Luxotour Privacy Policy


This Privacy Policy is aimed at providing you with how much information you need to understand the scope and purpose of data processing, so that acceptance, absolutely necessary to be able to offer you the contracted tourist service, is based on perfectly informed consent, included in the regulations on data protection that are applicable at all times. Currently by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural persons (hereinafter, RGPD) and Organic Law 3/2018 , of December 5, on Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD).

Who is responsible for the processing of your data?

The person responsible for the processing of personal data is LUXOTOUR S.A.U. (hereinafter, LUXOTOUR), with NIF A29092046 and with address at Calle Río Mesa nº 10, 29620, Torremolinos, Málaga.

You can contact us at our physical address, indicated in the previous paragraph or by email: info@luxotour. com

LUXOTOUR wants to provide in a transparent manner all information about the data processing it carries out, the purposes for which it processes them and its basis of legitimacy, as well as as the rights of which the interested parties are holders regarding the processing of their personal data.

It will not be the responsibility of LUXOTOUR and therefore it is up to the user to provide the data truthfully and keep it updated, so LUXOTOUR reserves the right to exclude from the services and proceed to cancel the service, any user who has provided false data, without prejudice to other actions that may be applicable by law.

What personal information do we obtain?

We obtain information regarding user data through professionals in the tourism sector in order to facilitate services of travel required and information is generated by the contractual relationship itself. Furthermore, if this were done, the data could be collected directly from the end consumer.

Personal data sent by job candidates is also received, which is processed exclusively for the possibility of generating a possible employment relationship.

For what purpose do we process your personal data?

LUXOTOUR will provide the personal data provided with targeted processing to achieve the following objectives:

  • For the development, execution and fulfillment of the contracted travel and/or excursion service, the data necessary for the fulfillment of the contract will be collected, these data being: Personal identification data, such as address, email, telephone, ID/passports whenever necessary to provide the contracted service; photo when required for visa management, financial data once the contract has been formalized, if this is established in the provision of the acquired services.
  • If through professionals in the tourism sector or directly they are provided to us essential data of the clients for the adequate provision of the requested service and concerning their health, see information on allergies, food intolerances, disabilities, etc., the interested party expressly authorizes its processing as it may be necessary (and mandatory for the provision of the service). , that the data must be communicated to suppliers such as airlines, shipping companies, hotels and other service providers, who will be obliged to use the data, solely and exclusively, to comply with the purpose of the contract. These accessory data will be deleted from our systems once the service or trip is completed. Failure to accept this treatment implies the impossibility of providing the service and fulfilling the contract.
  • We also inform you that when proceeding to contract products and services through the portal, LUXOTOUR will collect the IP address from which you make said purchase in order to generate usage statistics that allow us to improve our products and services, and for security reasons.
  • Manage queries raised through the Contact E-Mail. In the event that the interested party has only contacted LUXOTOUR, it will process their data to respond to the requests or requests for information they make regarding the services offered. LUXOTOUR only will process the personal data that is strictly necessary to manage or resolve the request or request.
  • For commercial purposes, the interested party who is actually a LUXOTOUR customer will receive news about similar products. However, you are informed that you may object at any time by contacting LUXOTOUR through the channels already indicated.
  • Manage the data of website users collected through cookies that will be processed to guarantee that the content of the website is adapted to your needs and those of your team and, for improvement continuity of the interested party's experience.
  • Provide information on travelers with affected reservations, in compliance with Royal Decree 933/2021 on traveler registration, in compliance with a legal obligation of the data controller and with legitimacy in the art. 6. 1 c) of the RGPD 2016/679.

In addition, as long as the interested party has given their consent, personal data will be processed to send commercial, advertising and/or communications. or promotional.

What is the legitimacy for the processing of your data?

The legal basis for the processing of your data is:

  • Management of pre-contractual and, where appropriate, contractual measures based on article 6.1.b) of the RGPD, since we collect and process your personal data mainly for the execution of contracts according to the terms and conditions that appear in said contracts.
  • Manage queries raised through contact email. This treatment is based on article 6.1.f) of the RGPD, the legitimate interest that LUXOTOUR has in meeting information requirements through the Web.
  • Unequivocal consent based in article 6.1.a) of the RGPD, in case you are not a user, to send commercial communications, news.
  • We may obtain and process your personal data for our legitimate interests based on article 6.1.f) of the GDPR (or those of any third party).

Such legitimate interests include: The offer of products and services finds its legitimacy in the legitimate interest of the person responsible for the treatment, and the user may express his opposition at any time. to this type of treatment without in any case the exercise of this right conditioning the execution of the contract.

