PRIVACY POLICY
Last revision: 9 February 2023
This Privacy Policy applies to the website www.w2m.travel/es-es (hereinafter referred to as the website). Please read it carefully. Here you will find important information about the processing of your personal data and the rights granted to you by the current legislation in this matter.
We reserve the right to update our Privacy Policy at any time due to business decisions, as well as to comply with any changes in legislation or case law. If you have any questions or need any clarification regarding our Privacy Policy or your rights, you can contact us through the channels indicated below.
You declare that the data you provide us with, now or in the future, are correct and truthful and you undertake to inform us of any changes to them. In the event of providing personal data of third parties, it undertakes to obtain the prior consent of those concerned and to inform them of the content of this policy.
The fields on our forms that are marked as mandatory must be completed in order to be able to process your requests.
1. Who is responsible for the processing of your data?
Unless specifically indicated otherwise, the data controller for the personal data of users of this website is WORLD 2 MEET S.L.U. (hereinafter W2M), with registered office at Calle General Riera, 154, 07010 Palma (Illes Balears), Spain, is part of the World2Meet tourism group (W2M Group). + info about the Group here. For further information on the processing of your data or to exercise your rights under current legislation on the subject, please send an email to dataprotection@w2m.com or contact the Data Protection Officer of the W2M Group at dpo@w2m.com.
2. What will we process your data for and on what legal basis?
User relationship management: We process the data provided by our users in their queries through the contact form in order to deal with their requests.
These processing operations are necessary for the execution of the legal relationship with the users of the website or for the application of pre-contractual measures at their request.
Administration and management of the website security: We process browsing data (IP addresses or logs) to administer and manage the security of the website. This processing is based on our legitimate interest in ensuring the security of the website. This interest is expressly recognized by Recital 49 of the GDPR (General Data Protection Regulation). In weighing this interest against their rights and freedoms, it has been taken into account that this processing corresponds to general security practices and does not pose significant threats to data subjects.
Metrics: In order to evaluate and manage the quality of our services and products, we perform statistics based on aggregated data obtained from transaction data and web browsing data, e.g., IP address, weblogs, pages visited or actions performed on the website (+ info in our cookie policy). This processing is based on your consent for the installation of cookies, which you can revoke at any time through the website's configuration panel or by modifying the privacy settings in your web browser or device.
Consolidation of data for internal administrative purposes of the W2M Group. Personal data, economic data, reservations and, in general, data on transactions of goods and services generated by the businesses developed by the Group companies are consolidated in centralised databases for Group-internal administrative purposes. An overview of these data processing activities can be found below. For further information, in particular to find out which companies make up the Group, please refer to the PRIVACY POLICY APPLICABLE TO THE CONSOLIDATION OF PERSONAL DATA FOR INTERNAL ADMINISTRATIVE PURPOSES OF THE W2M GROUP.
W2M SERVICIOS CORPORATIVOS, S.L.U., with registered office at c/ General Riera 154, 07010 Palma (Illes Balears), Spain (hereinafter W2M) is responsible for the administration and security of the consolidated databases.
Each Group company is responsible for its data communications to W2M for consolidation and for its use of the consolidated Group data. These processing operations are based on the legitimate interest of the W2M Group to transfer personal data within the corporate Group for internal administrative purposes and to have a consolidated view of its business for business decision-making.
Creation of a group-level master record of individuals: he identifying and contact information you have provided, along with the information regarding your identification document (type and number), gender, and language, will be consolidated into a unified database at the Group level. The aim is to have a single register of individuals to optimise operational processes common to the Group companies where a person needs to be identified, e.g., for payments or invoicing of services or for integration with reservation systems. This unified database will be synchronised with the systems of the Group companies with which you have an existing relationship.
Management control and business data analysis: We also process the information obtained from the consolidation of economic data, reserves and, in general, the data of transactions of goods and services generated by the businesses developed by the companies of the Group to generate reports and analyse business data for business intelligence and management control purposes. These analyses and reports provide results in the form of aggregated data and are used to produce statistics and forecasts to facilitate business decision-making, optimise processes, measure the performance of the tourism products offered by the Group and establish commercial strategies.
Data consolidation for advertising purposes and commercial profiling: Data on customers and prospects of the W2M Group are consolidated into a commercial database for direct marketing purposes and for the creation of commercial profiles. An overview of these data processing activities can be found below. For further information, please refer to the PRIVACY POLICY APPLICABLE TO THE COMMERCIAL EXPLOITATION OF CUSTOMER AND PROSPECT DATA BY THE W2M GROUP.
The entity responsible for processing the data included in the commercial database of the W2M Group is W2M SERVICIOS CORPORATIVOS, S.L.U., with registered offices at c/ General Riera, 154, 07010 Palma (Illes Balears), Spain (hereinafter W2M).
