Privacy Policy

At PASSPORTER TECHNOLOGIES S.L., hereinafter “PASSPORTER,” we are committed to protecting the personal data rights of our customers and contacts; therefore, we are publishing this information to provide adequate notice:

  • Your rights and use of this website BEFORE providing your information;
  • Measures that ensure the protection and integrity of data;
  • In order for your consent prior to the submission of data to be properly substantiated

All of this is done in compliance with all the legal obligations set forth in Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, and in the European General Data Protection Regulation (GDPR), as well as all applicable Spanish and European regulations in this area.

Therefore, any user who wishes to obtain information must check the box indicating that they have read and accepted the website’s privacy policy, legal notice, and cookie policy.

‍

‍

1. Who is the data controller?

‍

2. What is the purpose of processing your data?

The types of personal data you provide to us and that we may process at PASSPORTER are:

  • Identifying information in the app (name, email, username, password): The purpose of this information is to identify you within the app and allow you to become a member of PASSPORTER. The username and password serve as a basic security measure to prevent third parties from impersonating you in the app. We may also ask for your permission to send you newsletters or updates related to the app and the PASSPORTER community. In this case, we would request your express consent to do so.
  • Location data provided by the app user: The purpose is to better describe the trip you are taking and the places you are visiting, so that other members of the community can learn about it or even use it as a possible itinerary for future trips. You will be the one to tell us where you are, and the app will link to Google Maps to pinpoint your location or route whenever you wish.
  • Images that users choose to share with the community, whether taken directly at that moment or selected by the user from their cell phone's gallery.
  • Comments and contributions that users may post on the app and that may constitute personal data based on the content they themselves provide.
  • If you wish, you can sign up to receive periodic updates about the PASSPORTER community via the NEWSLETTER.
  • In addition, please be advised that PASSPORTER may maintain a data history. This processing is necessary to maintain a user history that will facilitate future actions.

Once collected, your data becomes part of a data processing operation to which the appropriate security measures are applied.

‍

3. How long will we retain your data?

Personal data collected through the PASSPORTER app will be retained for as long as necessary to fulfill the purpose for which it was provided. Once processing has ended, basic contact information may remain in PASSPORTER’s historical database to facilitate future transactions. Once the relationship has ended, the data will be blocked and retained solely to comply with any legal obligations.

‍

‍

4. What is the legal basis for the processing of your data?

We are legally permitted to process the data we request from you once you have given us your consent to do so. This is because you have expressly given your consent by checking the “I have read and agree” box.

‍

In the case of HISTÓRICO: The basis for the processing is Passporter’s legitimate interest in being able to provide proper service to users.

‍

‍

5. Is your information shared with other recipients?

‍

The information you enter on the website will not be disclosed to other entities, except where required by law or to fulfill the purpose for which it was provided.

The PASSPORTER app uses:

(We have included a link to their privacy policy.)

In addition, the platform’s payment processing has been entrusted to STRIPE: Stripe’s services in Europe are provided by a Stripe affiliate, Stripe Payments Europe Limited (“Stripe Payments Europe”), a company located in Ireland. In providing Stripe’s services, Stripe Payments Europe transfers personal data to Stripe, Inc., in the U.S. To ensure adequate protection of personal data, we have certified under the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks. You can view their privacy policy at https://stripe.com/privacy-center/legal#faq_7

Within our app, you can enable various features such as the calendar, location, or photo album; selecting them is optional. The data collected when these features are enabled will be processed in the same way as the rest of the information collected through our forms.

Your data may be collected through the forms on our website, which is hosted on servers operated by AMAZON WEB SERVICES, located in the United States. Although this company is based outside the European Union, it is subject to the Privacy Shield to ensure the protection of your information.

You can view their privacy policy at: https://aws.amazon.com/es/privacy/

‍

6. What rights do you have when you provide us with your personal information?
  • Right of access: to find out what data about you is being processed, for what purpose it is being processed, where the data was obtained, and whether it will be disclosed or has been disclosed to anyone.
  • Right to rectification: to correct any inaccurate or incomplete information about you.
  • Right to erasure: to have your inaccurate or excessive personal data erased.
  • Right to object: to prevent your data from being processed or to have its processing stopped, although only in the cases provided for by law.
  • Right to restrict processing: to request that data processing be suspended in the cases provided for by law.
  • Right to data portability: to receive the data you have provided in a structured, commonly used electronic format and to transmit it to another data controller.
  • Right not to be subject to automated individual decision-making: to ensure that no decision is made about you that produces legal effects or significantly affects you based solely on the processing of your personal data.
  • Right to Information: You have the right to be clearly informed BEFORE your data is collected about what data of yours is being processed, for what purpose it is being processed, where the data was obtained, and whether it will be disclosed or has been disclosed to anyone.

