Privacy Policy
On our group travel booking website, we value and are committed to protecting the privacy and personal data of our users. This Privacy Policy describes how we collect, use, store and protect the information we obtain through our website. By using our platform, you accept the practices described in this policy.
We will explain the types of personal information we collect from users, detail how we use the information collected, explain how we may share the information with third parties on a limited basis, highlight the security measures we have in place to protect personal information from unauthorized access, loss, disclosure or alteration, we will explain how long we store personal information and the criteria used to determine the retention period and highlight the privacy rights that users have in relation to their personal data.
In accordance with the provisions of EU Regulation 2016/679, of the European Parliament and of the Council of April 27, 2016. (GDPR) and Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of personal data. digital rights, FOROCIO, informs you that, by accepting this Privacy Policy, you give your informed, express, free and unequivocal consent for the Data you provide to be processed by FOROCIO, as the data controller, and on which The security, technical and organizational measures provided for in current regulations apply.
This policy has been developed to comply with the principles of transparency on our platform.
Warning minors
Respecting the provisions of articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, only those over 14 years of age may grant their consent for the treatment of your personal data lawfully by FOROCIO. If it is a minor under 14 years of age, the consent of the parents or guardians will be necessary for the treatment, and this will only be considered lawful to the extent that they have authorized it.
If you are under 14 years of age and have accessed this website without notifying your parents, you should not register as a user.
Responsible for the processing of your personal data
Company name: FOR OCIO SL
NIF: B81978629
Address: MAYOR STREET 4 FLOOR 5 OFFICE 8- 28013 Madrid
Email: info@forocio.com
How do we obtain your data?
FOR OCIO SL manages the website forocio.com, an online reservation platform for travel and group services that is accessed from the browser.
As a reservation platform, FOROCIO offers online services through our own web pages, and through other online platforms, such as the web pages of associated travel management companies that are integrated into our platform through APIS.
The personal data that we process in each of them comes from our own users that we collect through:
- Contact Form
- budget form
- Newsletter subscription form
Category of data that we process
The categories of data that are processed in FOROCIO are only identification data and transactions carried out on our platform. In no case are special categories of personal data processed within the meaning of Article 9 of the GDPR.
The personal information that FOROCIO collects and processes includes:
- Contact information and travel preferences to make quotes,
- In the case of travel agencies and tour operators that contract our services: agency contact name and email.
- Name and physical address, email addresses and telephone numbers. Depending on the type of service you request, we may also ask you for your home address, payment information, date of birth, ID or Passport, current location (in the case of commissioned services), the names of companions, including passport or ID, handicap data, driver’s license or license data or information on interests and preferences to offer you group travel related services adapted to them and improve your level of satisfaction.
- For certain activities, additional data such as gender, preferred languages may be required.
- Information on identity verification and payment data. For example, images of your official identification document or passport (if permitted by applicable law), your identification number or other verification information or data about your bank account or payment account.
- If you make reservations on behalf of other people, you will be providing us with information about these people as part of the Travel Reservation, in these cases, it is your responsibility to make sure that the person or people about whom you have given personal data are aware of this circumstance. and authorize the processing of their data by FOROCIO.
- Transactional data, such as products, reservations and services requested, financial data and payment methods;
- Unique identifiers, such as your mobile device identifier in the case of mobile access or your browser’s cookie identifier;
- IP address and information derived from the IP address, such as geographic location, in this case, if you are browsing from your mobile, you can decide to allow FOROCIO to see your current location or have access to some contact information. This will help us to offer you the best possible service and experience.
- Information about a device you use, such as browser, device type, operating system, presence or use of apps, screen resolution, and preferred language.
- We may also ask you for reviews and ratings of your experience to share with others. When you write a comment on the FOROCIO platform, we collect the information you include, along with your user profile data and your photo (if you choose one).
- If you create a user account, we will also save your personal settings, profile photos and reviews you write from past bookings. This saved data may be used to help you manage your future Travel Reservations or take advantage of other features only available to account holders (such as incentives and other benefits).
