Contact

PRIVACY POLICY

In accordance with the data protection legislation in force — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter, the LOPD-GDD) — the user is hereby informed, as required by Article 13 of the GDPR and Article 11 of the LOPD-GDD, of the following:

1 | DATA CONTROLLER

  • Company name: FLY TRIPS CENTER SLU
  • Tax ID (CIF): B70637004
  • Registered address: Avda. Fuentemar, 20, B24, 28823 Coslada (Madrid), Spain
  • Email: info@flyfishingexperiences.es
  • Website: https://flyfishingexperiences.es/
  • Register of Tourism Companies, retail travel agency group, CICMA: 4685
  • Companies Register details: Volume 32826, Sheet 192, Page M-590917, Entry 1

2 | PURPOSE

FLY TRIPS CENTER SLU processes your information in order to:

  1. Maintain the commercial relationship and provide the contracted service.
  2. Prepare a quotation tailored to your needs.
  3. Manage email communications with interested parties.
  4. Carry out the company’s recruitment processes.
  5. Manage the company’s employees and human resources.
  6. Send commercial information relating to our sector: ONLINE TRAVEL AGENCY.
  7. Provide care or health-related services, or services involving the processing of health data, in order to deliver the contracted services.
  8. Monitor the security of our premises (video surveillance).
  9. Manage training activities.

The personal data you provide will be kept for as long as the commercial relationship remains in force. However, in the interests of full transparency, the general retention periods we work with are as follows:

  • General identification data (email address, first name, surname, telephone number, etc.): for the duration of the commercial relationship or until consent is withdrawn. In any event, data will be deleted when it is no longer to be used for the purpose for which it was collected.
  • Spanish Law on Infringements and Penalties in the Social Order (obligations relating to affiliation, registrations, deregistrations, social security contributions, payment of salaries, etc.) and Articles 66 et seq. of the General Tax Law (accounting records, etc.): four (4) years.
  • Personal actions with no specific time limit (Article 1964 of the Spanish Civil Code): five (5) years.
  • Accounting, tax and employment records (Article 30 of the Spanish Commercial Code — accounting books, invoices, etc.): six (6) years.
  • Employment: contracts, working time records, salary and contribution receipts and identification documents, four (4) years; occupational risk prevention reports, illness or accident files and contracts with prevention services, five (5) years.
  • Data subject to the Spanish Law on the Prevention of Money Laundering and Terrorist Financing (Article 25): ten (10) years.
  • Recruitment processes: two (2) years from receipt of the CV.
  • Healthcare: five (5) years from the discharge of each care process.
  • Video surveillance: thirty (30) days, unless an infringement and/or offence has been recorded.
  • In addition, where commercial information is sent, the controller will continue to keep your information for the purpose of sending newsletters relating to our products and services, even if the relationship between the parties comes to an end. You may exercise the rights granted to you by the legislation in force at any time by contacting us through whichever channel is most convenient for you.
  • Aggregated and anonymised data: no time limit.

Notwithstanding these general periods, we review our systems periodically in order to delete any data that is no longer legally necessary.

3 | LEGAL BASIS

Depending on the purposes for which your data is collected, processing is necessary as follows:

1 | Managing the commercial relationship you have entered into with us.
  • Performance of a contract (Article 6.1.b GDPR)
  • Consent of the data subject (Article 6.1.a GDPR)
2 | Preparing a quotation tailored to your needs.
  • Performance of a contract and/or pre-contractual relationship (Article 6.1.b GDPR)
3 | Managing email communications with interested parties.
  • Consent of the data subject (Article 6.1.a GDPR)
  • Legitimate interest (Article 6.1.f GDPR)
4 | Carrying out the company’s recruitment processes.
  • Consent of the data subject (Article 6.1.a GDPR)
5 | Managing the company’s employees and internal human resources.
  • Performance of a contract (Article 6.1.b GDPR)
6 | Sending commercial communications.
  • Consent of the data subject (Article 6.1 GDPR)
  • Consent of the data subject (Article 20 of the Spanish LSSICE)
  • Legitimate interest (Article 6.1.f GDPR and Article 21.2 LSSICE)
7 | Providing care or health-related services.
  • Consent of the data subject (Article 6.1.a GDPR)
8 | Monitoring the security of our premises (video surveillance).
  • Legitimate interest (Article 6.1.f GDPR)
9 | Managing training activities.
  • Performance of a contract (Article 6.1.b GDPR)
  • Consent of the data subject (Article 6.1.a GDPR)

All the data collected is necessary in order to provide the service. Fields marked with an asterisk (*) are mandatory. If mandatory data is not provided, the controller will not be able to provide the contracted service.
Please also note that only persons over the age of 14 may provide personal data on this website. As required by the LOPD-GDD, for children under 14 the consent of their parents or guardians is mandatory before we can process their personal data.
In addition, only persons over the age of 18 may contract our services. For those under 18, the consent of their parents or legal guardians is mandatory before we can provide the services offered, unless the minor is legally emancipated.