‍

7. How can you exercise your rights?

To exercise any of your rights, please send a request to info@passporterapp.com, including:

1. A photocopy of your ID card (passport or other form of identification) or an electronic signature.

2. The content of your request and, if necessary, the supporting documents.

3. Address (for notification purposes), date, and signature

If you exercise your rights through a voluntarily appointed representative, you must provide the document or electronic instrument that proves the representative’s authority.

If the data subject is a minor or legally incapacitated, their rights will be exercised by their duly authorized legal representative.

‍

8. What can you do if your rights have not been respected?

If you believe that we have not addressed your request, you may file a complaint with the Spanish Data Protection Agency through the section on its website: https://sedeagpd.gob.es/sede-electronica-web/vistas/formReclamacionDerechos/reclamacionDerechos.jsf

‍

9. Links to Other Websites

This privacy policy applies only to personal data collected through our website; however, this website contains links to other websites, so PASSPORTER is not responsible for the privacy practices of those other websites. In other words, when you click on one of these links, you are leaving our website, so you should read the privacy policies of those other websites that collect personal data.

‍

If you would like more information, the Spanish Data Protection Agency has published a guide for citizens, which you can access at: http://www.agpd.es/portalwebAGPD/canaldocumentacion/publicaciones/common/Guias/GUIA_CIUDADANO.pdf

‍

10. For users in California

The California Consumer Privacy Act (CCPA) requires us to disclose the categories of personal information we collect and how we use it, the categories of sources from which we collect personal information, and the third parties with whom we share it. We have provided this information throughout this document, beginning in section 2 and continuing thereafter.

We must also provide information about the rights that California residents have under California law. You may exercise the following rights:

  • Right to Information and Access. You may submit a verifiable request for information regarding:

(1) the categories of personal information we collect, use, or share;

(2) the purposes for which we collect or use categories of personal information;

(3) the categories of sources from which we collect personal information;

(4) specific personal information we have collected about you.

  • Right to Equal Service. We will not discriminate against you if you decide to exercise your privacy rights.
  • Right to Deletion. You may submit a verifiable request to close your account, and we will delete the personal information we have collected about you.
  • Right Not to Have Your Information Sold: We do not sell our users' personal information.
  • You may exercise your rights on your own behalf or through a duly authorized representative.

The contact address through which you can exercise your rights is info@passporterapp.com

‍

11. Data Protection Policy Applicable to Brazilian Citizens

The LGPD (Lei Geral de Proteção de Dados) is Brazil’s federal data protection law that regulates all types of personal data processing in the country. It was enacted in August 2018 and took effect in August 2020. The LGPD grants individuals in Brazil nine enforceable rights regarding their own personal data.

These are set forth in Article 18 and grant individuals the following rights:

‍

  1. Confirmation that your data is being processed.
  2. Access to your data.
  3. Correct incomplete, inaccurate, or outdated information.
  4. Anonymize, block, or delete unnecessary or excessive data that is not being processed in accordance with the LGPD.
  5. Make your data portable—that is, ensure it can be provided to another service or processor upon request.
  6. Have your data deleted.
  7. Information about public or private entities with which the data controller has shared data.
  8. Information about the option to withhold consent and the consequences.
  9. Withdraw consent.

Furthermore, it establishes ten legal bases for processing personal data; we have highlighted in bold those that correspond to the data processing activities carried out by Passporter, which are described in the previous sections of this document:

  1. The consent of the data subject.
  2. To comply with the controller's legal or regulatory obligation.
  3. For the implementation of public policies provided for in laws or regulations, or based on contracts, agreements, or similar instruments.
  4. For studies conducted by research organizations that ensure, whenever possible, the anonymization of personal data.
  5. For the performance of a contract or for preliminary steps related to the performance of a contract to which the data subject is a party.
  6. To exercise rights in judicial, administrative, or arbitration proceedings (when the parties are involved)
  7. To protect the life or physical safety of the data subject or a third party.
  8. For health protection, in a procedure performed by health care professionals or health care facilities.
  9. To serve the legitimate interests of the controller or a third party, except where the fundamental rights and freedoms of the data subject require that the protection of their personal data take precedence.
  10. For credit protection

‍

In the case of consent, it must be express, unambiguous, and detailed.

You can exercise your rights by sending an email to info@passporterapp.com

‍

‍

‍