information, will also have the status of confidential. The visualization of data through Internet, will not suppose the direct access to the same ones, except with the express consent of its holder for each occasion.
We recommend that the customer does not provide any third party identification, password or reference numbers that EARRA SERVICIOS TURIST S.L. could provide. Also, to ensure that the protection of professional secrecy between EARRA SERVICIOS TURIST S.L. and the client is preserved in all communications, the customer / user should not disclose confidential information to third parties.
Changes in Security Policy and Data Protection:
EARRA SERVICIOS TURIST S.L. reserves the right to modify its security policy and data protection in order to adapt it to new legislation or case law, as well as those that may arise from existing standard codes on the subject, or by strategic corporate decisions, with effect from the date of publication of such modification on the website of EARRA SERVICIOS TURIST S.L..
Contact Address:
The website https://www.earratours.com/, is managed by EARRA SERVICIOS TURIST S.L., registered in the Commercial Register with the following data Volume 3048, Book, Folio 199, Page SS-44882 and Inscription 1 and CIF B10617397.
The information processing system created, is located at the registered office, which is established for the purposes of this Legal Notice, in CALLE XABIER LIZARDI 13 BAJO A, SAN SEBASTIAN, 20018, GIPUZKOA; under the supervision and control of EARRA SERVICIOS TURIST S.L., who assumes responsibility for the adoption of security measures of a technical and organizational nature to protect the confidentiality and integrity of the information, in accordance with the provisions of the European Data Protection Regulation EU 2016/679, of 27 April, of the Parliament and the Council; the Organic Law 3/2018, of 5 December, on Data Protection and Guarantee of Digital Rights and other national legislation in force and other applicable legislation.
EARRA SERVICIOS TURIST S.L. in accordance with Law 34/2002, of Services of the Information Society and Electronic Commerce, informs you that the broad meaning of that law, includes among these services the provision of information by such means. In any case, shall apply in this regard, the European Data Protection Regulation EU 2016/679 of 27 April of the Parliament and the Council; the Organic Law 3/2018 of 5 December, on Data Protection and Guarantee of Digital Rights and other national legislation in force and its implementing regulations, especially with regard to the collection of personal data, information to data subjects and the creation and maintenance of personal data processing.