PRIVACY POLICY


YELLOW TOURS MADRID informs you about its Privacy Policy regarding the processing and protection of personal data of users and customers that may be collected by browsing or contracting services through the website. https://yellowtoursmadrid.com/es

In this regard, YELLOW TOURS MADRID, guarantees compliance with current legislation on the protection of personal data, reflected in the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

The use of the website implies acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.

Principles applied in data processing

In processing your personal data, the Data Controller will apply the following principles that comply with the requirements of the new European Data Protection Regulation:

  • Principle of lawfulness, fairness and transparency: The Data Controller will always require consent for the processing of your personal data, which may be for one or more specific purposes about which you will be informed in advance with absolute transparency.
  • Principle of data minimisation: The Data Controller will request from you only the data strictly necessary for the purpose or purposes for which it is requested.
  • Principle of limitation of the storage period: Data shall be kept for the time strictly necessary for the purpose(s) of processing.
  • The Data Controller will inform you of the corresponding retention period depending on the purpose. In the case of subscriptions, the Data Controller will periodically review the lists and delete those records that have been inactive for a considerable period of time.
  • Principle of integrity and confidentiality: Your data will be treated in such a way that its security, confidentiality and integrity is guaranteed. You should know that the Data Controller takes the necessary precautions to prevent unauthorised access or improper use of the data of its users by third parties.
  • Collection of personal data

    For surfing in https://yellowtoursmadrid.com/es you do not need to provide any personal data. The cases in which you do provide your personal data are the following:

  • By contacting us through the contact forms or sending an email.
  • When commenting on an article or page.
  • By signing up for a subscription form or newsletter that the Owner manages with MailChimp.
  • When you sign up for a subscription form or a newsletter that the Holder manages with MailRelay.
  • When you sign up for a subscription form or a newsletter that the Holder manages with SendinBlue.
  • Your rights

    The Data Controller informs you that you have the right to access your personal data:

  • Request access to stored data.
  • Request a rectification or cancellation.
  • Request the restriction of their processing.
  • Oppose treatment.
  • Request the portability of your data.
  • The exercise of these rights is personal and must therefore be exercised directly by the data subject, requesting it directly from the Data Controller, which means that any customer, subscriber or collaborator who has provided their data at any time may contact the Data Controller and request information about the data stored and how it was obtained, request rectification of the data, request the portability of their personal data, oppose the processing, limit its use or request the cancellation of such data in the files of the Data Controller.

    To exercise your rights of access, rectification, cancellation, portability and opposition you have to send an email to info@theyellowtour.com together with legally valid proof such as a photocopy of the ID card or equivalent.

    You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency, if you consider that the processing of personal data concerning you is in breach of the Regulation.

    Purpose of the processing of personal data

    When you connect to the website to send an email to the Owner, subscribe to its newsletter or make a contract, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, first and last name, physical address, email address, telephone number, and other information. By providing this information, you consent to your information being collected, used, managed and stored by superadmin.es, only as described in the Legal Notice and this Privacy Policy.

    The personal data and the purpose of the processing by the Data Subject is different depending on the information capture system:

  • Contact forms: The Holder requests personal data, which may include: Name and surname, e-mail address, telephone number and address of your website in order to respond to your queries. For example, the Data Controller uses these data to respond to your messages, doubts, complaints, comments or concerns you may have regarding the information included on the Website, the services provided through the Website, the processing of your personal data, questions regarding the legal texts included on the Website, as well as any other query you may have that is not subject to the terms and conditions of the Website or of the contract.
  • Content subscription forms: The Holder requests the following personal data: Name and surname, email address, telephone number and address of your website to manage the subscription list, send newsletters, promotions and special offers. The data you provide to the Data Controller will be located on the servers of The Rocket Science Group LLC d/b/a, domiciled in the USA (Mailchimp).
  • There are other purposes for which the Data Controller processes your personal data:

  • To ensure compliance with the conditions set out in the Legal Notice and applicable law. This may include the development of tools and algorithms to help this website ensure the confidentiality of the personal data it collects.
  • To support and improve the services offered by this website.
  • To analyse browsing. The Owner collects other non-identifying data obtained through the use of cookies that are downloaded to your computer when you browse the website, the characteristics and purpose of which are detailed in the Cookies Policy.
  • In order to manage social networks, the Holder has a presence on social networks. If you become a follower on the Holder's social networks, the processing of personal data will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network that applies in each case and that you have previously accepted.
  • Security of personal data

    To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent the loss, misuse, improper access, disclosure, alteration or destruction of your personal data.

