PRIVACY POLICY
1. Data Controller
Controller: Viajes Lay Tour S.L.
CIF: B06182166
Address: Avenida Espartinas, 21 – LOC 40 41, Bollullos de la Mitación, 41110, Sevilla (Spain)
Contact email: laytours@laytours.com
2. Purpose of Data Processing
Personal data collected through the forms on this website will be processed for the following purposes:
Managing contact or information requests.
Processing service or travel bookings.
Sending commercial communications (only with prior consent).
Complying with legal obligations.
3. Legal Basis
The legal basis for data processing is the data subject’s consent (Article 6.1.a GDPR) and the execution of a contract or pre-contract (Article 6.1.b GDPR), in cases involving service provision.
4. Data Recipients
Data will not be transferred to third parties, except under legal obligation or when necessary for the performance of services (e.g., hosting, payment platforms, or data processors).
5. International Data Transfers
Viajes Lay Tour S.L. may use technology services from providers located outside the European Economic Area (such as Google Analytics), applying the appropriate safeguards as required by GDPR.
6. Data Retention
Personal data will be retained as long as the relationship with the user remains active, or until the user requests deletion. After that, the data will be kept for the legally required time.
7. User Rights
Users have the right to:
Access their personal data.
Request rectification of inaccurate data or request erasure.
Request restriction of processing.
Object to processing.
Request data portability.
To exercise these rights, users may write to the address provided above, including a copy of their ID or passport, or contact us by email at laytours@laytours.com.
You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security Measures
Viajes Lay Tour S.L. applies the necessary technical and organizational measures to ensure the security and confidentiality of personal data and to prevent unauthorized access, loss, or misuse.