4 | YOUR RIGHTS AS A DATA SUBJECT

In accordance with Article 13 of the GDPR and Article 11.2.c) of the LOPDGDD, you may exercise any of the following rights by contacting us at the postal address Avda. Fuentemar, 20, B24, 28823 Coslada (Madrid), Spain, or at the email address INFO@THEFLYCENTER.COM. In any event, under the legislation in force you have the following rights, as set out in Articles 15 to 22 of the GDPR and Articles 12 to 18 of the LOPDGDD:

  • The right to request access to your personal data.
  • The right to request its rectification or erasure.
  • The right to request the restriction of processing.
  • The right to object to processing.
  • The right to data portability.

You may request the relevant forms for exercising your rights from the controller at the email address given in the controller’s details. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD). Further information is provided in Section VII of this document.

5 | RECIPIENTS

You will always be informed and, where appropriate, your express consent will be requested before your personal data is disclosed or any international transfer is carried out, in accordance with the legislation in force (Articles 13.1.e) and 44 GDPR, and Articles 11.1 and 40 of the LOPDGDD 3/2018). The third parties the controller works with have their servers located within the EU, the EEA or Switzerland and have appropriate security measures in place to guarantee the confidential and lawful processing of data.


Apart from the cases mentioned above, and except where required by law, your data will not be transferred or disclosed to any third party, except in the cases provided for by law or where strictly necessary in order to provide a service. In general terms, data may be disclosed to:

  • Technology service providers.

  • Payment service providers.

  • Courier and parcel companies.

  • Third parties or intermediaries acting as service providers on our behalf (administrative and accounting firms, consultants, self-employed collaborators, etc.).

  • Third-party processors, collaborators or companies with a close commercial relationship with the controller, for the sole purpose of providing our services.

Any disclosure of data will take place in the strictest confidence, using the necessary measures, such as signing confidentiality agreements or adhering to the privacy policies published on the relevant websites. Users may refuse the disclosure of their data to processors by submitting a written request through any of the channels referred to above. The controller will not transfer or disclose your data to any third party, except in the cases provided for by law or where the provision of a service requires a contractual relationship with a processor. Users therefore accept that some of the personal data collected may be provided to these processors (payment platforms, administrative firms, intermediaries, etc.) where this is necessary for the effective provision of a contracted service or purchased product. Users also accept that, where services are provided, these may be subcontracted in whole or in part to other individuals or companies, which will be considered processors and with which the corresponding confidentiality agreement has been entered into, or whose privacy policies published on their respective websites have been adhered to. Users may refuse the disclosure of their data to processors by submitting a written request through any of the channels referred to above.

6 | ORIGIN OF YOUR DATA

The personal data used by FLY TRIPS CENTER SLU is obtained from the data subject themselves, in compliance with Article 13 of the GDPR and Article 11 of the LOPDGDD referred to above, or from group or partner companies, about which you can obtain further information by writing to info@flyfishingexperiences.es or by contacting the controller’s office at the postal address given in this document.

The categories of personal data processed are as follows:

Identification data

  • First name | Surname
  • National ID / foreigner ID / passport or equivalent document
  • Postal addresses
  • Email addresses
  • Gender
  • Date of birth
  • Place of birth
  • Contact telephone number (mobile / landline)
  • Commercial information: our own and third-party
  • Financial data
  • Bank account number
  • Credit card number
  • Curriculum vitae
  • Academic data
  • Qualifications
  • Interests
  • Membership of associations or clubs
  • Video surveillance
  • Image

Sensitive data will be processed in accordance with Article 9 of the GDPR and Article 9 of the LOPDGDD, and the data subject will always be informed about which data will be used by the controller.

7 | ADDITIONAL INFORMATION

Users of the controller’s website are informed that all technical and organisational security measures within our reach have been adopted in order to prevent the loss, misuse, alteration, unauthorised access and theft of data, thereby guaranteeing the confidentiality, integrity and quality of the information, in accordance with the data protection legislation in force. The personal data collected through the forms is processed solely by the controller’s staff or by the designated processors. The website also uses SSL encryption, allowing Users to send their personal data securely through the contact and registration forms on the website.

The controller has profiles on some of the main social networks (Facebook, Instagram) and acts in all cases as the controller of the data of its followers, fans, subscribers, commenters and other user profiles (hereinafter, followers) published by the controller.

Where not prohibited by law, the purpose of processing this data is to inform followers about the controller’s activities and offers, through any channel the social network allows, and to provide a personalised customer service. The legal basis for this processing is the consent of the data subject, which may be withdrawn at any time.

Under no circumstances will the controller extract data from social networks unless the User’s specific and express consent has been obtained for that purpose (for example, in order to run a competition).

The information provided by the User will in all cases be treated as confidential and may not be used for purposes other than those described here. The controller undertakes not to disclose or reveal information about the User’s requests, the reasons for the advice sought or the duration of their relationship with the controller.

The User declares that all the data they provide is true and correct and undertakes to keep it up to date. The User is responsible for the accuracy of their data and will be solely liable for any dispute or litigation that may arise from any inaccuracy. So that we can keep personal data up to date, it is important that the User informs the controller whenever any of their data changes.

https://legaldpo.es/, based on the information provided by the data controller. The content complies with the legislation in force as at February 2023 and may vary in line with legislative changes or case law. It is the owner’s responsibility to check that it remains up to date.

8 | SUPERVISORY AUTHORITY

We make every effort to comply with data protection legislation, as this is our most valuable asset. However, if you believe that your rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid, Spain. Further information about the AEPD: http://www.agpd.es/. Documentation prepared by LegalDPO: https://legaldpo.es/