Privacy Policy

Last updated: December 21, 2023.

• Controller and Description
  1.1. Controller
  The data controller for this site is Tripresale S.L. (hereinafter "Tripresale"), with registered office at Calle Isaac Newton s/n, Edificio Disset, Office C-6, Parc Bit, 07121 Palma, Illes Balears, Spain.
  VAT ID: B56359516
  Email: eduardo.martinez@tripresale.com
  1.2. Description
  Acceptance of Tripresale's privacy policy (hereinafter the "Privacy Policy") is a necessary condition for the use of our reservation resale service (hereinafter the "Service").
  This Privacy Policy regulates the collection, processing, and use of your personal and non-personal information as a user of Tripresale, starting from the effective date shown in the header.
  In processing your personal data, Tripresale complies with current local and European legislation and its implementing regulations.

• Collected Information
  The Service can be used without providing any data, but to fully enjoy it, you will need to provide some personal data. The information (personal or non-personal) collected by the Service may vary accordingly.
  Information collected by the Service will come from three sources: 1) collected automatically, 2) voluntarily provided by you, and 3) provided by third parties.
  2.1. Automatically Collected Information
  This information includes:

  • Information collected through cookies or similar mechanisms stored on your device, always with your consent or according to other legal bases. See our Cookie Policy for more information.

  • IP address, type of device used and its characteristics, operating system version, browser type, language, date, country, request time, URL you came from, URL you are going to, and the mobile network used, among others.

  • Service usage data and any errors detected during its use.

• 2.2. Voluntarily Provided Information
  This information includes:

  • Information, personal or not, contained in messages sent through established contact channels in the Service, such as your name, email, and message.

  • Information required to create your user profile: when you create or update your account, we collect data including your name, email, username, and password.

• All data is mandatory.

  • Information required to complete the service provision and corresponding billing: name or corporate name, email, address, phone, tax, and banking information.

  • Information required if you use a Google or Facebook profile for identification, including profile picture, name, surname, Google or Facebook account ID, and email.

• All data is mandatory.

  • If you make a reservation on behalf of another person through the Service, for example, as a gift, you guarantee that you have legitimately obtained the personal information of those other individuals before providing us with their data.

  • Your photograph, name, nickname, or geolocation if you decide to participate in any of our social media activities.

  • Information required to subscribe to our newsletter, such as your email.

• 2.3. Information Provided by Third Parties
  This information includes:

  • Information provided by payment systems or credit card processors, such as the purchase time or amount.

• Rights and Purposes
  The completion of forms is voluntary. However, if you do not fill in the mandatory fields (usually marked with an asterisk), the use of some Service functions may not be possible or may be limited.
  The personal data you provide is incorporated and processed in the Treatment Activities Register owned by Tripresale, among others, to fulfill your requests, provide the requested service, and keep you informed about the company's activities and services.
  You can exercise your rights of access, rectification, deletion, limitation of processing, objection, and portability of your personal data at any time by email to: eduardo.martinez@tripresale.com or by mail to: Calle Isaac Newton s/n, Edificio Disset, Office C-6, Parc Bit, 07121 Palma, Illes Balears, Spain.
  In both cases, you must identify yourself with your name and surname, as well as a copy of your ID or national ID, if necessary.
  If you have given consent for a specific purpose, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the prior consent.
  If you believe there is an issue with how Tripresale is handling your data, you can address your complaints to the relevant data protection authority, with the Spanish Data Protection Agency being the relevant authority for Spain.

• Age
  Regarding the use of the Service, you declare that you are of legal age and have the necessary legal capacity to bind yourself to this agreement and use the site in accordance with its terms and conditions, which you understand and fully acknowledge.
  You declare that all information provided to access the Service, before and during its use, is true, complete, and accurate.

• Data Usage
  Tripresale will use the collected data to:

  • Administer, provide, and update the Service (contractual basis).

  • Manage the customer relationship throughout the process and facilitate the resale of the reservation (contractual basis).

  • Address inquiries, complaints, claims, and/or suggestions obtained from customer support channels (our legitimate interest in responding to our users' requests or the contractual relationship).

  • Manage the creation, update, or deletion of your account on the platform (your consent).

  • Process payments made by you (contractual basis).

  • Share data, such as your image on our social media (our legitimate interest in promoting our products or your consent).

  • Send you our newsletter and promotional offers via email (your consent or our legitimate interest based on the previous contractual relationship, as applicable).

