IMPORTANT: We invite you to carefully read this Privacy Statement to understand why we collect your personal data and how it is processed by Tarannà Club de Viajes, S.A., Vallespir 174, 08014 Barcelona, Spain.
This policy is subject to changes, so it is advisable to review it each time you decide to visit us.
This Privacy Policy was last updated on 12/11/2024.
TARANNÀ, COMPANY VALUES AND PHILOSOPHY
Tarannà Club de Viajes, S.A., in its daily national and international management, works with principles of responsibility, sustainability, ethics, and transparency. Transparency is a crucial value nowadays, which is why we demonstrate our commitment to adapting the data processing systems of our company to the European Data Protection Regulation, along with Organic Law 3/2018 on personal data protection and digital rights guarantees, which develops it within the Spanish state, as well as Law 34/02, of July 11, on Information Society Services and Electronic Mail (LSSI). This alignment with European regulations ensures the protection of personal data and the privacy and rights of any citizen, user, or individual who entrusts us with their personal data to fulfill their travel dreams.
This Privacy Policy establishes the basis on which Tarannà Club de Viajes, S.A., (hereinafter referred to as the “Data Controller”), with its registered office at Vallespir Street, 174, Barcelona, processes your personal data when you provide it during your experience through the website www.taranna.com (hereinafter referred to as “the Website”) or other communication channels.
Similarly, we remind you that each time you use the Website and provide or it is necessary for us to access any type of information that, due to its nature, allows us to identify you, such as your name and surname, email address, billing or shipping addresses, phone number, device type, or debit/credit card number, etc. (hereinafter referred to as “Personal Data”), whether to browse, request travel information, contract our services, or use its features, this Privacy Policy will apply, and you should review it to ensure your compliance.
SCOPE
This online privacy statement from Tarannà Club de Viajes, S.A., is public and accessible to all users and clients of Tarannà Club de Viajes, S.A., and applies to all websites of Tarannà Club de Viajes, S.A., with www.taranna.com being the main site or domain.
It also applies to documents or messages issued by Tarannà Club de Viajes, S.A. that link to this policy or privacy statement or, where applicable, indicate accessing it to understand how Tarannà Club de Viajes, S.A. uses your personal data.
Below, we provide a general overview of how your personal information is used. Further details about its use and processing follow.
PERSONAL INFORMATION WE COLLECT
Information on the use of personal data, as provided by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR) and Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights, which adapts the Regulation to Spanish law and completes and develops its provisions (LOPDGDD).
Tarannà Club de Viajes, S.A. respects your right to privacy and complies with all current regulations to protect the personal data of its clients and users.
Your personal data is treated with the utmost confidentiality, with Tarannà Club de Viajes, S.A., as the Data Controller, adopting the necessary technical and organizational measures to guarantee the confidentiality and security of personal data, preventing alteration, loss, unauthorized processing, or access.
To provide you with information and enable you to reserve or use the products and services offered by Tarannà Club de Viajes, S.A. through its site(s), it is necessary for you to provide certain personal data to personalize our services and adapt them to your interests and needs.
We remind you that it is the user’s responsibility to notify Tarannà Club de Viajes, S.A. of any changes to your data registered on our sites to maintain it in the relevant files.
To improve the services we offer, you may receive a satisfaction survey at the end of the service provided. In this survey, you will be asked to rate the services received and provide a brief comment on your experience.
We collect your personal information for several reasons:
- To fulfill service requests
- To perform services
- To prepare quotes
- To send you updates on ongoing services
- To send promotions we consider of interest to our clients
- To conduct quality and satisfaction surveys to improve Tarannà Club de Viajes, S.A. services
- To complete the necessary documentation for processing incidents/assistance covered by your insurance company
Additionally, we may collect information about your use of our websites through various technologies, such as cookies.
You may revoke this consent at any time and exercise your rights of access, rectification, erasure, restriction of processing, data portability, and objection by the means indicated in the chapter "EXERCISING RIGHTS" in this document.
