Privacy Policy

At INFTOUR, we understand how important your trust is. The purpose of this policy is to inform users about how our organization processes personal data through this website, in strict compliance with the provisions of the Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), as well as the General Data Protection Regulation (EU) 2016/679 (GDPR).

Below, we transparently explain what information we collect, how we use it, and how we ensure its security.

1. What data do we collect?

To ensure impeccable service and comply with legal requirements, we may collect the following information:

Contact details: your name, surname, email address, and phone number.

Registration data (Check-in): passport details or ID card data of all staying guests. (This is a mandatory requirement of Spanish tourism legislation for transmitting information to law enforcement agencies).

Financial information: data for paying the booking or making a security deposit. These payments are processed through secure and certified banking gateways — we do not store your credit card details on our servers.

Service usage data: information about your inquiries to customer support or the AI Assistant, so we can promptly resolve your questions.

2. How do we use your information?

Your data is used exclusively to make your holiday comfortable and our interaction effective. We use it for:

• processing, managing, and confirming your booking;
• communicating with you before, during, and after your stay (sending check-in instructions, answering questions);
• complying with mandatory legal requirements in Spain (official guest registration);
• improving the operation of our concierge service and personalizing your future visits.

3. Data transfer to third parties

INFTOUR never sells or rents your personal information. Your data may only be transferred in the following cases:

Government authorities: to the local police or the Spanish Civil Guard as part of the mandatory tourist registration (Parte de Viajeros).

Trusted partners: service providers (e.g., payment systems or maintenance services), but strictly to the extent necessary to provide a specific service.

4. Data security

We apply modern technical and organizational security measures. Our systems are protected by encryption (SSL), and access to guests' personal information is restricted to authorized personnel observing strict confidentiality rules.

5. Your rights

In accordance with European legislation (GDPR) and Spanish laws, you have the full right to control your data. You can:

• request access to your personal data that we hold;
• request its correction in case of inaccuracies;
• request the deletion of your data (the "right to be forgotten") if its storage is no longer required under Spanish law;
• withdraw your consent to receive marketing communications at any time.

6. How to contact us

If you have questions about our Privacy Policy, are concerned about the security of your data, or wish to exercise your rights, please contact a company representative by any convenient method: via email, WhatsApp, or by visiting our office.