- When you contact our customer service team, we collect the information you provide us during the interaction, in order to fulfill your request. We sometimes monitor or record these interactions for training purposes and to ensure high quality of service.
For what purpose do we process your personal data?
Personal data is collected and managed by FOROCIO with the purpose of being able to facilitate, expedite and fulfill the commitments established between FOROCIO and the users of the platform or the maintenance of the relationship established in the forms that the latter fills out or to attend a request or inquiry.
We also process personal information to help the buyer and the service provider to make direct contact at the appropriate time depending on the type of service or activity chosen (hotels, transfers, rental cars, activities, flights, travel insurance. Etc.). In this case, FOROCIO will provide the collaborating companies with the personal data of the interested parties (name, telephone numbers, location and email), via email or through the site. The information communicated to these companies may only be used for the purpose of concluding the operation originated in FOROCIO and must not be used by any of them for advertising or promotional purposes or other activities not related to FOROCIO, except with the express authorization of the user.
When you have given your consent, we may also share your information when you participate in promotional activities carried out by FOROCIO collaborators or third parties.
To post testimonials from people who want to share their experience on our platform.
Likewise, the browsing data and statistics of our users may be used for a commercial purpose of personalization, operations and activities of the corporate purpose of FOROCIO, as well as for the extraction, storage of data and marketing studies.
At the time the personal data is obtained in the different forms included in FOROCIO, the User will be informed about the specific purpose or purposes of the treatment for which the personal data will be used; that is, the use or uses that will be given to the information collected.
In summary:
- Contact form: to respond to user requirements to get in touch through this medium.
- Subscription form: ; to send an informative Newsletter with offers and commercial proposals for the services available on our platform.
- Budget form: We also process data to send group travel quotes and, if the proposal is accepted, manage the reservation, including payment and all operations related to the contracting of the chosen service or activity. This includes sending follow-up emails, responses, invoices, receipts, providing support, handling claims, providing customer service, etc.
There are other purposes for which we process your personal data:
- To comply with our legal obligations: We will process your data to comply with a legal obligation that requires it, for example, to respond to a legal process or a requirement from a competent control authority.
- Protect the rights and security of our users and to detect and prevent fraud, abuse, security incidents that may compromise the security of our users, for which we carry out security analysis and risk assessments.
- Comply with legal obligations (such as money laundering prevention regulations) compliance with court orders, requests and other appropriate legal mechanisms.
- With your consent, send you promotional, marketing, advertising messages and other information that may be of interest to you based on your preferences.
- Provide information to representatives and advisers , including lawyers and tax advisers to help us comply with legal, tax or security requirements.
- To enforce our contracts with service providers and FOROCIO partner companies.
- To support and improve the services offered by this website .
- Other non-identifying data obtained through some cookies that are downloaded to the user’s computer when browsing this website, which is detailed in the cookie policy, is also collected.
- To manage social networks . The different domains associated with FOROCIO have a presence in social networks. The treatment of the data that is carried out of the people who become followers in the social networks of the official pages of FOROCIO, will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network that is appropriate in each case and previously accepted by the user. FOROCIO will process your data for the purpose of correctly managing your presence on the social network, informing about activities, products or services, as well as for any other purpose that the regulations of social networks allow. In no case will we use the profiles of followers on social networks to send advertising individually.
FOROCIO does not sell, rent or transfer personal data that can identify the user, nor will it do so in the future, to third parties without prior consent and without being warned in this privacy policy. However, in some cases, personal data of users can be sent to the services that are advertised on our platform, in these cases, the consent of the users will be required, informing about the data of the business and the identity of the person in charge and the purpose of the data. which merchant will use your information. It will always be carried out with the strictest security standards.
Legitimation for the processing of your data
To contact, consent is required with this privacy policy.
We process your personal information for purposes related to marketing and sales activities based on consent.
