Privacy Policy
effective May 25, 2018 

A: Identity of the company

Basque Bites
Paseo Duque de Mandas 35
San Sebastián, Gipuzkoa
20012 SPAIN

T: +34 678.242.857


B: Scope of this Privacy Policy

The Privacy Policy of Basque Bites applies to the personal data that Basque Bites collects and processes.
Basque Bites always informs its customers in a clear manner for which purpose the personal data are collected. This Privacy Policy is a transparent summary that explains how we use, collect, manage, process and share the personal data of the customers.


C: Legal framework

This Privacy Policy is subject to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).


D: Personal data security

Basque Bites collects your personal data only for explicit and legitimate purposes, for example when you book a flight with us or when you use our services. We keep certain personal data, in particular the information with which we can identify you.

We commit ourselves to take all reasonable measures to safely collect, process, store and share your data. We also ensure that the companies we work with will handle your personal data with the same carefulness as we do. Basque Bites always

communicates how your personal data will be used.


E: Overview of the stored data

Basque Bites commits itself to request only the personal data that are necessary to achieve its purpose.
As a result, we may collect and process the following information about you:

  • name, first name, email, telephone, address;

  • nationality, date of birth, place of birth, gender, the type of your travel document (e.g. passport or ID), eID number, the issue date and the expiry date, the country of issue of your travel document;

  • information about other passengers in your booking such as first name, name, nationality and age;

  • information about your transaction, including your payment card details;

  • information regarding your flight(s) and information about our services in relation to your flight(s) (for example declaration of lost baggage);

  • your communication with us (for example your emails, letters, calls or your messages on our online chat service);

  • your messages on social media directed at Basque Bites;

  • your feedback;

  • your preferred departure locations;

  • if you need special help or if you have specific dietary requirements;

  • information about your health, if you have a medical condition that may affect your visit;

  • sensitive personal information: during the provision of services to the customer we may need information regarding your race or ethnic origin, physical or mental health and your religious beliefs. Such information is considered as sensitive personal data under data protection laws. We will collect this kind of information if you have explicitly given your permission, when this information is necessary for reasons of general interest or if you have knowingly disclosed this information.
    Sensitive personal data can be collected in the following circumstances:

    1. if you have a specific medical condition, you must inform us about it and, if necessary, provide a medical certificate for your own safety

    2. if you request special assistance during a flight, for example if you need a wheelchair

    3. if you notify us of specific dietary requirements, this may refer to specific religious beliefs

    4. when you provide us your travel document, your racial or ethnic origin can be deduced on the basis of your nationality


By sharing sensitive personal information with us, you explicitly agree that we are allowed to collect and use this information in accordance with this Privacy Policy, so that we can provide our services.
If you do not allow us to process sensitive personal data, this can have as a consequence that we cannot provide the services you have requested or that we can only partially provide the services. Please note that in such circumstances you are not entitled to reclaim any payment.


F: Processing purposes

Basque Bites uses your personal data for the following purposes:

  • to manage your travel bookings and to deliver our services to you;

  • to communicate with you;

  • to issue your flight tickets, to check you in for your flight and to complete your reservations (e.g. hotels, restaurants, transport). We also use your personal information to change your bookings when you request for such changes;

  • to let you know if there are any changes to the flights or if there are other circumstances that may affect your travel plans, such as road works at an airport you use;

  • to contact you by email and/or SMS for administrative or operational reasons, for example to send you a confirmation of your bookings and payments, to inform you about your travel schedule or to advise you about possible delays and changes to your flight(s). If you use our mobile app, we can also send you app notifications for these purposes. Note that the purpose of this communication is not marketing and therefore you will continue to receive this information, even if you opt-out of receiving marketing communication;

  • to request for your feedback by email and/or SMS, since your opinion is of great importance to us;

  • to understand what you find interesting, we can collect information about how you use our website, which pages of our website you visit the most and which flights you are looking for. We may use this information to send you relevant messages that we think you may like, but only on condition that you have agreed to receive marketing communication;

  • to adapt our services to your needs and preferences and to offer you a personalised customer experience;

  • the business purposes for which we will use your information include accounting, invoicing and audit, credit card or other payment card verification, fraud screening, security, legal purposes, statistical and marketing analysis, system testing, maintenance and development.



G: Secure processing

We commit ourselves to take appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against unintentional loss, destruction or damage. When you provide your personal information on our website or our mobile app, this information will be transmitted securely over the internet by the use of high-quality encryption.

