Privacy Policy

Data Controller: Experiencias Baja Tours, with an address in Rosarito, Baja California, Mexico, hereinafter THE WEBSITE OWNER, and whose contact email is info@experienciasbajatours.com.

Data Requested on the Website and Purpose of Processing:

• Name, surname, and email in contact forms: To make any direct contact with THE WEBSITE OWNER, whether to ask questions, comments, suggestions, request a service or product, or any other information. Failure to provide the minimum necessary personal data will prevent THE WEBSITE OWNER from responding to the request.
• Name and email: To be able to make comments on the website blog.
• Name, surname, address, phone number, email, and tax identification number: This information will be requested at the time of payment for the service, in order to process everything related to the client.
• Name, phone number, and email for the newsletter: With the express and voluntary consent of the data owner, the minimum necessary information will be requested on the website to send an automated commercial newsletter, informing about advertising, promotions, and other information about the services and/or products offered by THE WEBSITE MANAGER.
• Email: The email will be requested to access the client area, according to the data provided when creating the account.

If the user is under 18 years old, they must have the authorization of their parents or legal guardians to provide their personal data. THE WEBSITE MANAGER has no way to effectively verify the age of the users, so it is exempt from any responsibility if the user does not comply with what is indicated here.

THE WEBSITE OWNER will always ensure that the use of the website, its contents, and the processing of the user’s personal data are carried out in the most appropriate manner. Therefore, the user can always exercise their rights of access, rectification, cancellation, portability, forgetfulness, or opposition, all in faithful compliance with the guidelines of the laws governing the matter, by writing to https://experienciasbajatours.com.

At no time will THE WEBSITE OWNER share the data it possesses with third parties. In case of doing so to fulfill the services contracted by a participant, send the newsletter, comply with legal requirements, or for the administration of the website, the appropriate confidentiality agreements will be provided between the parties.

The third-party links that can be found on the website have privacy policies outside of THE WEBSITE OWNER. Access to these sites is the responsibility of the user, being their responsibility to know them and decide whether to accept them or not.

FORMS

The website has 4 types of forms:

1. Contact forms: The user, client, or participant can find forms that will facilitate communication with THE WEBSITE OWNER to ask questions, comments, request a quote, book any of the services offered on the website, or demand any right they have. Failure to provide the minimum necessary personal data will prevent THE WEBSITE OWNER from responding to the request. This processing will be considered legitimate as part of a pre-contractual diligence. The website server and the email server of THE WEBSITE OWNER will be responsible for the processing.
2. Advertising forms: Users, buyers, or participants will be expressly and voluntarily asked for their consent to provide THE WEBSITE OWNER with the minimum necessary data to send advertising and commercial information related to the services and/or products offered by THE WEBSITE OWNER, to be added to an automated email marketing file managed by the data processor indicated below. The processing of the personal data found in this section has been done with the consent of the data owner.
3. Blog comment forms: To avoid spam, inappropriate messages, and ensure proper follow-up, the user will be asked for their name, email, and website to identify them in the comments they wish to make on blog posts. These data will be visible to other users of the website. If you do not want the data to be visible to others, you should contact THE WEBSITE OWNER at https://experienciasbajatours.com. The website server will be responsible for the processing, which will be carried out with the consent of the data owner.
4. Service request forms: Users, clients, or participants will be asked for their data so that THE WEBSITE OWNER can process the services requested by the client. Legitimate processing of personal data due to the contractual relationship with the client or participant. The data will be stored on the website server.

DATA PROCESSORS

THE WEBSITE OWNER needs the support of third parties to adequately offer its services and products, with whom it enters into the appropriate confidentiality agreements and verifies compliance with personal data protection regulations.

The data provided to these third parties may not be used for purposes not authorized by the data owner.

In compliance with the principles of information and transparency, it is made known that these third parties are:

