Privacy Policy

Data controller

correYvuela Bot S.L. CIF B-66810078 with address at calle Platón 6, 1ª planta, puerta 5, 08021 Barcelona.

Purpose of processing and storage

The proper organisation and/or provision and/or dissemination of the services we offer via Facebook Messenger, Telegram, our app or the web chat for information and booking of flights and hotels.

To carry out direct email marketing for services similar to those engaged by you, unless you have objected to such processing initially or in subsequent communications, in order to pursue the legitimate interests of promoting products and services in which you may reasonably be interested.

The personal data provided will be retained for as long as the data subject remains bound to us by a contractual relationship and does not request its deletion by the data subject and for a period of 2 years from the last confirmation of his or her interest in remaining with us.

Subsequently, the data will be deleted in accordance with the provisions of the data protection regulations, which implies its blocking, being available only at the request of Judges and Courts, the Ombudsman, the Public Prosecutor's Office or the competent Public Administrations, during the period of limitation of any actions that may arise and, once this period has elapsed, it will be completely deleted.

Legitimation of the processing

The basis for processing your personal data is the execution of the contract and services provided by correYvuela Bot S.L., as well as the fulfilment of a legal obligation.

Processing for marketing purposes is also necessary to achieve the legitimate purpose of the data controller for the processing of your marketing proposals. You can always object to the processing of your data by sending us an e-mail to  dataprotection@nixi1.com

Providing personal data for these purposes is optional, but failure to provide such data will make it impossible to activate the requested Services.

Recipients of censuses or transfers

The personal data necessary to provide the service will be shared by our suppliers when so required by the activity, in which case you will be informed of the recipients, the purpose and the time of conservation of your data; and when the same is required in compliance with a legal obligation by the Administration of Justice and the Spanish Data Protection Agency.

The complete list of Data Processors can be obtained by submitting a request to Customer Services, which can be accessed at dataprotection@nixi1.com

Transfer of personal data:

Some of your personal data may be shared with recipients outside the European Economic Area.

correYvuela ensures that the processing of personal data by these recipients is carried out in accordance with EU Regulation 2016/679 on Personal Data Protection. Transfers may be based on an adequacy decision or on standard contractual clauses approved by the European Commission.

Rights of the persons concerned

Data subjects have the right to exercise their rights to access, rectify or delete the personal data we collect, free of charge. They also have the right to limit or object, at any time, to the processing of their personal data and to request data portability, by writing to the Data Protection Officer of correYvuela Bot S.L. by e-mail to the address: dataprotection@nixi1.com

Origin of the data

The data we process has been provided to us directly by you.

Additional information

Additional and detailed information on Data Protection can be found here. https://www.aepd.es/

PRIVACY POLICY

We hereby inform you about our Personal Data Protection Policy, how we treat your personal data when you use our services and how you can give your express, voluntary, informed and conscious consent.

Through the different sections of the CORREYVUELA BOT, S.L. website from which we collect your personal data, you are informed in accordance with the EU Regulation 2016/679 (hereinafter: "Regulation"), so that you are required to read it before providing the requested data.

The information and data provided by you or acquired during your registration or registration in the services of CORREYVUELA, BOT. S.L. (e-mail, identification data, ID, date of birth, telephone, postal address, or any other data required for the purpose of providing our services), will be treated in accordance with the rules of the Regulation and with the confidentiality obligations of CORREYVUELA BOT, S.L. Your personal data will be treated in accordance with the principles of legality, confidentiality, purpose and limits of data retention, data minimisation, correctness, transparency, accuracy and completeness indicated in the Regulation.

1.- Data Controller and Data Protection Officer

The Data Controller is CORREYVUELA BOT S.L. (hereinafter, correYvuela) with address at Calle Platón 6, 1ª planta, puerta 5, 08021 Barcelona.

correYvuela has a Data Protection Officer (DPO), who is available for any information regarding the processing of personal data that you would like to know. You can contact the DPO designated for this purpose by writing to dataprotection@nixi1.com

2.- Processing of Personal Data.

Processing of personal data' shall mean any operation or set of operations performed with or without the aid of automated processes upon personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or combination, restriction, erasure or destruction.

In particular, the Personal Data processed by correYvuela are the following:

2.1. Data provided by the data subject:

The personal data you share with us when you open an account and use our services, or send messages to our Customer Service or via Live Chat. We will use personal data only and strictly to the extent necessary to fulfil your request.

When using correYvuela's services, personal data of third parties sent by you may be processed. In this case, you must have the permission of the person concerned, assuming all legal obligations and responsibilities. We may collect and use information from minors only if it has been provided by their parents or guardians or with their consent. Otherwise we reserve the right to delete it.

In this regard, you agree to hold correYvuela harmless in relation to any dispute, claim, request for compensation for damages from the processing that may come to correYvuela by third parties whose personal data have been processed through your use of our services, in violation of the applicable rules on personal data protection. In any case, if you provide or otherwise process personal data of third parties when using the service, you warrant that the processing always has an appropriate legal basis (such as the consent of the data subject) in accordance with the Regulation, which legitimizes the processing of the information in question.

The aforementioned personal data is requested if this is necessary for the proper performance of the contract by us and, in turn, to enable us to comply with our legal obligations. Without it, we may not be able to provide you with the services you request.

It is important that all personal data you provide when you register as a User or at any other time while using the Site or sending us an email or SMS message is correct and accurate.

