1. Identification.
1.1. FEEL THE CITY S.L. GROUP (hereinafter, Feel the city); company registered in the Mercantile Registry of Seville, volume 6034, folio 37, section 8, page SE-105645; with NIF B90206152; registered office at Calle Adolfo Rodriguez Jurado, 6, 5ºC, 41001, Sevilla (Spain); telephone (+34) 666394500; and e-mail https://www.feelthecitytours.com, is the owner of the website located at the Internet address monumentos@feelthecitytours.com and of its accounts on social networks (hereinafter, this Website.
1.2. Feel the city is the owner of the following social networking accounts:
1.3. The person accessing this Website (hereinafter, the User) assures that he or she is of legal age to grant consent in relation to information society services.
1.4. By accessing this Website, the User expressly accepts all the clauses of its legal information, of this privacy policy, and of its cookies policy, as well as all the particular conditions collected for the use of certain services. If the User does not accept any of the aforementioned clauses, he/she must abstain from accessing this Website.
2. Processing of personal data as responsible.
2.1. The following is more information on the different treatments carried out by Feel the city as the person in charge.
| Information provided by means of the "Book" forms | |
|---|---|
| Who is responsible for processing your data? | Feel the city (more information on point 1.1). |
| For what purpose do we process your personal data? | We will process the information you provide us with, or authorise access to, for the purpose of managing the tour guide service, billing the services and, if you so authorise, sending you commercial information about our company. |
| How long will we keep your data? | The personal data you provide will be kept for as long as you maintain the contractual or pre-contractual relationship, or for the minimum time necessary to comply with legal obligations. |
| What is the legitimacy for the processing of your data? | The legal basis for the processing of your data is the execution of a contract to which you are a party or for the application of pre-contractual measures at your request and, with regard to the sending of commercial communications, your freely given consent. |
| To whom will your data be sent? | Data will not be passed on to third parties, except with legal obligation or prior authorisation. |
| What are your rights when you provide us with your data? | You have the right to request access to your personal data, and their rectification or erasure, or the limitation of their processing, or to object to their processing, as well as the right to data portability, or the right to lodge a complaint with a supervisory authority and the right to withdraw your consent to the sending of commercial communications at any time (more information in point 7). |
| What information do you have to provide? | All the information in section 1 of the form is obligatory, if you do not provide us with this information you will not be allowed to hire the services of a tourist guide and to receive commercial communications from Feel the city. |
| Data provided using the form in the "Private groups" section | |
|---|---|
| Who is responsible for processing your data? | Feel the city (more information on point 1.1). |
| For what purpose do we process your personal data? | We will treat the information you provide us with, or authorize access to, for the purpose of managing your communication. |
| How long will we keep your data? | The personal data you provide us with will be kept as long as your communication is handled, as long as you maintain the contractual relationship, or for as long as it is necessary to comply with legal obligations. |
| What is the legitimacy for the processing of your data? | The legal basis for the processing of your data is your freely given consent. |
| To whom will your data be sent? | Data will not be passed on to third parties, except with legal obligation or prior authorisation. |
| What are your rights when you provide us with your data? | You have the right to ask the controller for access to, and rectification or erasure of, personal data concerning you, or limitation of their processing, or to object to their processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 7). |
| What information do you have to provide? | All the information on the form is obligatory, if you do not provide us with this information you will not be allowed to contact Feel the city. |
| Data provided through the form "Send us your CV" in the section "Work with us". | |
|---|---|
| Who is responsible for processing your data? | Feel the city (more information in point 1.1). |
| For what purpose do we process your personal data? | We will process the information you provide us with, or authorize access to, for the purpose of managing the candidates for the Feel the city job offers. |
| How long will we keep your data? | The personal data you provide us with will be retained for the duration of your application, while you are working, or for the years necessary to fulfil your legal obligations. |
| What is the legitimacy for the processing of your data? | The legal basis for the processing of your data is your freely given consent. |
| To whom will your data be sent? | Data will not be passed on to third parties, except with legal obligation or prior authorisation. |
| What are your rights when you provide us with your data? | You have the right to request access to your personal data, and their rectification or erasure, or the limitation of their processing, or to object to their processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 7). |
| What information do you have to provide? | All the information on the form is obligatory, if you do not provide us with this information you will not be allowed to apply for job offers from Feel the city. |
| Contact via email | |
|---|---|
| Who is responsible for processing your data? | Feel the city (more information in 1.1). |
| For what purpose do we process your personal data? | We will treat the information you provide us with, or authorise access to, for the purpose of managing the information you provide in your communication. |