COLLECTION METHODS
Tarannà Club de Viajes, S.A. collects personal data through various channels: the website www.taranna.com; the Tarannà Club de Viajes, S.A. call center; at Tarannà Club de Viajes, S.A. physical locations when requesting a quote or service; and on the Tarannà Club de Viajes, S.A. pages on Facebook, Twitter, YouTube, Instagram, Vimeo, Pinterest, and Flickr.
In any case, and whenever applicable, we will offer you the option to refuse the use of your data for promotional messages or communications.
DISCLOSURE TO THIRD PARTIES
For managing and fulfilling the contract, it may be necessary (and mandatory for service provision) to share your data (including information about allergies, food intolerances, etc.) with suppliers such as:
- Collaborating companies for HR management, such as payroll services and/or law firms.
- Partner companies providing services contracted by you, such as travel transportation, transfers, hotels, excursions, packages, etc.
- IT service providers, including third parties who assist us with digital and e-commerce services, CRM, web analytics, and search engines.
- Third-party transportation services, such as postal services, couriers, etc.
- Third-party IT services providers for hosting, maintenance, and support of our databases and software applications containing your data.
All these third parties are highly trusted. They are only provided with the essential information necessary to perform the service you have contracted, and the agreement between these companies and Tarannà Club de Viajes, S.A. explicitly states that they may not use your personal data for any purpose other than that contracted by you. We always strive to ensure that all third parties we work with maintain the security of your personal data.
Similarly, under the Federal Legislation of the United States of America, your personal data will be accessible to the U.S. Customs Department if you book a flight originating, destined, or with a layover in that country.
You authorize the communication of data such as Name, Tax ID, Bank Data, etc., to Financial Entities working with Tarannà Club de Viajes, S.A. solely for managing transfers, collections, and payments related to our services.
The public administration within the scope of its responsibilities. Pursuant to Royal Decree 933/2021 of October 26, which establishes the documentary registration and information obligations for individuals or entities contracting accommodation and motor vehicle rental activities, the collected data may be accessible to law enforcement and public authorities within their competencies in crime prevention, detection, and investigation.
Personal data will not be disclosed to third parties except by legal obligation or judicial requirement.
Finally, you authorize us to send the necessary information for processing incidents/assistance covered by your insurance company as required.
reCAPTCHA Service
The browsing IP address will be sent to Google as part of the system to distinguish a human from an automated form filling and submission system.
All details regarding Google's privacy policy can be read on the page https://policies.google.com/privacy?hl=es
Communication with IATA-Associated Airlines
The data you provide to us may be communicated to airlines for the following purposes: Real-time flight updates, Proactive notifications in case of service interruptions (cancellations, delays, etc.), Updates related to baggage, Automatic sending of booking or boarding pass information for the available flights.
This contact information will be managed by airlines associated with IATA under their own terms. You can review the aspects related to the use of this data and your data protection rights on the airline's website, which is indicated on your ticket or flight reservation.
Data Processors Outside the European Union
Tarannà Club de Viajes, S.A. uses encrypted storage services provided by Google Inc. via Google Drive and also uses the email service provided by Google Inc. through Google Apps.
INTERNATIONAL DATA TRANSFERS
An international data transfer involves the processing of personal data that results in its transmission outside the European Economic Area (EEA). This may involve either the transfer or communication of data, or the processing of data on behalf of the data controller in Spanish territory.
The following parties are involved in an international transfer:
- Data exporter: a natural or legal person, public or private entity, or administrative body established in Spain that, in accordance with the General Data Protection Regulation (GDPR), transfers personal data to a country outside the EEA.
- Personal data importer: a natural or legal person, public or private entity, or administrative body receiving the data in the destination country, acting as the data controller, data processor, or a third party in an international data transfer.
To fulfill the service contracted with us, it may be necessary to transfer and store your personal data in a country outside the EEA. Furthermore, your information may be managed by personnel outside this region working for us or for our service providers.
Tarannà Club de Viajes, S.A. conducts personal data transfers outside the EEA securely and in compliance with the law. Since some countries lack regulations governing the use and transfer of personal data, we take measures to ensure that third parties comply with the commitments of this Policy. These measures may include reviewing the privacy and security standards of third parties and signing specific contracts based on the standard contractual clauses adopted by the European Commission.
