If you are a resident of the European Union (“EU”), the European Economic Area (“EEA”), or Switzerland, processing of your personal data will always be in line with the General Data Protection Regulation (GDPR).
Traveleto is the Controller of this Site, as defined in the GDPR. All personal data collected by the Site is stored exclusively in secure hosting facilities in the US. Traveleto has data processing agreements in place with our hosting facilities, ensuring compliance with GDPR. Please see our Terms of Service for details. All hosting is performed in accordance with the highest security regulations.
The information we gather enables us to personalize, improve and continue to operate the Services. In connection with certain aspects of the Services, we may request, collect, use, share, and/or display some of your Personal Information. We collect the following types of information from our users.
We automatically receive and record information from your device or web browser when you interact with the Services. This information may include, your IP address, an ID that we may create and associate with our content, cookie information, and other details. This information is used for fighting spam/malware, to facilitate collection of data concerning your interaction with the Services (e.g., what links you have clicked on and shared with others, including via email and social media), and to otherwise personalize, improve and continue to operate the Services.
We collect information about your device in order to adapt our website to be displayed best on your type of device – smartphone, tablet, laptop or desktop.
Generally, the Services automatically collect usage information, such as the number and frequency of visitors to the Site or mobile application. We may use this data in aggregate form, that is, as a statistical measure. This type of aggregate data enables us and third parties authorized by us to figure out how often individuals use parts of the Services so that we can analyze and improve them.
When you visit the Site, we may also collect information about your online activities over time and across third-party websites or online services. Because there is not yet a consensus on how companies should respond to web browser-based or other do-not-track (“DNT”) mechanisms, we do not respond to web browser-based DNT signals at this time.
Some of our Services, such as mobile applications, may collect geo-location data to provide location-related functionality. We may link location data to other information we have collected about you. You may stop sharing your location data by adjusting your mobile device’s location services settings. For instruction on changing the relevant settings, please contact your service provider or device manufacturer.
We may receive a confirmation when you open an email from us. We use this confirmation to improve our Services, including customer service.
Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on acceptance of each new cookie in a variety of ways. We strongly recommend that you leave cookies active, because they enable you to take advantage the most attractive features of the Services.
To support and enhance the Services, we may serve advertisements, and also allow third parties advertisements, through the Services. These advertisements are sometimes targeted and served to particular users and may come from third party companies called “ad networks.” Ad networks include third party ad servers, ad agencies, ad technology vendors and research firms. We may engage with ad networks that are members or organizations or programs that manage the advertising privacy choices these ad networks offer consumers.
When you visit our Site or use our mobile applications or other Services, ad networks and other parties may collect information about your online activities over time and across different websites. We are not responsible for the privacy practices of these ad networks and other parties.
Advertisements served through the Services may be targeted to users who fit a certain general profile category may be inferred from information provided to us by a user, may be based on the Services usage patterns of particular users, or may be based on your activity on Third Party Services. We do not provide Personal Information to any ad networks for use other than in connection with the Services.
To increase the effectiveness of ad delivery, we may deliver a file (known as a “web beacon”) from an ad network to you through the Services. Web beacons allow ad networks to provide anonymized, aggregated auditing, research and reporting for us and for advertisers. Web beacons also enable ad networks to serve targeted advertisements to you when you visit other websites. Because your web browser must request these advertisements and web beacons from the ad network’s servers, these companies can view, edit or set their own cookies, just as if you had requested a web page from their site.
Advertising platforms such as Facebook and Google have the concept of an audience, which is a group of people that come to a website over a period of time. Traveleto can utilize audiences in various ways – to have the advertising platforms find people that are similar to the members of an audience, to show the members of an audience additional advertisements, to exclude members of an audience from additional advertisements, etc. Traveleto has a legitimate interest in these systems, since advertising would not be financially feasible without utilizing audience mechanisms. But we understand if you do not wish to participate. You can opt-out of being part of an audience by utilizing opt-out mechanisms provided by Facebook and Google respectively. Advertising Audience Generation data is kept for up to 180 days.
