Privacy Policy

This Privacy Policy sets out how VIAJES FOTOGRÁFICOS PHOTOWORLDTOURS SLU (“PhotoWorldTours”, “we”, “us”, or “our”) collects, uses, stores, and protects the personal data of its users and clients (“Users”, “Travelers”, or “you”) in strict compliance with the European General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD).

1. Data Controller (Responsable del Tratamiento)

The legal entity responsible for processing your personal data is:

• Company Name: VIAJES FOTOGRÁFICOS PHOTOWORLDTOURS SLU
• Tax Identification Number (NIF): B10657419
• Travel Agency License: C.A.A.405
• Email Contact: [email protected]

2. Categories of Personal Data Collected

We collect and process the following types of personal data:

• Identity & Contact Data: Full name, email address, telephone number, physical address, and profile picture.
• Travel & Logistics Data: Passport details (when required for bookings), flight numbers, travel itineraries, and specific travel preferences.
• Financial Data: Payment details, billing address, and transaction history processed through our secure payment gateways.
• Technical & Usage Data: IP address, browser type, operating system, pages viewed, and website interaction metrics gathered through cookies.

3. Purposes and Legal Basis for Processing

We process your data based on the following legal grounds under the GDPR:

• Performance of a Contract (Art. 6.1.b GDPR): To manage your account, process bookings, issue invoices, communicate trip updates, and deliver our photography tour services.
• Consent (Art. 6.1.a GDPR): To send you marketing newsletters, promotional offers, or tailored communications, provided you have explicitly opted in. You may withdraw this consent at any time.
• Legitimate Interest (Art. 6.1.f GDPR): To optimize website functionality, ensure network security, prevent fraudulent activity, and record calls for customer service quality control.
• Legal Obligation (Art. 6.1.c GDPR): To comply with tax regulations, accounting laws, and mandatory reporting to Spanish law enforcement authorities.

4. International Data Transfers (Critical for Travelers)

To execute international photography tours, PhotoWorldTours must transfer relevant personal data (such as names, passport details, and flight itineraries) to third-party suppliers, local transport companies, hotels, and local tour guides located outside the European Economic Area (EEA) in the destination country of your chosen tour.

By booking a tour to a destination outside the EEA, you explicitly acknowledge and consent to these international data transfers, which are strictly necessary for the fulfillment of the travel contract.

5. Data Sharing and Third-Party Vendors

We do not sell your personal data. We only share your data with:

• Service Providers: Secured payment processors, cloud hosting platforms, web analytics tools, and email marketing infrastructure acting as data processors under strict confidentiality contracts.
• Legal Authorities: Government agencies, tax authorities, or law enforcement bodies if required by applicable Spanish or European laws.

6. Cookies and Tracking Technologies

Our website utilizes cookies to ensure core technical functionalities (such as user login and shopping cart persistence) and to analyze web traffic via tools like Google Analytics. For detailed information regarding the types of cookies we use, their duration, and how you can disable them via your browser settings, please consult our dedicated Cookie Policy page.

7. Data Retention Period

We store your personal data only for as long as necessary to fulfill the purposes outlined in Section 3, or until you request its erasure or withdraw your consent. Following the conclusion of a contractual relationship, your data will be kept securely blocked for the duration of the statutory limitation periods prescribed by Spanish tax, commercial, and civil liability laws (typically up to 5 to 6 years).

8. Your GDPR Rights

As a data subject under European law, you possess the following rights regarding your personal data:

• Right of Access: To request confirmation and a copy of the personal data we hold about you.
• Right to Rectification: To request the correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): To request the deletion of your data when it is no longer legally necessary.
• Right to Restriction: To temporarily restrict the processing of your data under specific statutory conditions.
• Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: To object to data processing based on legitimate interest or direct marketing.

To exercise any of these rights, please submit a written request accompanied by a proof of identity to [email protected].

9. Data Security

We implement robust technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. However, no data transmission over the Internet can be guaranteed as 100% secure; users transmit data through the platform at their own risk.

10. Children’s Privacy

Our services are designed exclusively for individuals who are at least 18 years of age. We do not knowingly collect personal data from minors. If we discover that a minor under the age of 16 has provided us with personal data without parental verification, we will purge that information immediately.

11. Right to Lodge a Complaint

If you believe that PhotoWorldTours has processed your personal data in violation of the GDPR, you have the right to file a formal complaint with the competent supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) located at C/ Jorge Juan, 6, 28001 – Madrid (www.aebd.es).

12. Updates to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time to align with legislative amendments or technical updates. The latest version will always be posted on this page with the corresponding effective date.