Privacy Policy
Responsible for the data:
WAW TRAVEL ADVENTURES SL
Data Capture:
Through forms on the web (chat, contact, and reservation), newsletter, email, SMS, WhatsApp, or social networks of WAW.travel.
Purpose of the data:
Provide the services offered on the web, information management and commercial communication, resolution of doubts related to the services offered.
Legality:
Regulation (EU) 2016/679 of the EP and of the Council of April 27, 2016, whose rules will be mandatory as of May 2018.
Data storage:
- WAW.Travel automated internal file hosted on Google Drive.
- Web database hosted in AWS RDS.
Data access and protection disclosures:
Google user data
WAW Travel is used by our staff. When a staff member signs in with Google, we access their Google account name and email address so we can identify them and sign them in.
We also request permission to use that person’s Google Drive. We use it only to save an invoice or proforma PDF into the Google Drive folder of the trip they are working on, and to create a service folder there (for example Hotels or Luggage) when that folder does not already exist. The file is created in that person’s Google account, inside a case folder they can already open.
For staff who are not suppliers, we also request permission to use Google Sheets. We use it only to export trip data into a spreadsheet for that person.
We store a Google access token and a refresh token on the WAW server for that staff account. The refresh token lets the same person save another invoice or export another spreadsheet without signing in to Google again each time. We do not use these tokens for any other purpose.
How Google user data is used
Google user data is used only to sign the staff member in, to save the invoice or proforma in the case Drive folder, and, where Sheets access was granted, to export trip data into a spreadsheet. We do not use it for advertising, credit, lending, or to build a profile of the person.
Sharing of Google user data
The invoice or proforma is saved in the case Google Drive folder. We do not sell Google user data, and we do not transfer or sell it to data brokers, advertisers, or other third parties. We do not transfer raw or aggregated Google user data to a third-party service so that service can train its own AI or machine-learning models.
We do not use raw or aggregated Google Workspace or Drive data to develop, improve, or train generalized AI or machine-learning models.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
How Google user data is protected
Google tokens are stored on the WAW server. Access to the application is limited to authorized staff. Connections to Google and to our servers use encryption in transit.
How long Google user data is kept, and how it is deleted
The Google access token and refresh token are kept while the staff account exists. They are deleted when the account is removed, or when the person asks us to delete them. The invoice or spreadsheet remains in Google Drive until someone deletes it there. A person can withdraw the app’s access at any time from their Google Account permissions. To ask us to delete the stored tokens, contact the data protection officer named in this policy.
Recipients of your data:
Suppliers, collaborators, or other entities that need the information to make reservations in hotels, activities, means of transport such as trains or airplanes, etc. Always in order to meet the obligations of the responsible and demanding an equivalent level of confidentiality.
Rights:
At any time you can limit, recover, oppose the processing of your data and delete your information, request the portability of your data and the right to be forgotten.
Additional information:
You can obtain all the additional and detailed information you need about the treatment and protection of your personal data and the Privacy Policy and Cookies Policy. Users may contact the data protection officer (Roberto Santos Pérez), if applicable, or exercise the rights of access, rectification, opposition, deletion, limitation, portability, or other legally provided through any of the addresses indicated, attaching a copy of your ID or similar identification document. In case of complaint, they may file it with the competent control authority (Spanish Agency for Data Protection, www.agpd.es).
Your information is protected according to our privacy policy and terms of service.
SERVER OR HOSTING:
The WAW.travel website is hosted by the Internet Service Provider RAIOLA NETWORKS whose privacy policy can be found at the following link: RAIOLA NETWORKS Privacy Policy.
NEWSLETTER:
We do not send informative newsletters.