Traveleto makes use of third-party behavioral tracking systems such as Google Analytics and Visual Website Optimizer. These systems allow us to observe how people use our websites and enable us to improve how they operate. We also use these systems to perform A/B testing of new features and site improvements. Anonymous Behavioral Tracking data is kept for up to 14 months.
We collect statistical information about how both unregistered and registered users, collectively, use the Services (“Aggregate Information”). Some of this information is derived from Personal Information.
The Services are designed to help you share information with others. As a result, some of the information generated through the Services is shared publicly or with third parties.
Some of your activity on and through the Services is public by default. This may include, but is not limited to, content you have posted or shared publicly on the Site or otherwise through the Services, such as written posts, comments, or other submissions by you to the Site.
Please also remember that by choosing to provide Personal Information using certain public features of the Services, you make your information publicly available. User reading such information may use or disclose it to other individuals or entities without our control and without your knowledge, and search engines may index that information. We therefore urge you to think carefully about including any specific information you may deem private in content that you create or information that you submit through the Services.
We share Aggregate Information with our partners, service providers and other persons with whom we conduct business. We share this type of statistical data so that our partners can understand how and how often people use our Services and their services or websites, which facilitates improving both their services and how our Services interface with them. In addition, these third parties may share with us information about you that they have independently developed or acquired.
As part of the Services, you may occasionally receive email and other communications from us, such as communications relating to your Account. Communications relating to your Account will be sent for purposes important to the Services, such as password recovery. We may use your email address to contact you for editorial purposes, to advise you of any changes to our Site, and to send you messages about our marketing partners’ products. You may choose not to receive our marketing emails by clicking on the unsubscribe link in the emails you receive from us. Please note that even if you opt out, we may continue sending you service-related information.
We employ and contract with service providers – individuals and entities that perform certain tasks on our behalf. We may need to share Personal Information with our service providers in order to provide products or services to you. We do not authorize our service providers to use Personal Information or other information we share with them beyond what is necessary to assist us.
In some cases, we may choose to buy or sell assets. In these types of transactions, user information, including Personal Information, is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur. Following the transfer of user information in the circumstances described in this paragraph, all inquiries concerning the processing of user information should be directed to the entity to which the information is transferred.
We also reserve the right to access, read, preserve, and disclose any information as it reasonably believes is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request, (ii) enforce our Terms of Service, including investigation of potential violations hereof, (iii) detect, prevent, or otherwise address fraud, security or technical issues, (iv) respond to user support requests, or (v) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.
Here is a list of the rights that all residents of the European Economic Area have under the GDPR. They don’t apply in all circumstances — if you wish to use any of them, we’ll explain at that time if they are engaged or not.
• The right to be informed about the processing of your personal information;
• The right to have your personal information corrected if it is inaccurate and to have incomplete personal information completed;
• The right to object to processing of your personal information;
• The right to restrict processing of your personal information;
• The right to have your personal information erased (the “right to be forgotten”);
• The right to request access to your personal information and to obtain information about how we process it;
• The right to move, copy or transfer your personal information (“data portability”);
• Rights in relation to automated decision making which has a legal effect or otherwise significantly affects you;
• You have the right to complain to the Data Protection Supervisory Authority which enforces data protection laws in your country;
• You have the right to object to certain purposes for processing, in particular to data processed for direct marketing purposes and to data processed for certain reasons based on our legitimate interests.
With respect to Traveleto and matters relating to privacy and data protection, we can be reached via email at firstname.lastname@example.org, or at the following address:
Attn: Privacy Matters
Calle Cedro 6 1D
36204, VIGO - PONTEVEDRA
Please email us if you would like your personal data deleted.
You can also contact our Data Protection Officer by sending us an email with a subject line of “DPO Contact Request”.