Privacy Policy

Controller of your personal data

• Controller's identity: CITITRAVEL S.A.
• Trade name: CITITRAVEL
• Tax ID (NIF/CIF): A29151834
• Address: C/ Conde de Gálvez nº 3, 29017 Málaga, Spain
• Email: rgpd@cititravel.es
• Business activity: Travel agency specialising in Incentives, Meetings, Product Launches and Conferences. Travel agencies carrying out this activity are known as DMCs (Destination Management Companies).
• Registered with the Mercantile Registry of Málaga, volume 769, book 598, section 3, folio 51, sheet 5934-A.

For the purposes of the General Data Protection Regulation referred to above, the personal data submitted through the website forms will be processed under the «Website contacts» processing activity.

All technical and organisational security measures established by the applicable legislation are implemented for the processing of the data.

Principles we apply to personal information

When processing personal data, we apply the following principles, which comply with the requirements of the General Data Protection Regulation (GDPR):

• Principle of lawfulness, fairness and transparency: we always require the data subject's consent to process their personal data for one or more specific purposes, of which we will inform beforehand with absolute transparency.
• Principle of data minimisation: we only request the data strictly necessary in relation to the purposes for which it is required. The minimum possible.
• Principle of storage limitation: data will be kept for no longer than is necessary for the purposes of the processing.
• Principle of integrity and confidentiality: data will be processed in a manner that ensures appropriate security of the personal data and guarantees its confidentiality.

How personal data is collected on this website

The personal data collected through the website comes from:

• Contact form.
• Submission of a curriculum vitae to the address empleo@cititravel.es.

What are your rights when you provide us with your data?

Data subjects have the right to:

• Request access to their personal data.
• Request its rectification or erasure.
• Request the restriction of its processing.
• Object to the processing.
• Request the portability of the data.

They may access their personal data, as well as request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction of the processing of their data, in which case it will only be kept for the exercise or defence of claims.

In certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. CITITRAVEL will stop processing the data, except for compelling legitimate grounds or for the exercise or defence of possible claims. They may also request the portability of their data.

You also have the right to withdraw the consent you have given at any time, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.

You may exercise these rights by writing to CITITRAVEL, C/ Conde de Gálvez nº 3, 29017 Málaga, Spain, or to the email address rgpd@cititravel.es, indicating the right you wish to exercise and providing proof of your identity.

Data subjects also have the right to lodge a complaint with the supervisory authority — in this case the Spanish Data Protection Agency (AEPD) — if they consider that the processing of their personal data infringes the Regulation.

For what purpose do we process your personal data?

When you access our website and contact us — for example through the contact form or by email — you are providing personal information for which CITITRAVEL is responsible. This information may include personal data such as your name, postal address, email address, telephone number and other information. By providing this information, you consent to it being collected, used, managed and stored by CITITRAVEL, only as described in the Legal Notice and in this Privacy Policy.

CITITRAVEL has different systems for capturing personal information, and we process the information provided by website users for the following purpose, depending on the capture system:

• Contact form: we request a name and email address so that the website user can contact us if they would like us to organise an event for them. We will use the personal data to respond to requests.
• Sending emails: users may contact us through the various email addresses published on the website. The personal data we obtain is the email address and the sender's name. We use this data to reply to the emails received.

There are other purposes for which we process your personal data:

• To ensure compliance with the terms of use and applicable law.
• Other non-identifying data is also collected by means of certain cookies that are downloaded to the user's computer when browsing this website, as detailed in the cookie policy.
• To manage social media. CITITRAVEL may have a presence on social media. The processing of the data of people who become followers of CITITRAVEL's official pages will be governed by this section, as well as by the terms of use of each social network. CITITRAVEL will process personal data in order to properly manage its presence, informing of CITITRAVEL's activities, products or services. Under no circumstances will follower profiles on social media be used to send advertising individually.

In accordance with the provisions of the General Data Protection Regulation (GDPR) 2016/679, CITITRAVEL S.A., with registered office at C/ Conde de Gálvez nº 3, 29017 Málaga, Spain, will be the controller of the data corresponding to «Website contacts».

CITITRAVEL does not sell, rent or transfer personal data that may identify the user, nor will it do so in the future, to third parties without prior consent.

Legal basis for processing your data

The legal basis for processing your data is consent.

Contacting us or posting comments on this website requires consent to this privacy policy.

The prospective or commercial offer of products and services is based on the consent requested from you, and the withdrawal of this consent will in no case be a condition for the erasure of the personal data.

Data categories

The categories of data processed are:

• Identifying data, specifically name and email address.

No specially protected categories of data are processed.

How long will we keep your data?

The data will be kept for as long as the purpose for which it was collected remains, or until the data subject requests its erasure and, where applicable, for the periods legally established to address possible liabilities arising from the processing.

Browsing

When browsing the website, non-identifiable data may be collected, which may include IP addresses, (approximate) geographical location, a record of how the services and sites are used, and other data that cannot be used to identify the user. Non-identifying data also includes data related to browsing habits through third-party services. This website uses Google Analytics as a third-party analytics service.

The use of Google Analytics may involve the international transfer of data to third countries; such transfers are carried out in accordance with the safeguards provided for in the GDPR. You can find more information in our cookie policy.

The website also uses the web analytics tracker of Metricool Software, S.L. (Spain). According to its provider, this tracker does not use cookies, does not store information on the visitor's device and does not assign identifiers. It accesses the IP address during the connection without storing it, in order to count visits and their approximate geographical origin.

Confidentiality and security of the data

In the use and processing of users' personal data, CITITRAVEL undertakes to respect its confidentiality and to use it in accordance with its purpose, as well as to comply with its obligation to keep it and to adopt all measures to prevent its alteration, loss, unauthorised processing or access, in accordance with the provisions of the data protection legislation in force.

CITITRAVEL cannot guarantee the absolute impregnability of the Internet and, therefore, the inviolability of the data against fraudulent access by third parties.

Accuracy and truthfulness of the data

As a user, you are solely responsible for the truthfulness and accuracy of the data you submit to CITITRAVEL through any of its web portals (cititravel.es / cititraveldmc.com), releasing CITITRAVEL from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Acceptance and consent

The user declares that they have been informed of the conditions regarding the protection of personal data, accepting and consenting to its processing by CITITRAVEL in the manner and for the purposes indicated in this privacy policy.

Changes to the privacy policy

CITITRAVEL reserves the right to modify this policy in order to adapt it to legislative or case-law developments, as well as to industry practices.

Commercial emails

In accordance with the LSSI-CE, CITITRAVEL does not engage in SPAM practices and therefore does not send commercial emails electronically that have not been previously requested or authorised by the user. Consequently, in each of the website forms, the user has the option to give their express consent to receive our newsletter, regardless of the commercial information specifically requested.

In accordance with the provisions of Law 34/2002 on Information Society Services and Electronic Commerce, CITITRAVEL undertakes not to send commercial communications without duly identifying them.

Questions about this policy or your rights

If you have any questions or comments about this policy, or if you have any concerns about the way in which any personal information you have provided to us may have been handled, you can contact us by post or by email at: rgpd@cititravel.es.