The legal basis for the treatment of the data of the people who contract products or services offered by FOROCIO, is the execution of the online sales contract.
When so indicated on our sites at the time when personal information is collected from customers in accordance with our legitimate interest to promote our products and services.
FOROCIO undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.
The User will have the right to withdraw their consent at any time. It will be as easy to withdraw consent as to give it. As a general rule, the withdrawal of consent will not condition the use of FOROCIO.
In the occasions in which the User must or can provide their data through forms to make inquiries, request information or for reasons related to the content of FOROCIO, they will be informed in the event that the completion of any of them is mandatory due to that they are essential for the correct development of the operation carried out.
What are your rights when you provide us with your data?
Anyone has the right to obtain confirmation as to whether or not, at FOROCIO, we are treating personal data that concerns me.
It is expressly agreed that at any time the user registered in FOROCIO may request the cancellation or closure of their registration request, and/or the closure of their account or deletion of their account and information from the FOROCIO database. Please review the section “Rights of access, cancellation and rectification of personal information”
Interested persons have the right to:
- Request access to personal data relating to the interested party
- Request its rectification or deletion
- Request your cancellation
- Request the limitation of your treatment
- Oppose the treatment
- Request data portability
Interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case I will only keep them for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, the interested parties may oppose the processing of their data by FOROCIO, at that time, FOROCIO will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. As an interested party, you have the right to receive the personal data that concerns you, that you have provided us and in a structured format, of common use and mechanical reading, and to transmit them to another data controller when:
- The treatment is based on consent
- The data has been provided by the person concerned.
- The treatment is carried out by automated means.
By exercising your right to data portability, you will have the right to have personal data transmitted directly from controller to controller when technically possible.
Interested parties will also have the right to effective judicial protection and to file a claim with the control authority, in this case, the Spanish Agency for Data Protection, if they consider that the processing of personal data that concerns them violates the Regulation.
To exercise these rights we have enabled a specific form at : info@forocio.com
How long will we keep your data?
The data processed will be kept as long as the legal terms established for the conservation of data do not expire, if there is a legal obligation of maintenance, or if this legal term does not exist, until the interested party requests its deletion or revokes the consent granted.
Unregistered Users: If a user visits our travel management platform without registering on any of our forms, we may retain collected data, such as IP addresses and cookies, for a limited and justified period of time. This period is the minimum for sufficient for statistical and security purposes.
Registered users: For users who register on our platform and provide data in our subscription or budget forms, we will keep your personal data as long as you maintain your subscription and do not request cancellation or removal from our list, also in cases where there is a active commercial relationship and we are managing your requests. This will allow the provision of the requested services, communication and personalization of the user experience.
Current customers: If a user becomes a customer and makes travel reservations through our platform, the personal data associated with those transactions will be kept for the time necessary to comply with contractual, administrative and legal obligations, such as payment management. , billing and guarantees.
Old customers : After a customer has terminated their relationship with our platform, we will keep the data for the legal time established for compliance with tax obligations or the resolution of disputes, for at least the applicable limitation period to allow the defense or the exercise of legal rights.
Therefore, the personal data provided will be kept:
- As long as the commercial relationship is maintained.
- Until its deletion is requested by the interested party.
- For a period of 2 years, counting from your last confirmation of interest
- Up to 5 years, the general limitation period for contractual claims in Spain is 5 years, in accordance with article 1964 of the Civil Code.
To which recipients will your data be communicated?
In accordance with the uses of personal information, we may communicate your personal information to recipients who help us market or support our services or the services of our users (“service providers”).
FOROCIO offers certain services through third-party platforms and software tools (for example, with its integration into our APIs), which allow us to provide reservation management services, customer service, payments, process, manage or evaluate insurance claims or similar claims.
FOROCIO is not responsible for the processing of personal information of these external providers, nor are they under the control of FOROCIO. Use of these services is subject to the privacy policies of those providers.