• Mailchimp: Used to automate commercial newsletters and send advertising of products and/or services offered on the website to the data owner’s email. Service managed by The Rocket Science Group LLC, located in the United States of America. It has a security agreement called Privacy Shield, in accordance with the requirements of the European Data Protection Committee, which can be consulted here: Privacy Shield. For more information on its privacy policy, you can visit: Mailchimp Privacy Policy.
• Google: Tool used to provide a better service and manage information. This service is managed by Google LLC, located in Mountain View, California, United States of America, and has subscribed to the EU-U.S. Privacy Shield, which can be consulted here: Privacy Shield. For more information on its privacy policy, you can visit: Google Privacy Policy.
• Lead Pages: Tool used to create websites, landing pages, and pop-ups, among others. This service is provided by Avenue 81, Inc., located at 107 Cheapside, London, and can be contacted via email at legal@ave81.com. Its privacy policy can be viewed here: Lead Pages Privacy Policy.
• Apple: Tool used to provide a better service and manage information. This service is provided by Apple Inc., which can be contacted through this link: Apple Contact, and its privacy policy can be viewed here: Apple Privacy Policy.
• Siteground: Provides web hosting services through SiteGround Spain SL. Its European headquarters are located in Spain, C / Serrano 1, 28001 Madrid, and its privacy policy can be viewed here: Siteground Privacy Policy.
• Typeform: Tool used to create online forms and surveys. This service is provided by Typeform SL, located at Carrer Bac de Roda, 163, local, 08018 – Barcelona (Spain). They can be contacted via email at support@typeform.com, and their privacy policy can be viewed here: Typeform Privacy Policy.
• Facebook Pixel: Advertising analysis tool used to understand the actions of data owners on this website. This service is provided by Facebook, Inc., located at 1601 Willow Road, Menlo Park, CA 94025, United States of America. If you are outside the United States or Canada, the data control entity responsible for the information is Facebook Ireland Ltd., located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. It has the EU-U.S. Privacy Shield certification, which can be viewed here: Privacy Shield. For more information on its privacy policy, visit: Facebook Privacy Policy.
• Google Analytics: Web analysis service to view website usage statistics. This service is managed by Google LLC, located in Mountain View, California, United States of America, and has subscribed to the EU-U.S. Privacy Shield, which can be consulted here: Privacy Shield. For more information on its privacy policy, visit: Google Privacy Policy.
• PayU Latin America: Company used to manage payments on the website. It can be contacted via email at protecciondedatos@payulatam.com, and its privacy policy can be viewed here: PayU Privacy Policy.
• PayPal (Europe) S.à r.l. et Cie, S.C.A.: Company used to manage debit and credit card payments on the website. Located at 22-24 Boulevard Royal L-2449, Luxembourg. For more information, visit: PayPal Privacy Policy.
• Stripe Inc: Used to manage debit and credit card payments on the website. This company is located in the United States and has a security agreement called Privacy Shield, in accordance with the requirements of the European Data Protection Committee, which can be consulted here: Privacy Shield. For more information, visit: Stripe Privacy Policy.
• Mailtrack: Tool used to send emails and verify their reading by the recipient. The company THE MAIL TRACK COMPANY, S.L., is located at calle Córcega, number 301, attic 2ª, 08008 – Barcelona (Spain), and can be contacted via email at hi@mailtrack.io. Its privacy policy can be viewed here: Mailtrack Privacy Policy.
• Dropbox: Used for the virtual storage of documents related to the products or services offered on the website. Service provided by Dropbox, Inc, located in California, United States. It has a security agreement called Privacy Shield, in accordance with the requirements of the European Data Protection Committee, which can be consulted here: Privacy Shield. For more information on its privacy policy, visit: Dropbox Privacy Policy.
• WhatsApp: Tool used for communication with users, buyers, clients, and participants through WhatsApp Ireland Limited (for those located in Europe). It can be contacted via this link: WhatsApp Contact, and its privacy policy can be viewed here: WhatsApp Privacy Policy.

In specific cases, THE WEBSITE OWNER may use applications or tools not included or named in this list, as they may be a better option to aid in completing a particular task. If this happens, THE WEBSITE OWNER will notify the website accordingly.

POLICIES RELATED TO THE NEWSLETTER

These policies will always be understood as a complementary part of the terms and conditions stated on the website, being both equally applicable in case of a dispute. The privacy and intellectual property policy applied will be the same as stated in the terms and conditions of the website.

“Newsletter” will be understood as the digital bulletin that THE WEBSITE OWNER periodically creates and sends to its subscribers through an external email service provider, to which the user has voluntarily subscribed.

THE WEBSITE OWNER is not obligated to send the newsletter at defined intervals, so it is entirely free to do so when it deems it appropriate. The user can always exercise their rights of access, rectification, cancellation, or opposition by following the instructions found in the footer of the newsletter.

The user should not share its content with third parties, as this would violate the copyright of THE WEBSITE OWNER. The only possible distribution channel is managed and/or authorized by THE WEBSITE OWNER.

THE WEBSITE OWNER will not be responsible for the content of third parties exposed in the newsletter; any dispute that arises should be dealt with directly with the person or company mentioned.

All material displayed in the newsletter is protected by copyright in favor of THE WEBSITE OWNER, and in the case of belonging to third parties, it will be understood that THE WEBSITE OWNER has the proper authorization to use it as agreed with the author.

DURATION OF PROCESSING

In the case of personal data provided for billing and purchasing products or services, they will be stored for the legally applicable time by the platform performing the billing.

In the case of personal data provided for commercial newsletters and blog comments, it will be for as long as the data owner wishes to remain on the subscription list, so they can unsubscribe at any time, automatically as indicated in each newsletter, or by writing to https://experienciasbajatours.com.