Privacy Policy

OUR PRIVACY POLICY AT A GLANCE

About us We are NORTOUR, SL and we process your data as the Data Controller. This means that we are responsible for how your personal data is used and protected.

What do we use your data for? We use the data you have provided online or through any other means to respond to your inquiries and suggestions, and to monitor the comments made on our blog.

Why do we have them? We are entitled to process your data for different reasons. By filling out a form or sending an e-mail in which you ask us a question or suggestion, we have a legitimate interest in attending to it.

With whom do we share your data? We will only share the data with those collaborating companies to meet the requests received and provide our services or provide you with the products, banking entities and bodies required by law. In no case do we sell your data to third parties.

What rights do you have? You have the right to access, rectify or delete your personal data.  You also have the right to object to our use of data that you have previously authorized us to use, to port your data, and to no longer be subject to automated individual decisions.

In the treatment of your personal data, we apply the following principles to guarantee the greatest protection for you:

• Principle of legality, loyalty and transparency: We will always require your consent to the processing of your personal data for one or more specific purposes that we will inform you in advance with absolute transparency.
• Principle of data minimization: We are only going to request strictly necessary data in relation to the purposes for which we require them. The minimum possible.
• Principle of limitation of the conservation period: the data will be kept for no longer than necessary for the purposes of the treatment, depending on the purpose, we will inform you of the corresponding conservation period, in the case of subscriptions, we will periodically review our lists and eliminate those inactive records for a considerable time.
• Principle of integrity and confidentiality: Your data will be treated in such a way that an adequate security of personal data is guaranteed and confidentiality is guaranteed. You should know that we take all necessary precautions to prevent unauthorized access or improper use of the data of our users by third parties.

In this privacy policy you will find more detailed information about the use we make of the personal data of our customers, suppliers and users, and in general of all the people who maintain contact with us, regardless of the means they have used to communicate (form online, by phone or by e-mail, in person).

We like to be transparent about what we do with your personal data, so that you understand the implications of the uses we carry out, or the rights you have in relation to your data. For this reason we keep our Privacy Policy, the Legal Notice and the Cookies Policy updated, information that you can consult on this same web page.

If you have any questions or want more information about the privacy policy, you can continue reading the document.

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The entity responsible for processing your data is NORTOUR, SL:

NORTOUR, SL informs the user that the data provided through browsing our website, the different data collection forms or in sending emails, will be processed by NORTOUR, SL and that said processing is included in the Register of Processing Activities managed by NORTOUR, SL in accordance with the provisions of the GDPR.

2. WHAT IS YOUR PERSONAL DATA USED FOR?

At navieranortour.com, we process data from both our website users and third parties who have a relationship with us. To help you understand how we process your data, we have differentiated the purpose for which we use the data, the types of data, and the legal basis for processing, depending on the category of individuals whose data we process. Below, we classify the individuals whose data we process based on the type of relationship they have with NORTOUR, SL

Web users

What data do we collect from our website users?

a) Data of users who fill out any of the available forms: The personal data that NORTOUR, SL requests includes:

• Identifying data: name and email address
• Data relating to the application

b) Data from users who browse our website: Data provided by cookies and Google Analytics.

c) Data of users who make comments on our blog

For what purposes are we going to process your personal data?

When the user accepts our privacy policy, he authorizes us to use the personal data provided for the following treatments:

• Send you the information and provide the service you request through the various forms available on our website.
• Manage your comments on our blog.
• To send you commercial communications about offers, activities and promotions from NORTOUR, SL and the sector that may be of interest to you by conventional or electronic means when you have checked the box that you wish to receive information.

How do we obtain your data?

We obtain your data through:

• The form that the web user fills in for the purpose that is included in it. The form is subject to the acceptance of this privacy policy through the indicated box.

What is the legitimacy for the treatment of your data?

El express consent of the user (Article 6.1.a. GDPR) expressed through the completion of the different forms, the marking of offers, activities and promotions of NORTOUR, SL and the sector that may be of interest to you and participation in our blogs, which legitimizes the processing by NORTOUR, SL. The user may revoke the consent given at any time, although if the consent is revoked, this does not affect the data processing carried out prior to the revocation of this.

El legitimate interest for the creation of browsing profiles and to detect preferences through the installation of cookies.

La execution of a contract or the adoption of pre-contractual measures when the customer makes a request through the different forms available to the user on our website or requests information about the services provided by NORTOUR, SL.

CLIENTS

What data do we collect from our customers?

a) Data from customers who fill out any of the forms available on navieranortour.com as well as at the physical establishment of NORTOUR, SL

• Identifying data: name and surnames, telephone, postal and electronic address
• Data relating to the application

b) Data of our clients obtained through our contracts and budgets

How do we obtain your data?

If you are an online customer, we obtain your data through: The form you complete when requesting information or a quote. This form is subject to your acceptance of this privacy policy by checking the indicated box.

• We obtain browsing data from the different cookies that the customer accepts when accessing navieranortour.com for the first time.

