Privacity policy

I. PRIVACY POLICY AND DATA PROTECTION

Respecting the current legislation, SAHA TOURS (hereinafter, also the Website) undertakes to adopt the necessary technical and organizational measures, according to the security level appropriate to the risk of the collected data.

 

Laws incorporated into this privacy policy

This privacy policy complies with current Spanish and European regulations on the protection of personal data on the internet. Specifically, it adheres to the following rules:

    • The Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data (GDPR).
    • The Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
    • The Royal Decree 1720/2007, of December 21, approving the Regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
    • Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).

 

Identity of the controller of personal data processing

The controller of the personal data collected at SAHA TOURS is: STE SAHATOURS. COM (SARL) A.U, with NIF/CIF: 15233149, registered at: STE SAHATOURS. COM (SARL) A.U. The contact details are as follows:

Address: RUE 07 AV MOHAMED V 52200, ERFOUD – MOROCCO

Contact phone: 00212 667 499 749

Contact email: aventurasahatours@gmail.com

 

Registration of Personal Data

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by SAHA TOURS, through the forms on its pages, will be incorporated and processed in our file in order to facilitate, expedite, and fulfill the commitments established between SAHA TOURS and the User, or the maintenance of the relationship established in the forms filled out by the User, or to respond to a request or inquiry. Likewise, in accordance with the provisions of the GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained that specifies, according to its purposes, the processing activities carried out and other circumstances established in the GDPR.

 

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles outlined in Article 5 of the GDPR and Article 4 and following of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights:

  • Principle of lawfulness, loyalty, and transparency: the User’s consent will be required at all times, preceded by completely transparent information about the purposes for which personal data is collected.
  • Principle of purpose limitation: personal data will be collected for specific, explicit, and legitimate purposes.
  • Principle of data minimization: collected personal data will be only those strictly necessary for the purposes for which they are processed.
  • Principle of accuracy: personal data must be accurate and always kept up to date.
  • Principle of limited storage period: personal data will only be kept in a form that allows the identification of the User for the time necessary for the purposes of its processing.
  • Principle of integrity and confidentiality: personal data will be processed in a way that ensures their security and confidentiality.
  • Principle of proactive responsibility: the Data Controller will be responsible for ensuring that the above principles are met.

 

Categories of personal data

The categories of data processed at SAHA TOURS are only identifying data. In no case are special categories of personal data processed within the meaning of Article 9 of the GDPR.

 

Legal basis for the processing of personal data

The legal basis for the processing of personal data is consent. SAHA TOURS undertakes to obtain the explicit and verifiable consent of the User for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, the withdrawal of consent will not condition the use of the Website.

On occasions when the User must or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed in case the completion of any of them is mandatory because they are essential for the correct development of the operation carried out.

 

Purposes of the processing of personal data

Personal data is collected and managed by SAHA TOURS with the aim of facilitating, expediting, and fulfilling the commitments established between the Website and the User or maintaining the relationship established in the forms filled out by the latter or to respond to a request or inquiry.

Likewise, the data may be used for commercial purposes of personalization, operation, and statistics, and activities inherent to the corporate purpose of SAHA TOURS, as well as for the extraction, storage of data, and marketing studies to adapt the Content offered to the User, as well as improve the quality, operation, and navigation of the Website.

At the time of collecting personal data, the User will be informed about the specific purpose(s) of the processing to which the personal data will be destined; that is, the use(s) that will be given to the collected information.

 

Retention periods for personal data

Personal data will only be retained for the minimum time necessary for the purposes of its processing and