effective May 25, 2018
A: Identity of the company
Paseo Duque de Mandas 35
San Sebastián, Gipuzkoa
T: +34 678.242.857
C: Legal framework
D: Personal data security
Basque Bites collects your personal data only for explicit and legitimate purposes, for example when you book a flight with us or when you use our services. We keep certain personal data, in particular the information with which we can identify you.
We commit ourselves to take all reasonable measures to safely collect, process, store and share your data. We also ensure that the companies we work with will handle your personal data with the same carefulness as we do. Basque Bites always
communicates how your personal data will be used.
E: Overview of the stored data
Basque Bites commits itself to request only the personal data that are necessary to achieve its purpose.
As a result, we may collect and process the following information about you:
name, first name, email, telephone, address;
nationality, date of birth, place of birth, gender, the type of your travel document (e.g. passport or ID), eID number, the issue date and the expiry date, the country of issue of your travel document;
information about other passengers in your booking such as first name, name, nationality and age;
information about your transaction, including your payment card details;
information regarding your flight(s) and information about our services in relation to your flight(s) (for example declaration of lost baggage);
your communication with us (for example your emails, letters, calls or your messages on our online chat service);
your messages on social media directed at Basque Bites;
your preferred departure locations;
if you need special help or if you have specific dietary requirements;
information about your health, if you have a medical condition that may affect your visit;
sensitive personal information: during the provision of services to the customer we may need information regarding your race or ethnic origin, physical or mental health and your religious beliefs. Such information is considered as sensitive personal data under data protection laws. We will collect this kind of information if you have explicitly given your permission, when this information is necessary for reasons of general interest or if you have knowingly disclosed this information.
Sensitive personal data can be collected in the following circumstances:
if you have a specific medical condition, you must inform us about it and, if necessary, provide a medical certificate for your own safety
if you request special assistance during a flight, for example if you need a wheelchair
if you notify us of specific dietary requirements, this may refer to specific religious beliefs
when you provide us your travel document, your racial or ethnic origin can be deduced on the basis of your nationality
If you do not allow us to process sensitive personal data, this can have as a consequence that we cannot provide the services you have requested or that we can only partially provide the services. Please note that in such circumstances you are not entitled to reclaim any payment.
F: Processing purposes
Basque Bites uses your personal data for the following purposes:
to manage your travel bookings and to deliver our services to you;
to communicate with you;
to issue your flight tickets, to check you in for your flight and to complete your reservations (e.g. hotels, restaurants, transport). We also use your personal information to change your bookings when you request for such changes;
to let you know if there are any changes to the flights or if there are other circumstances that may affect your travel plans, such as road works at an airport you use;
to contact you by email and/or SMS for administrative or operational reasons, for example to send you a confirmation of your bookings and payments, to inform you about your travel schedule or to advise you about possible delays and changes to your flight(s). If you use our mobile app, we can also send you app notifications for these purposes. Note that the purpose of this communication is not marketing and therefore you will continue to receive this information, even if you opt-out of receiving marketing communication;
to request for your feedback by email and/or SMS, since your opinion is of great importance to us;
to understand what you find interesting, we can collect information about how you use our website, which pages of our website you visit the most and which flights you are looking for. We may use this information to send you relevant messages that we think you may like, but only on condition that you have agreed to receive marketing communication;
to adapt our services to your needs and preferences and to offer you a personalised customer experience;
the business purposes for which we will use your information include accounting, invoicing and audit, credit card or other payment card verification, fraud screening, security, legal purposes, statistical and marketing analysis, system testing, maintenance and development.
G: Secure processing
We commit ourselves to take appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against unintentional loss, destruction or damage. When you provide your personal information on our website or our mobile app, this information will be transmitted securely over the internet by the use of high-quality encryption.
For the processing of information of the travelers and the customers, Basque Bites uses software which is PCI DSS compliant. This means that we meet the high security standards to protect your payment card data when you provide us with this information.
However, sometimes we will have the obligation to share your personal data with third parties, for example with border control and airport security. This is to keep you and your fellow travelers safe. In these exceptional cases, we have limited control over how the personal data are protected by that third party.
If your personal data are transferred outside the EEA (the European Economic Area includes the European Union, Iceland, Liechtenstein and Norway, also known as the “EEA”), we require that appropriate precautionary measures have been taken.
H: Right to object to processing
Basque Bites always provides you in a clear and understandable way the methods in which your data are processed.
You have the right to object to the processing of your personal data due to your specific situation, at any time. Basque Bites ceases to process the personal data unless we point out overriding legitimate reasons for the processing that outweigh your interests, rights and freedoms.
I: Obligation to report in case of data leaks
In case of a data breach where there is a risk for the violation of the rights and freedoms of the individuals, Basque Bites promises to report as soon as possible to the supervisory authority and this no later than 72 hours after the first discovery of the data leak.
If the data breach is likely to pose a high risk to your rights and freedoms, Basque Bites will immediately report the data breach to the customer whose personal data is leaked.
J: Right to request access to your own personal data, right of rectification and the right to be forgotten
You have the right to request access to your own personal data. You also have the right to consult the booking information regarding the flights you have taken with us.
At the request of the customer, personal data can be rectified. If the information we have about you is not correct, please have it amended as soon as possible. This can be done by contacting your Basque Bites travel agency. Basque Bites will update the data as soon as possible. The contact details of the Basque Bites agencies can be found on our website:
At the request of the customer, certain data can be deleted, but always taking into account the storage period and the necessity of the data for the execution of the contract. As a result, the personal data will be deleted as soon as possible on condition that there are no justified reasons to keep them up-to-date.
The starting point is that only data provided by the customer or data provided in his order can be corrected or deleted.
If you have questions concerning your personal data, please contact Basque Bites.
K: Retention period of personal data
Basque Bites stores your personal data for a period of seven years from the invoice date.
At the end of the retention period or on a valid request of the data subject, the personal data will be deleted, unless there are reasons of public interest to keep the personal data for a longer period.
L: Marketing communication
You can choose whether or not you want to receive marketing communication. We will only send marketing communication to the customers who have given a voluntary and explicit permission to receive our newsletters. The newsletters contain information about special offers and new routes. Such offers may contain information about tours and other associated travel products. Please note that we do not share your contact information and personal information with other companies for marketing purposes, unless we have obtained explicitly your consent to do so.
You can ask at any time to end marketing communication by sending an email to firstname.lastname@example.org with the title ‘GDPR: end marketing communication’.
You can also contact your Basque Bites agency to express your preference not to receive marketing communication.
M: Right to data portability
You have the right to request for your personal data with the aim to switch to another service provider. Basque Bites promises to provide the personal data in a structured and readable form.
When the client exercises the right of data portability, he has the right to ask that the personal data, if technically possible, are directly transported from Basque Bites to the other service provider.
N: Cookies or other tracking technologies
In order to improve our services, to offer you relevant information and to analyze how you use our website and app, we can use technologies such as tracking software, pixels and cookies. Keep in mind that in most cases we cannot identify you on the basis of the information we collect through these technologies.
We use software to monitor how the website is used in order to improve the experience of the customer. This software does not allow us to collect personal data.
In order to understand how our customers deal with the emails we send them, we use pixels, so that we can see whether the emails we send are opened or not.
You can delete cookies if you wish. While certain cookies are required for viewing and navigating on our website or app, most functions are still accessible without cookies.
If you have a complaint related to the exercise of your rights, you can contact your Basque Bites agency. The contact details of the Basque Bites can be found on our website: https://www.basquebite.com