  • Manage the data of website users collected through cookies, this treatment is legitimized by the unequivocal consent given by users.
  • Management of the personnel selection process for LUXOTOUR and the relationship with future candidates. This treatment is legitimized by the unequivocal consent given by future candidates for inclusion in the LUXOTOUR database. We also inform you that the failure to provide the required information implies the impossibility of subscription and fulfillment of the contract.
  • As mentioned above, in international data transfers it is reported that its legitimacy is covered by Article 49.1 b) of Regulation (EU) 2016/679, as these are transfers necessary for the execution of a contract between the interested party and the data controller or for the execution of pre-contractual measures adopted at the request of the interested party. Failure to accept this treatment means the impossibility of providing the service and fulfilling the contract.
  • For compliance with legal obligations.

We also inform you that failure to provide the required information means the impossibility of signing and fulfilling the contract.

For how long? How long do we keep your personal data?

LUXOTOUR processes your personal data for the period necessary to fulfill the purposes established in this Privacy Policy, as well as to retain your personal information in compliance with the provisions of the relevant laws and regulations.

Specifically, the data will be kept during the entire period of validity of the contract, being blocked upon expiration of the contract. In this way, the data will be blocked and kept for 5 years, being the statute of limitations for actions that may arise from the contractual relationship signed.

If due to the characteristics of the trip it is affected by Law 10/2010, of April 28, on the prevention of money laundering and the financing of terrorism, the data will be kept solely for the purpose of legal compliance. , for a maximum of 10 years.

Likewise, the data that the user has given their consent for the sending of commercial information will be kept until they request cancellation, at which point they will proceed to their suppression.

To which recipients will your data be communicated?

The data collected will be communicated to third party providers related to the Controller (developers, online marketing , billing, management, transport companies, accommodation and receptive) whose intervention is necessary to fulfill the purposes described here.

LUXOTOUR is managed through the marketing platform digital Mailchimp, based in Atlanta, whose servers are located outside the European Union, which involves a flow of personal data from Spanish territory to recipients established in countries outside the European Economic Area (International Data Transfers). MailChimp guarantees adequate security levels, privacy policy and compliance with Commission Implementing Decision 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council.

In the absence of an adequacy decision by the Commission, in relation to the country where the data is hosted, LUXOTOUR applies the guidelines of the European Data Protection Committee on the measures appropriate supplementary measures to guarantee the equivalent level of protection, with adequate guarantees and always maintaining the security of your data.

Outside of the cases described here, no data will be communicated, except by legal obligation.

Social networks

LUXOTOUR has a presence on some social networks on the Internet, and for which it acts as data controller in relation to the data published by LUXOTOUR The social networks are detailed below:

- Facebook:

- Twitter: attach the link

- Linkedin: attach the link

- Instagram: https://www.instagram. com/luxotour/

- Youtube channel: attach the link

LUXOTOUR will process the data on each social network according to the rules established for this purpose for each social network. Therefore, and until the contrary is stated from LUXOTOUR we can inform our followers on the corresponding social network of our activities, events, and other related topics, including follower service, through the channels that the social network provides for this purpose. LUXOTOUR will not extract personal data from social networks, unless the user gives us their express consent.

What are your rights when you provide us with your data? ?

Any person has the right to obtain confirmation as to whether at LUXOTOUR we are processing personal data that concerns them. 

The interested party You will have the right to withdraw your consent at any time, as long as the processing is not necessary for the fulfillment of the contract. The withdrawal of consent will not affect the legality of the treatment based on the consent prior to its withdrawal. You can exercise your rights as an interested party of access, rectification, deletion, limitation, portability and opposition to the processing of personal data, at any time and for free by sending an email to …………………………………….or writing to LUXOTOUR S.A.U. DATA PROTECTION Calle Río Mesa nº 10, 29620, Torremolinos, Málaga, indicating the right you wish to exercise and the identifying data.

In addition, the interested party has the right to file a claim with the Spanish Data Protection Agency. (AEPD) as the supervisory and control authority in matters of data protection in the Spanish territory.

In order to safeguard the security of your personal data, we inform you that LUXOTOUR has adopted all the necessary technical and organizational measures to guarantee the security of the personal data provided. All this to avoid its alteration, loss, and/or unauthorized processing or access, as required by regulations, although absolute security does not exist.

It is important that, so that we can maintain your personal data updated, please inform us whenever a modification occurs.

Last update: March 2024