Datenschutzrichtlinie

This Privacy Policy governs the use of the website available at www.romotur.com. The entity responsible for the website, for identification purposes, is:

DATA CONTROLLER: ROMO TURISMO RECEPTIVO, S.L.

Spanish Tax Identification Number (NIF): B95031951

Address: C/ Gordoniz 22 – 1st Floor, 48012 Bilbao (Bizkaia), Spain

Telephone: +34 94 443 34 63 / +34 662 310 995 / +34 600 400 213

Email: info@romotur.com

Purposes: Why do we process your data?

For the purposes of the General Data Protection Regulation (GDPR) of 27 April 2016 and Organic Law 3/2018, we will process the data we collect for the following purposes:

To contact you if you request that we do so.

To manage your use of and navigation through the website, where applicable.

To send you marketing communications about our products and services.

To manage purchases of products offered on the website, where applicable.

For this purpose, users will have access to a registration form, completion of which will entitle them to access and use certain services offered on the website.

However, users are informed that each contact form will explain how the data collected will be used and that, if the data is to be used for a different purpose, their prior express consent will be obtained.

Where a data subject’s consent is given in the context of a written declaration that also concerns other matters, the request for consent shall be presented in a manner that is clearly distinguishable from those other matters, in an intelligible and easily accessible form, using clear and plain language, in accordance with Article 7(2) of the GDPR of 27 April 2016.

Legal basis: What is the legal basis for processing your data?

The legal basis for processing your data is:

The data subject’s consent to the processing of their personal data, pursuant to Article 6(1)(a) of the General Data Protection Regulation.

Processing necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) of the General Data Protection Regulation.

Recipients: To whom do we disclose your data?

Personal data will not be disclosed to third parties except where necessary to comply with legally established obligations or to support the services associated with this processing.

Data retention: How long do we keep your data?

Your personal data will be retained for as long as necessary to fulfil the purpose for which it was collected.

If you are a client or have contracted services with us, your data will be retained for the duration of the contractual relationship and, after it ends, for the retention periods required by applicable legislation in order to address potential legal or tax liabilities (generally, up to 6 years under the Spanish Commercial Code and tax regulations).

If you have contacted us through an enquiry or quotation request form without entering into a contract, your data will be retained for as long as necessary to process and respond to your request and, in any event, for a maximum of 1 year, unless you withdraw your consent earlier.

Data processed for the purpose of sending marketing communications will be retained indefinitely until the user objects to the processing or withdraws their consent.

Rights: What are your rights when you provide us with your data?

Everyone has the right to obtain confirmation as to whether personal data concerning them is being processed.

Data subjects have the right to access their personal data and to request the rectification of inaccurate data or, where applicable, its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction of processing of their data, in which case we will retain it only for the establishment, exercise or defence of legal claims.

In certain circumstances, and on grounds relating to their particular situation, data subjects may object to the processing of their data. In such cases, we will cease processing the data except where there are legitimate grounds for doing so or for the establishment, exercise or defence of potential legal claims.

Data subjects may request data portability in order to receive the data they have provided in a structured, commonly used and machine-readable format, which they may download themselves or transmit to another entity.

Data subjects may exercise their rights by emailing info@romotur.com or, where applicable, by writing to C/ Gordoniz 22 – 1st Floor, 48012 Bilbao (Bizkaia), Spain.

Consent of minors: What happens if you are underage?

If any of our services are specifically aimed at children under the age of fourteen, we will seek the consent of their parents or legal guardians for the collection of personal data or, where applicable, the automated processing of such data, in accordance with Article 7 of the Spanish Organic Law on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

Data accuracy, truthfulness and security: How do we handle your data?

Users are solely responsible for the truthfulness and accuracy of the information they provide, and we are exempt from any liability in this regard. Users warrant and are responsible, in all cases, for the accuracy, currency and authenticity of the personal data provided and undertake to keep it duly updated. Users agree to provide complete and accurate information in registration or subscription forms. We are not responsible for the accuracy of information that we have not produced ourselves and for which another source is identified; accordingly, we accept no liability for any damage that may arise from the use of such information.

We also reserve the right to update, modify or remove information contained on the website and may even restrict or deny access to such information.

We will not be liable for any loss or damage suffered by users as a result of errors, defects or omissions in information provided by the data controller where that information originates from external sources.

Data will be processed confidentially and subject to appropriate technical and organisational security measures to prevent its alteration, loss, unauthorised processing or unauthorised access.

You may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), particularly if you have not obtained a satisfactory response when exercising your rights, using the postal and/or electronic contact details provided at www.aepd.es.

Bilbao, September 2026