According to current regulations, it is the natural or legal person who, along or together with others, determines the purposes of and the means used for the processing.​

Viajes El Corte Inglés is responsible for any processing it carries out using its customers’ personal information.

For purposes covered in the contractual relationship:​

The main reason why we collect your personal information is because it is necessary to manage your travel request and, once your request has been confirmed, to uphold the contractual relationship.

We base our right to process your personal information, on several legal grounds:​

* To comply with a contract and/or commercial relationship, and/or on the consent requested.

We will not transfer the data you provide us with under any circumstances.​

Likewise, your personal data will be at the disposal of government authorities, judges and courts, for the purpose of dealing with any liabilities arising out of processing it.

Viajes El Corte Inglés does not expect to transfer data to other countries. The personal information that we collect is kept in Spain; although some companies in the group may have a presence in other countries and your personal information may be collected in the country in which you live, we subsequently install and store this information in our systems. The third parties with whom we share your personal data can manage or transfer it outside Spain and the European Union to other countries where they have facilities. In this case they will comply with the requirements established by the Spanish Data Protection Agency and the European Union.​

We will ensure both that any transfers of your personal data carried out by us or by those third parties with whom we share it, and the way in which we manage your personal data, comply with the legislation applicable to us. In any event, the transfer, storage and management of your personal data by us will always be governed by this Privacy Policy.​

You are entitled to have control over the personal data we collect; in this way we also ensure that it is accurate and truthful.​

You are entitled to obtain access to your personal data, as well as to request that any inaccurate data be corrected or, where appropriate, to request it be erased when, among other reasons, the data is no longer necessary for the purposes for which it was collected.​

Under certain circumstances, and for reasons relating to your particular situation, you may object to your data being processed. Your personal data will cease to be processed for those purposes to which you have expressed your objection. Likewise, you can exercise the right to limit any processing of your personal data and request conservation thereof.​

Under certain circumstances, you may request that your data be transferred to another data processing controller.​

You may exercise your rights at no cost whatsoever, and receive a response within the deadlines established by the data protection legislation in force. You can choose between the following means:​

* By sending a request together with a photocopy and/or scanned copy of the National ID Document of the requesting party to the email address protecciondedatos@viajeseci.es.​

You can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), particularly when you are dissatisfied with the response to your exercise of your rights. For more details, you can visit their website at www.agpd.es

You can change the way we contact you as follows:​

* By sending a request together with a photocopy and/or scanned copy of the National ID Document of the requesting party to the email address protecciondedatos@viajeseci.es.

We only store your personal data for as long that we need it to be able to use it in accordance with the purpose for which it was collected and according to the legal grounds for the processing thereof, in accordance with applicable law. We will keep your personal data while there is a contractual and/or commercial relationship with you, or so long as you do not exercise your right to erase, cancel and/or limit the processing of your data.​

We undertake to protect your personal data. We use the appropriate technical and organisational measures, with the purpose of protecting your personal data and your privacy and we review these measures regularly. We protect your personal data through the use of a combination of both physical and computer or logical security controls, including access controls restricting and handling the way in which your personal information and data is processed, administered and managed. We also ensure that our employees are appropriately trained to protect your personal data. Our procedures state that we can request you to prove your identity before sharing your personal data with you.

These are some of the precautions that we advise our clients to take:​

• Do not provide your username or password to anyone.​
• Do not write them down in places which can be easily accessed: computer, agenda.​
• Always use our SSL security system.​
• Always disconnect the browser session after having accessed a security zone or entered the username or password.​

Amendments to this data protection information​

If we have your email address or mobile telephone number, we will also send you an email or SMS with information about the changes. If necessary, we will renew your consent so that you confirm to us that you agree with these amendments.​

This data protection information was last reviewed and updated in December 2018.