Privacy Policy

TAIVAS SIGNATURE, S.L.U. — VAT number (NIF): B05627773

C/ Manuel de Falla 9, 28224 Pozuelo de Alarcón, Madrid, Spain.

Email: hugo.garciagil@fora.travel — Website: www.taivasignature.com

Depending on the service requested, Taivas may process:

• ·full name;
• ·email address;
• ·phone number;
• ·address;
• ·billing details;
• ·travel dates;
• ·destinations;
• ·travel preferences;
• ·group composition;
• ·travellers' names and ages;
• ·dates of birth where necessary;
• ·data required to make bookings;
• ·passport or travel document data where necessary;
• ·booking information;
• ·communications held with Taivas;
• ·information required for invoicing and administrative management;
• ·accommodation, dining, activities and services preferences;
• ·and any other information voluntarily provided to manage the requested service.

Taivas will apply the principle of minimisation and will only request the data reasonably necessary.

On family trips it may be necessary to process minors' data.

Such data must be provided by their parents, guardians or legally entitled persons.

Minors' data will be used exclusively for the purposes necessary to provide the requested service.

Certain requests may involve information relating to allergies, health, mobility, accessibility or other personal circumstances.

Taivas will process such information only where necessary to provide the requested assistance and where a valid legal basis exists.

Where appropriate, explicit consent will be requested.

Data may be processed for:

• ·answering enquiries;
• ·preparing proposals;
• ·designing itineraries;
• ·managing bookings;
• ·coordinating suppliers;
• ·providing concierge services;
• ·issuing invoices;
• ·managing payments;
• ·complying with legal obligations;
• ·maintaining trip-related communications;
• ·resolving incidents;
• ·evidencing authorisations;
• ·and defending legitimate rights and interests.

The legal bases may be:

pre-contractual measures requested by the data subject; performance of a contract; compliance with legal obligations; legitimate interest where applicable; and consent where legally necessary.

Commercial communications will be sent only where a valid legal basis exists.

Where consent is necessary, it will be requested separately, voluntarily and via an unticked checkbox.

Consent may be withdrawn at any time.

Where necessary to provide the requested services, Taivas may disclose the essential data to:

• ·hotels;
• ·Fora Travel where the booking is processed through its systems or credentials;
• ·agencies;
• ·booking platforms;
• ·DMCs;
• ·tour operators;
• ·airlines;
• ·transport companies;
• ·guides;
• ·activity companies;
• ·restaurants;
• ·insurers where applicable;
• ·technology providers;
• ·CRMs;
• ·email and storage services;
• ·tax, accounting or legal advisors;
• ·and public authorities where a legal obligation exists.

Due to the international nature of travel, it may be necessary to disclose data to suppliers located outside the European Economic Area.

Where the GDPR applies, the corresponding legal mechanism will be used.

Where the client provides data of relatives, companions or third parties, they declare they are entitled to provide it and undertake to inform them where necessary.

Data will be retained for the time necessary to handle the request and provide the contracted services.

Thereafter they may be retained for the periods necessary to meet tax, accounting, contractual, commercial or legal obligations.

Data subjects may exercise, where applicable: access; rectification; erasure; objection; restriction; portability; and withdrawal of consent.

Requests may be sent to: hugo.garciagil@fora.travel

They may also be sent by post to:

Taivas Signature, S.L.U., C/ Manuel de Falla 9, 28224 Pozuelo de Alarcón, Madrid, Spain.

Data subjects may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

Taivas will apply appropriate technical and organisational measures.

Full card numbers, CVV, PINs and banking passwords must never be requested via ordinary web forms, email or WhatsApp.

Where a payment is necessary, the secure links or systems of the corresponding providers will preferably be used.

This policy may be modified when services, suppliers, regulations or technologies change.

The current version will be identified by version number and date.