Service providers located outside the EEA, such as Facebook, Inc. or Google, LLC, may access your personal data. These providers are participants in the "Privacy Shield," which commits them to protect your personal data under the rules and safeguards established by the European Union.
PROCESSING AND USE
You may revoke at any time the authorization you have granted to allow your data to be used for a specific purpose. This revocation of authorization will not have retroactive effect.
Provision and management of the contracted service and invoicing
Without the requested data, it will not be possible to carry out the service.
Personal data, as well as data related to the service, will be kept in our files for the necessary time to effectively ensure the service guarantee (5 years).
Data related to service invoicing will be kept in our files for the necessary time to comply with legal and tax obligations applicable to the services performed by Tarannà Club de Viajes, S.A. (5 years + the current year).
Regarding this data processing, you may, if deemed necessary, exercise the following rights:
- Access to know which data we store and process.
- Rectification in case you believe the data is incorrect or has changed (e.g., your contact details).
Processing of inquiries
Personal data, contact information, and images will be kept in our files for the time necessary to process the requested management.
Regarding this data processing, you may, if deemed necessary, exercise the following rights:
- Access to know which data we store and process.
- Opposition and limitation, so that personal data is not processed—from the moment your request is processed—for the purpose of the information service.
- Rectification in case you believe the data is incorrect or has changed.
- Deletion or erasure in case you withdraw your consent for this processing.
Quality service
To meet our customer quality commitments, we periodically conduct a survey to assess customer satisfaction with our services and work, so that we can improve our offerings.
These surveys are conducted electronically (you receive an email with a link to the website where the survey is carried out), and no personal data beyond what you have previously provided will be collected.
In any case, personal contact data collected for the purpose of sending the quality survey will only be used if you give us your explicit consent.
Personal data related to this processing will be kept for 3 months.
Regarding this data processing, you may, if deemed necessary, exercise the following rights:
- Opposition and limitation, so that personal data is not processed—from the moment your request is processed—for the purpose of the quality service.
- Rectification in case you believe the data is incorrect or has changed.
Information about Tarannà Club de Viajes, S.A. services
To keep you informed about the services provided by Tarannà Club de Viajes, S.A., and special promotions, we need to process your contact data.
Furthermore, in each communication sent, you will have the opportunity to unsubscribe from further communications; additionally, you can exercise the rights mentioned below at any time.
Regarding this data processing, you may, if deemed necessary, exercise the following rights:
- Opposition and limitation, so that personal data is not processed—from the moment your request is processed—for the purpose of the information service.
- Rectification in case you believe the data is incorrect or has changed.
- Deletion or erasure in case you withdraw your consent for this processing.
Preparation of quotes
The data you provide to us for the preparation of a quote will be kept in our files until you inform us of your decision not to proceed with its execution or until 2 years have passed, after which it will be deleted. Otherwise, it will be processed under the "Provision of Service" category.
Regarding this data processing, you may, if deemed necessary, exercise the following rights:
- Access to know which data we store and process.
- Rectification in case you believe the data is incorrect or has changed (e.g., your contact details).
- Deletion in case you definitively reject the quoted service from Tarannà Club de Viajes, S.A.
Employment application review
The data you provide to us to participate in our recruitment processes will be kept for a maximum of 1 year, after which it will be deleted, unless you are selected for the next phase.
Regarding this data processing, you may, if deemed necessary, exercise the following rights:
- Access to know which data we store and process.
- Rectification in case you believe the data is incorrect or has changed (e.g., your contact details).
- Deletion or erasure in case you withdraw your consent for this processing.
Browsing
While browsing Tarannà Club de Viajes, S.A., non-identifiable data may be collected, including IP addresses, approximate geographic location, a record of how services and sites are used, and other data that cannot be used to identify the user. Non-identifiable data also includes browsing habits through third-party services.
We use this information to analyze trends, administer the site, track users' movements around the site, and gather demographic information about our user base as a whole.