2.2.- Navigation Data:

This is Personal Data whose transmission is considered implicit in the use of Internet communication protocols that computer systems and software procedures use to operate the correYvuela Site. This information is not collected to be associated with identified or identifiable individuals, but could, through processing and association with data held by third parties, allow users to be identified. This type of data may include: IP addresses, domain names of devices connecting to the Site, addresses in the Uniform Resource Identifier (URI), the time and method of sending the request to the server, the size of the file obtained in response, the status code of the response given by the server and other data about the operating system and environment of the user's device. The purpose is to provide anonymous statistical information on the use of the Site, verify its operation, identify anomalies or abuses, and are deleted after processing. They may also be used to determine liability in the event of possible computer crimes against the Site or third parties.

2.3.- Interaction with social networks:

You can complete the registration form through our Site to contract our Services, but you can also register for the Services if you have a profile, through Facebook, Telegram, Instagram, LinkedIn, Twitter, SMS (hereinafter RRSS). In these cases, the RRSS will automatically send correYvuela some of your personal data, specified in the pop-up window displayed at the time of the request.

You may choose to associate your correYvuela account with your social media accounts if you have them. If you link, connect or log in to your account with a service such as social media, that service may send us data such as registration and profile information (user name, user ID associated with your social media account, photo, email) and any other information you have allowed the relevant social network to share with third parties. The data we receive depends on your privacy settings on the relevant social networks. You can always review and modify your privacy settings on third party sites and services before linking or connecting them to our Site. For more information, please see our Cookie Policy section.

3.- Legal basis.

3.1.- To create and/or maintain the contractual relationship established for the provision of the Service requested by you in all its phases, as well as to send you information (by email, telephone, SMS, RRSS) relating to the contractual relationship established.

3.2.- To observe legal, regulatory and compliance requirements and to respond to requests from Judges and Courts, Ombudsman, Public Prosecutor's Office or competent Public Administrations conducting an investigation.

To carry out statistical analysis in order to see how our Site or our services are used and to measure the development of correYvuela's business.

3.4.- According to our legitimate interest, to improve our Site, its functionalities and our services.

In accordance with our legitimate interest, to comply with our terms and conditions, to protect our rights in the event of a dispute or claim.

3.6.- Where permitted by law - unless you expressly decline - to communicate promotions to you (by e-mail, SMS or other equivalent electronic communication) relating to products and services similar to those you have purchased from us.

3.7.- To send you with your prior consent (by e-mail, SMS or other equivalent electronic communication) offers about products and services which we think may be of interest to you and which are marketed by us or our commercial partners in the following sectors: tourism, leisure, entertainment.

 To ensure the security of our Site and systems and to prevent or detect fraud, security incidents or other crimes.

3.9.- To personalise marketing communications and online promotions we offer you based on information about how you use our Site, our products and services and other Sites collected through cookies.

4.- Recipients of the data.

4.1.- Our employees and/or authorised collaborators who provide support and consulting services in the areas of administration, product, legal, customer service and IT systems, as well as those responsible for the maintenance of our network and hardware and software equipment, business consultants, professionals who provide statutory audit services or assess the value and capabilities of the business, when required for a sale of our company or its assets.

4.2.- Our ancillary service providers who in their capacity as data processors process your personal data, such as providers of customer service, information technology and web hosting, analytics services.

4.3.- Airlines, hotels, as well as any other third party to whom you must communicate your personal data in order for the requested service to be provided, who will act as data controllers.

Inform you that airlines are required by regulations in the United States of America and other states to disclose to customs and border authorities access to the personal data of passengers on their flights.

We may have to communicate the data collected about the passengers included in the booking to the competent authorities of the countries included in the customer's travel itinerary if required to do so by applicable regulations.

4.4.- Payment service providers and financial institutions in their capacity as data controllers, as correYvuela does not access the data that you communicate to these providers through their digital gateways.

4.5.- Social networks when you log in via such social networks.

4.6.- The competent authorities when they require us to do so in compliance with current regulations. Also, in the event that we need to enforce our rights or those of a third party, we may inform the authorities or security bodies.

4.7.- International transmission of data

The personal data of Users and/or Customers of correYvuela are processed on AMAZON servers in the European Economic Area (EEA). Therefore, the processing of your data by these service providers does not have the status of international transmission.

Bookings for services such as airlines and hotels are made through the communication of your data to the relevant data controllers (via their gateways, platforms, forms) who may process your data outside the EEA in order for you to receive the services requested. It is recommended that before consenting to the processing of your data, you review their privacy policies.

5.- Data retention time.

We retain your personal data for the time required to carry out the activities set out in this Privacy Policy, fulfil the purposes or comply with a legal obligation.

6.- Rights that can be exercised and how to exercise them.

-. Right of access.

-. The right to be informed about the existence of their personal data and to obtain a copy.

-. The right to update, rectify and/or correct your personal data.

-. Right of erasure and right of restriction.

-. The right to the portability of your personal data in a machine-readable, commonly used and structured format and to ask us to transfer such data to another data controller.

-. The right to withdraw your consent unless we can have another legally justified reason to process such data.

-. The right to object at any time to the processing of your personal data in certain circumstances.

You can exercise these rights by contacting us by e-mail at the following address dataprotection@nixi1.com

-. Direct marketing communications.

You can object at any time at the following address dataprotection@nixi1.com or by clicking on the "unsubscribe" link, which we include in the communications we send you.

You have the right to lodge a complaint with the AEPD if you consider that your personal data have not been processed appropriately, although we recommend that you first consult with us through the DPO at the following address dataprotection@nixi1.com.

7.- Cookies.

The use of our website allows correYvuela to collect certain information considered personal data according to the Regulation (identifiable natural person is one whose identity can be determined directly or indirectly by means of a name, an identification number, location data or an online identifier), therefore through cookies that are installed on your computer, when you visit our website we can collect certain personal information. For more information, please see our Cookie Policy section.

8.- Versions of the Privacy Policy.

correYvuela reserves the right to modify this Privacy Policy at any time, in which case we will post the updated text on our Site.