DATA PROTECTION POLICY
BASIC INFORMATION ABOUT DATA PROTECTION POLICY.
Data Controller Information Bilbao Smart Tours, with VAT number 78957889Q, and registered office at Henao 13, 3D, 48009-Bilbao (Vizcaya).
Purpose User management, compliance with legal obligations, advertising actions, and commercial prospecting
Legitimacy Express consent of the data subject, legitimate interest of the data controller, compliance with legal obligations, and contract execution.
Recipients Personal data may be shared with: Public authorities, service providers, and other companies belonging to Bilbao Smart Tours.
Rights You may exercise your rights of access, rectification, deletion, limitation, and portability by contacting the data controller.
Purpose User management, compliance with legal obligations, advertising actions, and commercial prospecting.
DETAILED INFORMATION ABOUT DATA PROTECTION POLICY.
Who is the data controller?
Identity: Bilbao Smart Tours
VAT number: 78957889Q
Registered Office: C/Henao nº 13, 3D, 48009 Bilbao
Phone: 944 08 02 16
Email: Info@bilbaosmarttours.com
WHY DO WE PROCESS YOUR DATA? PURPOSE.
The purpose of the collected data is:
User management for those who contact Bilbao Smart Tours through contact forms to request information about our services.
Technical administration, research, and development of the website.
Compliance with legal obligations, including but not limited to administrative, accounting, and tax control obligations.
Advertising and commercial prospecting purposes for our own products and services or those of duly authorized third parties.
When required by a European Union law or a national law, which may specify the general processing conditions and the types of data subject to processing, as well as the transfers required by legal compliance.
We will record your voice and retain telephone conversations to maintain service quality, using them as evidence in judicial or extrajudicial dispute procedures, and providing them to competent authorities when required.
HOW DO WE OBTAIN YOUR PERSONAL DATA?
We generally collect personal data directly from you through data request forms, phone conversations, postal or email communication.
However, for the indicated purposes, we may collect your personal data from other sources, such as public sources (newspapers and official bulletins, public registries, social networks, and the Internet) or from third parties who provide us with such information.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
A) Consent: The legal basis for data processing is the consent given by the data subject when filling out the form, with the requirement to check the box where the user agrees to the processing of their personal data.
B) Legitimate interest: Conducting statistical studies and quality control. Carrying out general or personalized commercial actions to offer you products or services similar to those you have contracted, which may be carried out by any means, including electronic (email, SMS, social networks, mobile applications, etc.).
C) Compliance with a legal obligation: We will communicate the provided data when required by competent public authorities, courts and tribunals, law enforcement agencies, or when expressly provided for by a law.
D) Under contract: Once the contractual relationship is established, the client authorizes the service provider to process personal data.
TO WHOM CAN WE DISCLOSE YOUR DATA?
We will ensure that the personal data collected are processed for legitimate purposes and under appropriate conditions, whether because you have authorized it, or to fulfill obligations or exercise legally recognized rights.
For the stated purposes and under the indicated conditions, your personal data may be disclosed to the following recipients, who will act as data processors:
Public authorities.
Other companies belonging to Bilbao Smart Tours.
Technical consultants.
Professionals, lawyers, experts.
Advertising and marketing companies for sending commercial communications, in accordance with the provisions of Law 34/2002 on Information Society Services and Electronic Commerce and based on the consents provided by you.
Service providers.
We will not share your personal data with unrelated third parties for sending our own commercial communications without your consent.
Finally, we may share your personal data in the following cases:
In the case of a possible or actual restructuring, transfer, or sale of all or any part of our company, assets, or stock.
To comply with any legal obligation.
WHERE WILL YOUR PERSONAL DATA BE PROCESSED?
No international transfers are made, so data processing will be limited to the national territory.
WHAT ARE YOUR RIGHTS, AND HOW CAN YOU EXERCISE THEM?
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, you can exercise the following rights regarding your personal data with the data controller:
ACCESS to your data to know the personal data we have.
Request the RECTIFICATION OR DELETION of your data. You can request the correction of inaccurate personal data or the deletion of data when it is no longer necessary, due to contract termination or non-contracting of any services after informational procedures.
Request LIMITATION of the processing of your data. Only the data necessary under tax legislation regarding the prescription of responsibilities, as provided by the General Data Protection Regulation, will be retained.
PORTABILITY of your data. You can request that we collect the personal data we have to transmit it to another data controller.
OPPOSITION to the processing of your data. You can exercise this right unless, due to contractual reasons or the prescription of responsibilities, data processing is essential.
To exercise any of the rights provided by current legislation, it will be necessary to attach a photocopy of the data subject’s identification document, writing to Bilbao Smart Tours, for the purposes of notifications, at Henao 13, 3D, 48009-Bilbao (Vizcaya), or by email to the Data Protection Officer, at the email address info@bilbaosmarttours.com.
The deadlines for exercising these rights will be 1 month from the receipt of the request, which may be extended by another 2 months, taking into account the complexity and volume of pending requests, in which case the data controller will inform the data subject of these circumstances.
You can withdraw your consent at any time without affecting the processing carried out prior to your withdrawal.
You can file a complaint with the data protection officer at the email address Info@bilbaosmarttours.com.
In the event that you are not satisfied with the exercise of your rights, you may file a complaint regarding the processing of your personal data with the Spanish Data Protection Agency at Calle Jorge Juan nº 6, 28001 Madrid.
HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
We will retain your personal data for the entire duration of the contracted agreement for the indicated purposes and, once this is completed:
For a period of 6 years from the last entry made for the purpose of complying with the accounting obligations contained in Article 30 of the Commercial Code.
For the periods of limitation of actions for claims based on the Civil Code.
We will not retain your personal data longer than strictly necessary, and we will do so only for the purposes for which they were obtained.
HOW CAN YOU CONTACT US?
If you have any questions about how we use your personal data, you can contact us through the means indicated in point 1 of this statement.
HOW OFTEN DO WE UPDATE THIS PRIVACY NOTICE?
We periodically review this privacy notice. We will ensure that the most recent version is available on this website and will directly inform you of any major changes that may affect you.