You should know that, as a user, each time you send a hotel reservation request, or any other service made available by FOROCIO or make a claim, certain information about you is shared with the corresponding service provider. Among the data that will be shared with these providers, such as your profile information, name, the name of any additional companions, cancellation history, the result of the claim (when applicable) and any other information that, as a user, you choose to share.
Once you have confirmed your group travel reservation, FOROCIO may share additional information to assist in the organization and coordination of the trip, such as your profile photo and telephone number.
All service providers enter into a contract with FOROCIO, which protects personal information and restricts the use of any personal information in accordance with this policy.
These service providers may, in turn, use third-party services to manage or provide their services and use the functions of the FOROCIO Platform to share information about the user/client (such as arrival and departure dates, name or telephone number ) with such external service providers.
Among the FOROCIO service providers are:
- Hotels: hotel reservation platforms through their APIs (connection between our system and yours). These apply their own contracting conditions.
- Activities and transfers : through the platform
- Car rental cars and flight booking : through API also from car rental and flight booking platforms.
- Service professionals: professionals who offer professional services through FOROCIO, such as tour guides, the contact details will be transferred to the professional so that they can manage the contracted services.
- Third party service providers (for example, credit card processing services, order processing, analytics, marketing campaign management, website management, e-mail distribution, auditing, and other similar service providers) in order to that they can carry out commercial functions on behalf of FOROCIO.
- FOROCIO travel agencies and tour operators for additional tracking of user interests, specific partners offering complementary products and services or with third parties to facilitate interest-based advertising; heat maps etc
- External reservation and collection platforms :
- analysis services
Privacy and data security
FOROCIO, is committed to the use and treatment of the personal data of the users, respecting their confidentiality and to use them in accordance with the purpose of the same, as well as to comply with their obligation to save them and adapt all measures to avoid alteration. , loss, treatment or unauthorized access, in accordance with the provisions of current data protection regulations.
This website includes an SSL certificate. It is a security protocol that ensures that your data travels in an integral and secure manner, that is, the transmission of data between a server and a web user, and in feedback, is fully encrypted or encrypted. It also includes Antispam measures, measures against attacks and phishing.
Regarding the confidentiality of the processing, FOROCIO will ensure that any person who is authorized to process the client’s data (including its staff, collaborators and providers), will be under the appropriate obligation of confidentiality (either a contractual duty or legal).
When a security incident occurs, upon realizing FOROCIO, it must notify the Client without undue delay and must provide timely information related to the Security Incident as it is known or when the Client reasonably requests it.
Security Notification and Breach Statement
At FOROCIO, we take reasonable and appropriate measures to protect personal information against loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the personal information, however, if FOROCIO, determines that your service data has been misappropriated ( including by a FOROCIO employee) has been exposed by a security breach or incorrectly acquired by a third party, FOROCIO will immediately inform you of said security breach, appropriation or improper acquisition.
Navigation
When browsing FOROCIO, non-identifiable data may be collected, which may include IP addresses, geographic location (approximately), a record of how the services and sites are used, and other data that cannot be used to identify the user. Among the non-identifying data are also those related to your browsing habits through third-party services. This website uses the following third-party analysis services:
- Analytics, TAG Manager, Search Console.
We use this information to analyze trends, administer the site, track users’ movements around the site, and to gather demographic information about our user base as a whole.
Accuracy and veracity of the data
As a user, you are solely responsible for the veracity and correctness of the data that you send to FOROCIO, exonerating FOROCIO from any responsibility in this regard.
Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.
Privacy Policy Changes
FOROCIO reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as industry practices. In such cases, FOROCIO will announce on this page the changes introduced with reasonable anticipation of their implementation.
Doubts and questions about this policy
If you have questions about this policy or if you have privacy concerns regarding access to or correction of personal information, you may contact us through our inquiry form or write to us at the following address:
info@forocio.com
While most access-related questions and issues can be handled quickly, complex requests may require more investigation and time. In such cases, the problems will be resolved, or you will be informed as to the nature of the problem and the appropriate next steps, within thirty days.