| How long will we keep your data? | The personal data you provide us with will be retained while your communication is being processed, or for the minimum time necessary to comply with legal obligations. |
| What is the legitimacy for the processing of your data? | The legal basis for the processing of your data is your freely given consent. |
| To whom will your data be sent? | Data will not be passed on to third parties, except with legal obligation or prior authorisation. |
| What are your rights when you provide us with your data? | You have the right to request access to your personal data, and their rectification or erasure, or the limitation of their processing, or to object to their processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 7). |
| What information do you have to provide? | You are not required to provide any information to contact Feel the city via your email accounts. |
| Contact through social networks and WhatsApp | |
|---|---|
| Who is responsible for processing your data? | Feel the city (more information in point 1.1). |
| For what purpose do we process your personal data? | We will treat the information you provide us with, or authorize access to, for the purpose of managing contacts on social networks. |
| How long will we keep your data? | The personal data you provide us with will be kept as long as your communication is handled, as long as you maintain the contractual relationship, or for the minimum time necessary to comply with legal obligations. |
| What is the legitimacy for the processing of your data? | The legal basis for the processing of your data is your freely given consent. |
| To whom will your data be sent? | Data will not be passed on to third parties, except with legal obligation or prior authorisation. |
| What are your rights when you provide us with your data? | You have the right to request access to your personal data concerning the User, and their rectification or erasure, or the limitation of their processing, or to object to their processing, as well as the right to data portability, the right to withdraw consent at any time, or the right to lodge a complaint with a supervisory authority (more information in point 7). |
| What information do you have to provide? | You are not required to provide any information to contact Feel the city through your social networking accounts. |
3. Processing of personal data as the data processor.
3.1. The User who signs a contract for the provision of services with Feel the city as the person in charge of the processing, authorises him/her to process the personal data necessary to provide the requested service.
3.2. For the execution of the services derived from the fulfilment of the object of this order, the data controllers will make available to Feel the city, the personal data necessary to provide the service requested.
3.3. This agreement will last as long as the contractual relationship is maintained. Once the contractual relationship has ended, Feel the city must return the personal data to the person in charge or transmit them to another person designated by the person in charge, and delete any copies in his possession. However, it may keep the data blocked in order to deal with possible administrative or jurisdictional responsibilities.
3.4. Feel the city and all its staff are obligated to:
- To use the personal data that are the object of processing, or those that you collect for their inclusion, only for the purpose of this order. Under no circumstances may you use the data for your own purposes.
- Process the data in accordance with the instructions of the controller.
- Keep, in writing, a register of all categories of processing activities carried out on behalf of the controller, containing:
- The name and contact details of the manager(s) and of each person responsible on behalf of whom the manager is acting.
- The categories of processing operations carried out on behalf of each controller.
- A general description of the appropriate technical and organisational security measures being applied.
- Not to communicate the data to third parties, unless they have the express authorisation of the data controller, in the legally admissible cases. If the manager wants to subcontract, he or she has to inform the manager and request his or her prior approval.
- Maintain the duty of secrecy with regard to the personal data to which he has had access by virtue of this assignment, even after the end of the contract.
- Ensure that the persons authorised to process personal data undertake, expressly and in writing, to respect confidentiality and to comply with the corresponding security measures, of which they must be duly informed.
- To keep at the disposal of the person in charge the documentation accrediting the fulfilment of the obligation established in the previous section.
- Ensure the necessary training in the protection of personal data of persons authorised to process personal data.
- When the persons concerned exercise their rights of access, rectification, suppression and opposition, limitation of the processing and portability of data before Feel the city, this must be communicated by e-mail to the address of the person responsible. The communication must be made immediately and in no case later than the working day following receipt of the request, together, where appropriate, with other information that may be relevant to the resolution of the request.
- Notification of data security breaches: Feel the city will notify the data controller, without undue delay and through its e-mail address, of any violations of the security of the personal data in its charge of which it is aware, together with all the relevant information for the documentation and communication of the incident. The following information shall be provided as a minimum:
- Description of the nature of the personal data security breach, including, where possible, the categories and approximate number of data subjects concerned, and the categories and approximate number of personal data records concerned.