Your inclusion in this database is based on the consent you have been asked to give. Failure to give your consent or withdrawal of consent does not condition the execution of bookings or the provision of the services you have contracted. The extent to which data relating to you will be consolidated in W2M's database and what specific use will be made of it will depend on the consent you have given at the time of providing your data. You may revoke this consent or change your preferences at any time in accordance with the mechanisms described in the "What are your rights?" section of the Privacy Policy applicable to the commercial exploitation of customer and prospect data.
Sending of non-personalised commercial communications and management of distribution lists (segmentation): W2M processes the identification and contact data that you have provided together with the data relating to your customer status, language and market/origin of the data, for the purpose of sending, by any means, non-personalised commercial communications relating to the tourism products and services offered under the brands operated by the Group. More info about the W2M Group brands here.
To manage our distribution lists, we segment the recipients of our communications according to data source, market and language. This processing consists of a simple classification according to objective criteria and is not intended for commercial profiling, prediction or behavioural analysis.
The service we use to send our marketing communications is located outside the European Economic Area. The service has been configured for data to be stored in a data centre located in the EU. As a supplementary measure, the contractual conditions applicable to this service include the standard clauses approved by the European Commission to ensure an adequate level of protection of personal data transferred to this data processor.
Development of a commercial profile for the personalisation of the Group's commercial communications and services: The data consolidated in the Group's commercial database is used to perform behavioural analysis and predictive modelling to understand and predict our customers' wants and needs, the actions related to the purchase of our products and services and the factors that condition them. If you have authorised the personalisation of the Group's services and communications, W2M will access the data generated by your bookings in order to include them in your commercial profile. This profile will be enriched with information generated from your interactions with the Group's companies and digital media, e.g., your requests for information or quotes or data generated by your browsing on our websites. More information about the data we include in our commercial profiles and their sources can be found in section 2 of the Privacy Policy applicable to the commercial exploitation of customer and potential customer data.
Your profile will allow us to determine when to send you a commercial communication and to personalise our offers according to the type of product you are likely to be interested in, based on the results of behavioural analysis and the application of predictive models.
We will also use the data included in your profile to personalise the treatment and services provided by the companies of the Group with which you interact, for example, to wish you a happy birthday or to take into account the preferences you have expressed at the time of making your reservations or during your use or enjoyment of the tourism products contracted. For this purpose, the companies of the Group with which you interact in the future will have access to your profile.
More information on the logic of our commercial profiles and what is involved in the personalisation of our services in section 3. b) of the Privacy Policy applicable to the commercial exploitation of customer and prospect data.
3. How long will we retain your data?
As a general rule, we will retain your data for the duration of the relationship you have with us, and in any case, for the periods established in the applicable legal provisions and for the time necessary to address any liabilities arising from the processing. We will delete your data when it is no longer necessary or relevant for the purposes for which it was collected. The information related to your browsing will be deleted once the web connection is terminated and the statistics have been generated.
Customer data consolidated for intra-Group administrative purposes shall be retained in accordance with the criteria set out in the PRIVACY POLICY APPLICABLE TO THE CONSOLIDATION OF DATA FOR W2M GROUP INTERNAL ADMINISTRATIVE PURPOSES.
The data processed by W2M for commercial purposes, including commercial profiles, will be retained for as long as you do not object to the processing or request its deletion, applying the retention criteria indicated in the PRIVACY POLICY APPLICABLE TO THE COMMERCIAL EXPLOITATION OF CUSTOMER AND PROSPECT DATA BY THE W2M GROUP.
4. Who can we disclose your data to?
Your data will only be disclosed to third parties by legal obligation, with your consent, or when your request involves such disclosure.
5. What are your rights?
You have the right to obtain confirmation of whether or not we are processing your personal data, and if so, to access that data. You may also request the rectification of inaccurate data or the completion of incomplete data, as well as the deletion of data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
In certain circumstances, you may request the restriction of the processing of your data. In such cases, we will only process the affected data for the establishment, exercise, or defence of legal claims or for the protection of the rights of other individuals. Under certain conditions and on grounds relating to your particular situation, you may also object to the processing of your data. In such cases, we will stop processing the data unless we have compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims. You may also, under certain conditions, request the portability of your data to be transferred to another data controller.
You may withdraw your consent for certain purposes without affecting the lawfulness of the processing based on your consent prior to its withdrawal. You may at any time revoke your consent to the processing of your data for commercial purposes, including commercial profiling, or change your preferences in this respect according to the mechanisms described in the section "What are your rights?" of the PRIVACY POLICY APPLICABLE TO THE COMMERCIAL EXPLOITATION OF CUSTOMER AND PROSPECT DATA BY THE W2M GROUP.
To exercise your data protection rights, you can send a request by postal mail or email, indicating the specific rights you wish to exercise, to: W2M Group - Attn. Responsible for the attention of RGPD rights, c/ General Riera 154, 07010 Palma (Illes Balears), Spain. Email: dataprotection@w2m.com.
You can obtain more information about your rights and how to exercise them on the W2M Group's Privacy Portal, on the website of the Spanish Data Protection Agency (Agencia Española de Proteccoón de Datos, AEPD) or by contacting the W2M Group's Data Protection Officer at dpo@w2m.com.