    The website is hosted by DINAHOSTING. The security of your data is guaranteed, as they take all the necessary security measures. You can consult their privacy policy for more information.

    Content from other websites

    Pages on this website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

    These websites may collect data about you, use cookies, embed additional tracking code from third parties, and monitor your interaction using this code.

    Cookie Policy

    In order for this website to function properly it needs to use cookies, which is information that is stored in your web browser.

    On the Cookie Policy page you can consult all the information relating to the collection policy, the purpose and processing of cookies.

    Legitimation for data processing

    The legal basis for the processing of your data is: consent.

    To contact the Owner, subscribe to a newsletter or make comments on this website you must accept this Privacy Policy

    Categories of personal data

    The categories of personal data processed by the Data Controller are:

  • Identifying data.
  • Retention of personal data

    The personal data you provide to the Data Controller will be retained until you request its deletion.

    Recipients of personal data

  • Mailrelay CPC Servicios Informáticos Aplicados a Nuevas Tecnologías S.L. (hereinafter "CPC") , with registered office at C/ Nardo, 12 28250 - Torrelodones - Madrid. You will find more information at: https://mailrelay.com CPC treats the data with the purpose of providing its email services to the Holder.
  • Mailchimp The Rocket Science Group LLC d/b/a , based in the USA. You can find more information at: https://mailchimp.com The Rocket Science Group LLC d/b/a processes the data for the purpose of providing email marketing services to the Registrant.
  • SendinBlue SendinBlue, a simplified joint-stock company (société par actions simplifiée) registered in the Paris Trade and Companies Register under number 498 019 298, with registered office at 55 rue d'Amsterdam, 75008, Paris (France). For more information: https://es.sendinblue.com SendinBlue processes the data for the purpose of providing solutions for sending e-mails, transactional SMS and the Holdereting to the Holder.
  • Google Analytics is a web analytics service provided by Google, Inc., a Delaware company headquartered at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States ("Google"). More information can be found at: https://analytics.google.com Google Analytics uses "cookies", which are text files placed on your computer, to help the website operator analyse how users use the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
  • DoubleClick by Google is a suite of advertising services provided by Google, Inc., a Delaware corporation with its principal place of business at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, United States ("Google"). More information can be found at: https://www.doubleclickbygoogle.com DoubleClick uses "cookies", which are text files placed on your computer that are used to increase the relevance of ads related to your recent searches. Google's Privacy Policy explains how Google manages your privacy regarding the use of cookies and other information.
  • You can also see a list of the types of cookies used by Google and its partners and information about their use of advertising cookies.

    Web browsing

    When browsing through https://yellowtoursmadrid.com/es non-identifying data may be collected, which may include, IP address, geolocation, a record of how services and sites are used, browsing habits and other data that cannot be used to identify you.

    The website uses the following third-party analysis services:

  • Google Analytics
  • DoubleClick by Google
  • The Owner uses the information obtained to obtain statistical data, analyse trends, administer the site, study browsing patterns and to gather demographic information.

    Accuracy and veracity of personal data

    You undertake to ensure that the data provided to the Data Controller is correct, complete, accurate and up to date, as well as to keep it duly updated.

    As a user of the website you are solely responsible for the veracity and accuracy of the data you submit to the site exonerating the Holder of any liability in this regard.

    Acceptance and consent

    As a User of the Website, you declare that you have been informed of the conditions on the protection of personal data, you accept and consent to the processing of such data by the Owner in the manner and for the purposes indicated in this Privacy Policy..

    Revocability

    To exercise your rights of access, rectification, cancellation, portability and opposition you have to send an email to info@theyellowtour.com together with legally valid proof such as a photocopy of the ID card or equivalent.

    The exercise of your rights does not include any data that the Data Controller is obliged to retain for administrative, legal or security purposes.

    Changes to the Privacy Policy

    The Owner reserves the right to modify this Privacy Policy to adapt it to new legislation or jurisprudence, as well as to industry practices.

    These policies shall remain in force until amended by other duly published policies.