Privacy Policy
Right to Information
For the purposes of Regulation (EU) 2016/679 of April 27, 2016 (GDPR), on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), users are hereby informed of the existence of an automated processing of personal data created by RUTAS MEIGAS SL and under its responsibility, using the personal data that users may provide while browsing our Website, either at the time of registration or when sending an email message.
Data Controller
- Corporate name: RUTAS MEIGAS SL
- Tax Identification Number (CIF): B15649270
- Registered office: RÚA LISBOA 16, GROUND FLOOR LEFT – 15707 – SANTIAGO DE COMPOSTELA (A CORUÑA), SPAIN
- Telephone: +34 881 019 941
Email address for communications: info@rutasmeigas.com
Purpose of Processing
The purpose of processing your data is that described in each of the forms available on the website through which you provide us with your personal data.
Legal Basis
Article 6.1(a) of the GDPR. The data subject has given consent to the processing of their personal data for one or more specific purposes.
Data Retention and Processing
Your data will be retained for the time necessary to process your request, unless you indicate otherwise by exercising your right to erasure, or for the time required to comply with legal obligations and to address any potential liabilities arising from the fulfillment of the purpose for which the data were collected.
Where necessary, RUTAS MEIGAS SL will cancel or rectify data when they are inaccurate, incomplete, or no longer necessary for their intended purpose, in accordance with applicable data protection legislation.
Unless you inform us otherwise, we will assume that your data have not been modified, that you undertake to notify us of any changes, and that we have your consent to use them in order to maintain and strengthen the relationship between the parties.
The data provided will not be disclosed to third parties except where there is a legal obligation.
Your data may be disclosed to the various wholesale companies with which the entity operates, as well as to airlines, hotel establishments, car rental companies, and/or tour operators, where applicable, for the purpose of contracting their services or requesting information regarding availability and pricing.
Depending on the destination country of your trip, these providers may be located in countries that do not offer a level of data protection equivalent to that of the European Union. Specifically, international data transfers may take place when the data subject has explicitly consented, having been informed of the potential risks arising from such transfers due to the absence of an adequacy decision and appropriate safeguards. Additionally, where applicable, such transfers may be necessary for the performance of a contract between the data subject and the data controller or for the implementation of pre-contractual measures requested by the data subject.
Likewise, data may be disclosed to other companies with which RUTAS MEIGAS SL works or collaborates in order to carry out the corresponding management and/or services, as well as to other third parties where there is a legal obligation or the data subject’s consent.
RUTAS MEIGAS SL does not create any type of profile based on the information provided. No automated decisions based on profiling are carried out.
In accordance with Article 21 of Law 34/2002 on Information Society Services and Electronic Commerce, we will request your consent in order to send advertising communications that we believe may be of interest to you, by email or by any other equivalent electronic means.
You have the right to object to and/or withdraw your consent to the processing of the data indicated above, where applicable, at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal, by notifying the data controller at the address(es) indicated above.
Technical and Organizational Measures
RUTAS MEIGAS SL adopts technical, control, and procedural measures of a physical, organizational, and technological nature that are reasonably reliable and effective, aimed at preserving the integrity and security of your data and ensuring your privacy.
However, it assumes no liability for damages resulting from alterations that third parties may cause to users’ computer systems, electronic documents, or files.
In addition, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of personal data.
In contracts signed with our suppliers, we include clauses requiring them to maintain confidentiality with respect to the personal data accessed as a result of the services provided, as well as to implement the necessary technical and organizational security measures to ensure the ongoing confidentiality, integrity, availability, and resilience of personal data processing systems and services.
All these security measures are reviewed periodically to ensure their adequacy and effectiveness.
However, absolute security cannot be guaranteed, and no security system is completely impenetrable. Therefore, if any information under our control were compromised as a result of a data breach, we will take appropriate measures to investigate the incident and notify the Supervisory Authority and, where applicable, affected users so that they may take appropriate action.
User Rights
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, data portability, and the right not to be subject to automated individual decision-making, in relation to the data being processed, by contacting the data controller at the address indicated above or by email at info@rutasmeigas.com, attaching a copy of their national ID card or equivalent document.
If users are not satisfied with the exercise of their rights, they may file a complaint with the competent Data Protection Supervisory Authority, namely the Spanish Data Protection Agency (Agencia Española de Protección de Datos), whose contact details are available at:
https://sedeagpd.gob.es/sede-electronica-web/vistas/formNuevaReclamacion/reclamacion.jsf