RECAPTCHA
We use the reCAPTCHA service from Google Inc. (Google) to protect data submitted through the forms on our users' pages. This service allows us to differentiate data sent by humans from automated messages and involves transmitting the IP address and other data required by Google for the use of the reCAPTCHA service. For this purpose, the data will be transmitted to Google to be used. The IP address will be encrypted by Google in European Union member states as well as in countries associated with the European Economic Area. Only in exceptional cases, IP addresses will be transmitted to Google's servers in the United States for encryption. On behalf of the owner of this website, Google will use this information to evaluate the use of the service by users. The IP address transmitted by reCAPTCHA will be kept separate from other Google data. For these data, Google's privacy policy applies. All details regarding Google's privacy policy can be read on the page https://policies.google.com/privacy?hl=es
By using the reCAPTCHA service, the user consents to the processing of their data by Google as described above.
GOOGLE ANALYTICS
This website uses Google Analytics, a web analytics service provided by Google, Inc., a Delaware company with its main office located at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States ("Google").
Google Analytics uses "cookies," which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted directly and stored by Google on servers in the United States. Google will use this information on our behalf to track your use of the website, compile website activity reports, and provide other services related to website activity and internet usage.
Google may transmit this information to third parties when required by law, or when such third parties process the information on Google's behalf. Google will not associate your IP address with any other data it holds.
You may reject the processing of data or information by rejecting the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do so, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of information about you by Google in the manner and for the purposes set out above.
EXERCISE OF RIGHTS
In line with our philosophy, we consider the protection of your personal data essential. Therefore, we inform you that, regarding the privacy of your data, you have the following rights:
- Right to Transparency of Information: This means receiving all information about how we use your personal data in a transparent, clear, and simply written manner. If you wish to exercise this right, use one of the channels indicated at the end of this section.
- Right of Access: You have the right to know and access all the personal data we hold about you. If you wish to exercise this right, use one of the channels indicated at the end of this section.
- Right to Deletion (also known as the Right to Be Forgotten). Every person has the right to request the deletion of their personal information from online service providers, provided there is no legitimate reason for the data to be retained. If requested, we are obligated to notify third parties with whom we have shared your data about the need to delete any links, copies, or replicas of that information. The purpose is to remove any trace of the person's data from the web and search engines, ensuring they are "forgotten" permanently. If you wish to exercise this right, use one of the channels indicated at the end of this section.
- Right to Restriction: You have the right to request that our company restrict the processing of your data when it is inaccurate, processing is unlawful, it is no longer needed for our purposes, or if you have lodged an objection under Article 21, Section 1 of the GDPR, while determining whether our legitimate reasons override your interests. If you wish to exercise this right, use one of the channels indicated at the end of this section.
- Right to Data Portability: The European Data Protection Regulation, along with the Organic Law 3/2018 of Personal Data Protection and Guarantee of Digital Rights, which implements it in Spain, and Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI), provides the possibility to transmit, transfer, copy, or move data from our databases to others. This grants you the right to have your personal data transferred directly, when technically possible. If you wish to exercise this right, use one of the channels indicated at the end of this section.
- Right to Rectification: You have the right to have your personal data rectified if they are inaccurate or have become invalid, or to have them completed if they are incomplete. If you wish to exercise this right, use one of the channels indicated at the end of this section.
- Right to Object: You have the right to object at any time to our company processing your personal data. If you wish to exercise this right, use one of the channels indicated at the end of this section.
You can send written communications to exercise your rights to:
Tarannà Club de Viajes, S.A.
A60361755
registered in the Commercial Registry of Barcelona, in volume 26123, page 91, sheet B-98129, 1st registration.
sending your requests to the following address:
Tarannà Club de Viajes, S.A.
Vallespir 174, 08014 Barcelona, Spain
You can also send your communications through the following channels:
- In person, at our offices
- By email to the address protecciondatos@taranna.com
- By contacting the phone number +34 934 118 373 where we are available to assist you.
The data requests sent may require you to provide additional documentation to confirm your identity.
You may also file a complaint directly with the Spanish Data Protection Agency (AEPD) in these situations:
- If you have requested to exercise your rights and have not received a response from the data controller within one month.
- If you have received a response but disagree with it.
- If you believe the data controller has violated data protection regulations in any of their activities.
In any case, you can obtain general information about privacy and personal data protection at the following link: www.agpd.es