If you are a face-to-face customer, we obtain your data through:

• The client registration form.
• The acceptance of the budget presented.
• The signed contract.

For what purposes are we going to process your personal data?

• Generate and manage the documentation associated with your requests and purchases.
• Provide you with information about offers, products and services related to your purchase.
• Process your reservation or purchase online through our platform.

What is the legitimacy for the treatment of your data?

At execution of a pre-contract / contract to send you the information and manage the service provided, otherwise it will not be possible to carry it out.

The user may revoke the consent given at any time.

JOB APPLICANTS AND CANDIDATES.

What data do we collect from applicants?

a) Candidate data requested in the 'work with us' form by NORTOUR, SL:

• Identifying data: name and surnames, telephone, postal and electronic address
• Academic and labor data
• Data that the candidate himself includes as attached documents

How do we obtain your data?

We obtain your data through:

• The delivery of a CV in our facilities or the completion of the 'Work with us' form on our website.

For what purposes are we going to process your personal data?

The personal data that the candidates provide us with is used only for the selection processes that are open or will be carried out in the event that the data provided is for our employment exchange.

What is the legitimacy for the treatment of your data?

At the consent of the user by incorporating your data and your resume on the NORTOUR, SL website to participate in the selection processes that are active, as well as in future processes that may be carried out as long as you do not object to the processing of your data.

• SOCIAL NETWORKS CONTACTS

What data do we collect?

a) Identifying information on the Social Network: NORTOUR, SL will not request any data beyond what you have included in your user profile.

For what purposes are we going to process your personal data?

Answer and manage your queries, requests or requests.

Engage with you while you are part of our community of followers.

What is the legitimacy for the treatment of your data?

At execution of a pre-contract / contract which links you to the corresponding social network and in accordance with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

Twitter https://privacy.x.com/es

LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Pinterest https://about.pinterest.com/es/privacy-policy

YouTube https://policies.google.com/privacy?hl=es&gl=es

navieranortour.com will always strive to establish appropriate mechanisms to obtain the User's consent for the installation of cookies that require it. When a user accesses our website, a pop-up appears informing them of the existence of cookies and that by continuing to browse our site, they consent to the installation of cookies. Acceptance of the installation of cookies implies acceptance of the storage of the IP address in navieranortour.com's logs, along with the date of acceptance, for a period of one year, for the purpose of demonstrating the consent given.  You can find more information in our “Cookie Policy”.

1. HOW LONG DO WE KEEP YOUR DATA?

• WEB USERS

Those data that are processed based on the consent of the web user will be kept as long as they are relevant for the purpose for which they were collected and the consent is not revoked.

Those data that are treated based on legitimate interest, the conservation time will be linked to the one that motivated the collection of the data, always ensuring the adequate guarantees and respect for the rights and freedoms of the interested parties.

Data that is processed based on the execution of a contract or the adoption of pre-contractual measures will be kept for the period during which the contractual relationship remains in force, as well as for the subsequent time that must be kept due to legal obligation.

The IP address obtained through the cookies will have a shelf life of one year, in order to demonstrate the user's consent.

Regarding the term of conservation of cookies, you can obtain more information on our website in the section "Cookies policy"

• CLIENTS

Those data that are processed based on the client's consent will be kept as long as they are relevant for the purpose for which they were collected and the consent is not revoked.

Those data that are treated based on legitimate interest, the conservation time will be linked to the one that motivated the collection of the data, always ensuring the adequate guarantees and respect for the rights and freedoms of the interested parties.

Data processed under a contract, or where part of the processing is based on a legal obligation, will be retained for the duration of the contractual relationship. Once the contract ends, if the processing is linked to a legal obligation, the data will be retained for the period stipulated by law, and the data subject may not revoke the processing of their data except in cases where legally provided for blocking the data.

• JOB APPLICANTS AND CANDIDATES

Data processed with the applicant's consent will be retained for as long as the selection process for which they applied remains open. If the application is not for a specific selection process but for future opportunities, the data will be retained for a maximum of one year, at which time the CV will be deleted and destroyed unless the applicant requests its retention and it is updated.

• SOCIAL NETWORKS CONTACTS

The data processed from social media contacts will be kept as long as the user and NORTOUR, SL maintain a connection on the social network. Since NORTOUR, SL does not directly control the processing of this data, we can only access or delete it in a limited way. We will process your data for as long as you maintain a connection with NORTOUR, SL on the social network, such as as a 'friend', or by clicking 'like', 'follow', or similar buttons.

To proceed with the rectification of your data, restriction of information or of those publications that you share, NORTOUR, SL will not be responsible for making such rectifications, but rather the user of the Social Network must do so by configuring their profile according to the privacy policy of the Social Network itself.

Regardless of the legitimacy that protected the data collection, it may be processed for scientific, historical or statistical research purposes, always implementing the appropriate guarantees and respecting the rights and freedoms of the interested parties.