- Contact person’s details for more information.
- Description of the possible consequences of the breach of personal data security.
- Description of the measures taken or proposed to remedy the breach of personal data security, including, if applicable, measures taken to mitigate possible negative effects. If and to the extent that it is not possible to provide the information simultaneously, the information shall be provided gradually without undue delay.
- Feel the city will, at the request of the data controller, communicate such data security breaches to data subjects in the shortest possible time, when the breach is likely to pose a high risk to the rights and freedoms of natural persons. The communication must be made in clear and simple language and must include the elements indicated in each case by the person responsible, as a minimum:
- The nature of the data breach.
- Details of the contact point of the person responsible or the person in charge where further information can be obtained.
- Describe the possible consequences of a breach of personal data security.
- Describe the measures taken or proposed by the controller to remedy the breach of the security of personal data, including, if appropriate, the measures taken to mitigate possible negative effects.
- To make available to the person in charge all the information necessary to demonstrate compliance with his or her obligations, as well as for the performance of the audits or inspections carried out by the person in charge or another auditor authorized by him or her.
- Implement the necessary technical and organisational security measures to guarantee the confidentiality, integrity, availability and ongoing resilience of the treatment systems and services.
- Return to the data controller the personal data and, if applicable, the media on which they are stored, once the service has been provided.
- The return must involve the total erasure of the existing data in the computer equipment used by Feel the city. However, Feel the city may keep a copy, with the data duly blocked, as long as responsibilities may arise from the execution of the service.
3.5. It is the responsibility of the data controller to:
- Provide the person in charge with the necessary information to enable him/her to provide the service.
- Ensure, in advance and throughout the processing, that Feel the city complies with the General Data Protection Regulations.
- Supervise the treatment.
4. Social networks
4.1. By accessing the accounts of Feel the city on social networks, the User accepts the treatment of their personal data by them according to their privacy policies:
5. Methods of payment.
5.1. By accessing the means of payment, the User accepts the processing of his/her personal data by them in accordance with their privacy policies:
6. Warranty.
6.1. The User guarantees that the information provided is true, accurate, complete and up to date, and is liable for any damage or injury, direct or indirect, that may be caused as a result of the breach of such obligation.
6.2. In the event that the data provided belonged to a third party, the User guarantees that he has informed the third party and obtained their consent to provide their personal data to Feel the city.
7. Rights.
7.1. Right of access: The User shall have the right to obtain confirmation from Feel the city as to whether or not personal data concerning him/her are being processed and, if so, the right to access the personal data.
7.2. Right of rectification: The User will have the right to obtain, without undue delay from Feel the city, the rectification of inaccurate personal data concerning him/her. In view of the purposes of the processing, the User shall have the right to have incomplete personal data supplemented, including by means of an additional declaration.
7.3. Right of suppression: The User shall have the right to obtain without undue delay from Feel the city the suppression of personal data concerning him/her, which shall be obliged to suppress the personal data without undue delay.
7.4. Right to limitation of processing: The User shall have the right to obtain from Feel the city the limitation of data processing.
7.5. Right to data portability: The User shall have the right to receive the personal data concerning him/her, which he or she has provided to Feel the city, in a structured format, for common use and mechanical reading, and to transmit them to another data controller without being prevented by the data controller to whom they have been provided.
7.6. Right of opposition: The User shall have the right to object at any time, for reasons related to his/her particular situation, to the processing of personal data concerning him/her. Feel the city will stop processing personal data, unless it proves compelling legitimate reasons for the processing that prevail over the interests, rights and freedoms of the User, or for the formulation, exercise or defence of claims.
7.7. Automated individual decisions, including profiling: The User shall have the right not to be the subject of a decision based solely on automated processing, including profiling, which has legal effects on him or her or significantly affects him or her in a similar way.
7.8. Right to withdraw consent: The User shall have the right to withdraw his/her consent at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to withdrawal. It will be as easy to withdraw consent as it is to give it.
7.9. Users may exercise their rights before Feel the city by writing to Calle Adolfo Rodriguez Jurado, 6, 5ºC, 41001, Sevilla (Spain), or by e-mail to monumentos@feelthecitytours.com
7.10. More information about these rights here.