• You can unsubscribe from these emails from the email received or by contacting us at eduardo.martinez@tripresale.com. However, certain correspondence, such as messages related to the security of your data or the terms and conditions of the Service, cannot be unsubscribed.

  • Maintain the security of the Service, investigate illicit activities, enforce our terms and conditions, and assist law enforcement authorities in their investigations (our legitimate interest in ensuring and maintaining the security of the Service and its users).

• Tripresale does not use automated decisions but may create basic user profiles, with our legitimate interest for business purposes and providing personalized offers.
  Additionally, Tripresale may use user information in the form of aggregated and anonymous data to display it to third parties. It may also share statistics and demographic information about users and their use of the Service with third parties. However, none of this will allow those third parties to personally identify you.

5.1. In Emails and Contact Forms

The Service's website has TLS encryption, allowing users to securely send personal data through standard contact forms.

The collected personal data will be subject to automated processing and included in the corresponding files of the treatment activities register owned by Tripresale.

In this regard:

• Your IP address will be used to check the message's origin to provide appropriate recommendations (e.g., presenting information in the correct language) and to detect possible irregularities (e.g., possible attempts to cyber-attack the Service), as well as data related to your ISP.

• You can also provide us with your data through phone, email, and other indicated communication methods.

Regarding the communication methods used:

• Our payment service providers for payment are VISA, Mastercard, through a secure payment gateway. At no time will the Service or its staff have access to the banking details (e.g., credit card number) that the user provides to these third parties.

On the other hand, certain services provided through the website (e.g., the possibility of participating in a promotional code contest or draw) may have particular conditions regarding the protection of personal data. You will need to accept them before participating in those services.

5.2. On Social Media

Tripresale has profiles on some of the major social networks, being responsible for processing data published on them (e.g., photos uploaded by Tripresale featuring people's faces).

The processing Tripresale will carry out with the data within each of these networks will be, at most, what the social network allows for corporate profiles. Therefore, Tripresale may inform our followers, through any means allowed by the social network when the law does not prohibit it, about our products or offers, as well as providing a personalized customer service.

In no case will Tripresale extract data from social networks unless the user expressly consents to it.

5.3. In Contests

When participating in promotional actions exclusively organized by Tripresale, the data you provide will only be processed by us for the purpose stated in the action's statement and its corresponding legal conditions.

• Data Retention
  The following indicates how long the data processed by the Service is retained:

  • Disaggregated data will be retained indefinitely.

  • Customer data will be retained for the minimum necessary period, possibly up to:

    • 5 years, according to Article 1964 of the Civil Code (personal actions without a special term).

    • 6 years, according to Article 30 of the Commercial Code (accounting or invoice books, for example).

  • Newsletter subscriber data will be retained from the user's subscription until unsubscribed.

  • Data of users uploaded to social networks will be retained from when the user gives their consent or when the data is uploaded according to Tripresale's legitimate interest, until it is withdrawn.

• Data Shared with Third Parties
  Some third parties manage part of the Service.
  Tripresale requires them to comply with this Privacy Policy to the extent applicable, in addition to having their own policy. However, Tripresale will not be responsible for the compliance of that policy.
  Under certain circumstances, Tripresale may share, use, or preserve some of the personal information collected with third parties:

  • To provide the Service:

    • Service providers who perform functions on our behalf, such as payment services, web hosting, business analytics, reservation engine, hotel, customer service, or marketing. These service providers may collect and have access to the information necessary to perform their functions but are not allowed to share or use the information for any other purpose.

  • To cooperate with competent authorities:

    • If we believe it is reasonably necessary to comply with any law, legal process, or legitimate interest. In any case, we will only provide the information strictly required.

• Security Measures
  Tripresale adopts all necessary technical and organizational measures to protect the security and integrity of personal and non-personal information collected, against unauthorized access, accidental alteration, loss, or destruction.
  In any case, Tripresale cannot guarantee the absolute security of the information collected, so you must collaborate and use common sense regarding shared information.
  You understand and acknowledge that, even after deletion, personal and non-personal information may remain visible in cache or if other users have copied or stored it.

• Changes to the Privacy Policy
  We may update this Privacy Policy in the future.
  We will inform you of its changes by sending a notice to the provided email address and/or by placing a notice prominently on our website.

• Contact
  If you have any questions about this Privacy Policy, contact us at:
  Email: eduardo.martinez@tripresale.com
  Address: Calle Isaac Newton s/n, Edificio Disset, Office C-6, Parc Bit, 07121 Palma, Illes Balears, Spain.