4. ADDITIONAL INFORMATION ON DATA PROCESSING

Only older than 14 years You can provide information through our website and email. If you are under this age, you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and accuracy of all data communicated to NORTOUR, SL and declares that he/she is over 14 years of age, and will be solely responsible for any false or inaccurate statements made.

The personal data processed by NORTOUR, SL may be mandatory or voluntary. No special categories of data will be requested through the web forms to guarantee your privacy. If it is necessary to collect special categories of data to provide you with a service, you will be asked for it through another channel. The data that will be requested in the forms are:   

a) Data relating to the application.   

The voluntary information is that which the user is not obliged to provide to contact us.

The fields marked with an asterisk (*) or with the word (required) in our forms are mandatory, the refusal to supply them will make it impossible to provide the service or meet your request.

If you provide us with third-party data, you represent that you have their consent and agree to provide them with the information we provide in this clause, releasing NORTOUR, SL from any liability. However, NORTOUR, SL may carry out checks to verify that the third party has been informed, taking the due diligence measures established in data protection regulations.

5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

No data will be transferred to third parties except due to legal obligation or in the case that is necessary to meet your request.

Among the recipients to whom your data may be communicated are:

• Public administrations and bodies when required by tax, labor, social security, or any other applicable regulations. Companies responsible for data processing (providers of fraud detection and prevention, technology services, customer service, advertising and marketing services, and, in general, third-party providers necessary for the provision of services offered by NORTOUR, SL, such as courier and transport services, etc.).

6. ARE THERE INTERNATIONAL DATA TRANSFERS? 
navieranortour.com is hosted in Germany, a country that is in the European Union, in the territory of the European Economic Area, or that complies with the guidelines established in articles 46 and 47 of the GDPR, therefore, no international transfers of data provided by users on the website will take place.

Our website only accesses user data using the following ways:

• Through the contact forms available to the user on the web.
• Through the comments made by the user on the website's blog.   

International data transfers may also occur within the scope of the above transfers/communications, for which NORTOUR, SL will use the tools provided in Articles 46 and 49 of the GDPR as a guarantee of those transfers made to countries that do not have an adequacy decision from the European Commission.

In any case, the third parties with whom certain personal data is shared will have previously accredited the adoption of adequate technical and organizational measures for the correct protection of these and will be carried out only with third countries when there is a binding legal instrument in accordance with Articles 46 and following of the RGPD. With the acceptance of this privacy policy, it is accepted that an international transfer of data may occur in accordance with the indicated guarantees.

In the event that the requirements established in the RGPD are not met, the interested party may grant their consent to the international transfer or execute a contract in the interest of the interested party. Otherwise, an authorization must be requested from the Control Authority.

We also inform you that some services provided by and for NORTOUR, SL may involve the transfer of personal data to a third country outside the EU, via cloud services offered by some of the leading international providers (e.g., Google, Microsoft). Compliance with the aforementioned requirements will be confirmed for these services.

NORTOUR, SL does not sell user data to third parties under any circumstances.

7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user may exercise the following rights before NORTOUR, SL:

a) Access your personal data

b) Rectify them when they are inaccurate or incomplete

c) Request the deletion or cancellation of the data when, among other reasons, they are no longer necessary for the purposes for which they were collected.

d) Oppose their treatment

e) Request the limitation of the processing of your data when any of the conditions provided for in the regulations are met.

f) Request the portability of your data in the cases provided for in the regulations

d) To prevent being subject to automated decisions

h) Revoke the consents granted

To exercise their rights, users must send a written request specifying the right they wish to exercise, along with proof of identity and a postal or email address for notification purposes. This request can be made by mail to: NORTOUR, SL BAJO AMARILLO, 28 35660 – CORRALEJO  (LA OLIVA, FUERTEVENTURA), or at the following email address: rgpd@navieranortour.com.

NORTOUR, SL must respond to the request to exercise rights in the one month term from the date of receipt of the application. This period may be extended by another two months if necessary, taking into account the complexity and number of applications.  We will inform you of any extension within one month of receiving your request, stating the reasons for the delay.

Likewise, interested parties have the right to file a complaint with the competent Supervisory Authority (Spanish Data Protection Agency) when they consider that NORTOUR, SL has violated the rights granted to them by data protection regulations. www.aepd.es

8. IS MY DATA SECURE?

NORTOUR, SL has a current contract with the hosting company IONOS SE for hosting its website. IONOS SE is a European company and uses the latest security measures.

In any case, NORTOUR, SL guarantees the adoption of appropriate measures to ensure the confidential treatment of your data, taking into account its confidential nature, and undertakes to keep said data secret, treating it with the utmost confidentiality, and declares that it has implemented in its information system the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate, which ensures that when a user visits our site and exchanges information with us, an encrypted connection is established.

9. LINKS TO OTHER WEBSITES

If you choose to leave our website via links to other websites not belonging to our company, NORTOUR, SL will not be responsible for the privacy policies of those websites or for the cookies they may store on the user's computer.

Date: 06 / 11 / 2025

Version: V.1.0