For the processing of information of the travelers and the customers, Basque Bites uses software which is PCI DSS compliant. This means that we meet the high security standards to protect your payment card data when you provide us with this information.

As described in this Privacy Policy, we may share your personal data with third parties in the cases where it is necessary for the provision of our services. When Basque Bites shares your personal data with third parties, we require these third parties to take the appropriate technical and organizational measures to protect your personal data.

However, sometimes we will have the obligation to share your personal data with third parties, for example with border control and airport security. This is to keep you and your fellow travelers safe. In these exceptional cases, we have limited control over how the personal data are protected by that third party.
If your personal data are transferred outside the EEA (the European Economic Area includes the European Union, Iceland, Liechtenstein and Norway, also known as the “EEA”), we require that appropriate precautionary measures have been taken.


H: Right to object to processing

Basque Bites always provides you in a clear and understandable way the methods in which your data are processed.

You have the right to object to the processing of your personal data due to your specific situation, at any time. Basque Bites ceases to process the personal data unless we point out overriding legitimate reasons for the processing that outweigh your interests, rights and freedoms.

I: Obligation to report in case of data leaks

In case of a data breach where there is a risk for the violation of the rights and freedoms of the individuals, Basque Bites promises to report as soon as possible to the supervisory authority and this no later than 72 hours after the first discovery of the data leak.

If the data breach is likely to pose a high risk to your rights and freedoms, Basque Bites will immediately report the data breach to the customer whose personal data is leaked.

J: Right to request access to your own personal data, right of rectification and the right to be forgotten

You have the right to request access to your own personal data. You also have the right to consult the booking information regarding the flights you have taken with us.

At the request of the customer, personal data can be rectified. If the information we have about you is not correct, please have it amended as soon as possible. This can be done by contacting your Basque Bites travel agency. Basque Bites will update the data as soon as possible. The contact details of the Basque Bites agencies can be found on our website:

At the request of the customer, certain data can be deleted, but always taking into account the storage period and the necessity of the data for the execution of the contract. As a result, the personal data will be deleted as soon as possible on condition that there are no justified reasons to keep them up-to-date.

The starting point is that only data provided by the customer or data provided in his order can be corrected or deleted.

If you have questions concerning your personal data, please contact Basque Bites.

K: Retention period of personal data

Basque Bites stores your personal data for a period of seven years from the invoice date.

At the end of the retention period or on a valid request of the data subject, the personal data will be deleted, unless there are reasons of public interest to keep the personal data for a longer period.


L: Marketing communication

You can choose whether or not you want to receive marketing communication. We will only send marketing communication to the customers who have given a voluntary and explicit permission to receive our newsletters. The newsletters contain information about special offers and new routes. Such offers may contain information about tours and other associated travel products. Please note that we do not share your contact information and personal information with other companies for marketing purposes, unless we have obtained explicitly your consent to do so.

You can ask at any time to end marketing communication by sending an email to with the title ‘GDPR: end marketing communication’.

You can also contact your Basque Bites agency to express your preference not to receive marketing communication.

M: Right to data portability

You have the right to request for your personal data with the aim to switch to another service provider. Basque Bites promises to provide the personal data in a structured and readable form.
When the client exercises the right of data portability, he has the right to ask that the personal data, if technically possible, are directly transported from Basque Bites to the other service provider.

N: Cookies or other tracking technologies

In order to improve our services, to offer you relevant information and to analyze how you use our website and app, we can use technologies such as tracking software, pixels and cookies. Keep in mind that in most cases we cannot identify you on the basis of the information we collect through these technologies.

We use software to monitor how the website is used in order to improve the experience of the customer. This software does not allow us to collect personal data.


In order to understand how our customers deal with the emails we send them, we use pixels, so that we can see whether the emails we send are opened or not.


We also use cookies on our website, mobile app or in our emails. Cookies are small pieces of information that your browser stores on the hard drive of your computer. They allow you to navigate on our website or app and allow us to remember certain aspects of your last search to make subsequent searches faster for you.


You can delete cookies if you wish. While certain cookies are required for viewing and navigating on our website or app, most functions are still accessible without cookies.


O: Questions

Questions, comments and requests regarding this Privacy Policy are welcome and can be addressed to

If you have a complaint related to the exercise of your rights, you can contact your Basque Bites agency. The contact details of the Basque Bites can be found on our website:

Donostia-San Sebastián
+34 678-242-857

© 2019 Basque Bites