Privacy Policy

In compliance with personal data protection legislation and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, “GDPR”) and with Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights (hereinafter, “LOPDGDD”), Aura WA Tours (hereinafter referred to interchangeably as “Aura WA Tours” or the “Entity”) provides you below with information on the processing of your personal data.

1. DATA CONTROLLER

IDENTITY: Aura WA Tours

EMAIL:  info@aurawatours.com

2. ORIGIN OF THE PERSONAL DATA

3. PURPOSE AND LEGAL BASIS OF THE PROCESSING

The purposes and legal bases on which Aura WA Tours processes your personal data are as follows:

• Providing assistance with, managing and handling the requests, comments, enquiries, complaints or claims you submit through the channels available on the Aura WA Tours website is carried out on the basis of your consent when you send the request, comment, enquiry, complaint or claim (Article 6.1.a) of the GDPR).
• Performing the contractual obligations established between Aura WA Tours and you in connection with the purchase of products is carried out on the basis of contractual performance or the application of pre-contractual measures (Article 6.1.b) of the GDPR).
• Complying with the legal obligations of Aura WA Tours, possible court rulings and other decisions made by public authorities (including the State security forces and bodies, in compliance with obligations imposed by the applicable criminal law) is carried out on the basis of compliance with legal obligations (Article 6.1.c) of the GDPR) applicable to Aura WA Tours.
• Sending electronic commercial communications about services, promotions, products or activities is carried out on the basis of your consent (Article 21.1 of Law 34/2002 of 11 July on information society services and electronic commerce (LSSI-CE), and Article 6.1.a) of the GDPR). These commercial communications may be sent by automated and non-automated means (by post, telephone, SMS, instant messaging applications such as WhatsApp, email, or any other electronic or telematic means available at the time)
• Sending surveys on the level of satisfaction with and performance of our products and/or services, in order to improve them, is carried out on the basis of the legitimate interest of Aura WA Tours (Article 6.1.f) of the GDPR).
• Carrying out statistical studies and reports in order to understand how the services and/or products of Aura WA Tours perform is carried out on the basis of legitimate interest (Article 6.1.f) of the GDPR) in improving its products and/or services and developing and offering new solutions.

4. RETENTION OF PERSONAL DATA

Personal data will be processed for the period of time necessary to fulfil the purposes described in this Privacy Policy and the obligations imposed by applicable laws and statutory limitation periods, and for the establishment, exercise or defence of legal claims (in which case the personal data will be duly blocked).

Health data related to the diagnostic tool will be anonymised after the study has been sent by email.

5. RECIPIENTS OF THE PERSONAL DATA

Depending on the purpose for which your personal data is processed, the following parties may have access to it:

Through its suppliers, Aura WA Tours transfers personal data to countries located outside the European Economic Area. The international data transfers carried out have an adequate level of protection in accordance with Data Protection legislation. In any case, the international data transfers carried out are backed, in particular, by the use of standard contractual clauses approved by the European Commission.

6. DATA PROTECTION RIGHTS

The processing of personal data carried out by Aura WA Tours gives the data subject the following rights:

• Right of access to personal data: you can check whether Aura WA Tours processes your personal data and, if so, access it.
• Right to request rectification if the data is inaccurate, or to complete data that is incomplete.
• Right to request the erasure of your data.
• Right to request restriction of processing: in this case, your personal data will only be kept for the establishment, exercise or defence of legal claims.
• Right to object to processing: Aura WA Tours will stop processing your personal data, except where it must continue to be processed for legitimate reasons or for the establishment, exercise or defence of possible legal claims.
• Right to data portability: if you want your data to be processed by another controller, Aura WA Tours will, where technically possible, facilitate the transfer of your information to the new controller.
• Right not to be subject to a decision based solely on the automated processing of your personal data.

To exercise your rights you must contact Aura WA Tours by sending an email to info@aurawatours.com. Aura WA Tours reminds you that, where processing is carried out on the basis of your consent (Article 6.1.a) or 9.1.a) of the GDPR), you may withdraw it at any time (without affecting the lawfulness of the processing carried out before the withdrawal).

Likewise, whenever you consider it appropriate, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. ADDITIONAL INFORMATION.

• Policy on children’s use. The services of Aura WA Tours are aimed exclusively at adults. Accordingly, Aura WA Tours does not knowingly collect information from minors. In any case, if you are a parent or legal guardian and believe that your child or ward has sent us personal data, please contact Aura WA Tours by sending an email to info@aurawatours.com
• Personal data of third parties. If the personal data provided belongs to a third party, you guarantee that you have informed that third party of the matters set out in this Privacy Policy, and have obtained their consent to provide the Entity with their data for the purposes stated in that Policy.
• Links. The Aura WA Tours website may contain links to other websites that the Entity considers useful and of interest to you. Please bear in mind, however, that Aura WA Tours does not endorse the content or services of those platforms, nor is it responsible for their privacy policies. Aura WA Tours recommends that you take into account and consult the privacy policies of all the platforms you visit. Remember that what is stated in this Privacy Policy applies only to the data collected and/or processed by Aura WA Tours.
• Updates. The processing of your personal data will be carried out in accordance with the Privacy Policy in force at the time your personal data is collected. If Aura WA Tours makes any change to the processing of your data, you will be informed in good time.
• Contact Aura WA Tours. If at any time you consider that the provisions of this Privacy Policy have not been complied with, please send any query by email to info@aurawatours.com