Privacy Policy

Last revision: March  25, 2022 

This Privacy Policy explains what we do with personal data within the framework of the provision of tourist services that we offer to the User on the website www.exoticca.com (hereinafter "Exoticca") on the platform of user and mobile applications.

1. DATA OF THE RESPONSIBLE

The company responsible for processing personal data is Exoticca Travel UK Limited with registered office at Chase Green House, 42 Chase Side, Enfield, Middlesex EN2 6NF (hereinafter "Exoticca", "We" or "the Data Controller").

Contact details: dpo@exoticca.com and +44 20 3918 6465. Keep in mind that the calls will be recorded for quality reasons, to inform you of our tourist services and attend to the requests you need, as well as to be able to manage, reserve and/or contract certain tourist packages of your interest.

Failure to provide certain information indicated as mandatory may mean that it is impossible to manage your registration as a User or allow you to use certain tourist services available on Exoticca.

In order to register as a User and browse Exoticca, you must be over 13 years of age. Exoticca may use your personal information to verify your age and ensure compliance with this restriction. In any case, the parents or guardians of the minor may contact Exoticca to block and/or delete the personal data of the minor by sending an email to the email address of the Data Controller indicated above.

2. WHAT PERSONAL DATA DO WE COLLECT?

● In order to identify you as a User, when you register with Exoticca we will ask you to provide us with your email address, your name and your place of residence. If you register through Facebook, we will ask you to provide us with your name, profile picture and email address.

● When contracting our services and tourist trips, we will ask you to complete the personal information of your Exoticca account as a User, such as your nationality, your address, contact telephone number and passport details.

● When booking one of our tour packages, we will request information such as your name, nationality and passport details.

● When purchasing a trip, we will request your credit and/or debit card details such as card number, expiration date and CVV number. Payments are made through a secure payment platform, in accordance with the PCI-DSS standard and complemented by control measures, to guarantee the security of purchases made on Exoticca and to fight against fraud.

If you request an invoice, we will request your billing information if necessary.

● When contacting our customer service, we may ask for your name and email address in order to identify you as a User.

● Exoticca uses cookies and/or similar technologies so that, depending on your configuration of these, it may collect and/or process personal data. For more information on the use and configuration of cookies and/or similar technologies, please consult our Cookies Policy.

3. PURPOSES

Exoticca, as Data Controller, will process your personal data for the following purposes:

● To manage your registration as an Exoticca User, to identify you and give you access to the tourist services that are available to you as a User, as well as to save your information regarding preferences.

● For the development, fulfilment and execution of the contract for the provision of mediation services in the hiring of our suppliers of the trips involved, as well as to attend to and resolve any request, claim or query during the execution of the service or thereafter.

● Contact the User via email in relation to updates or informative communications related to the functionalities, products, including security updates of the Platform, whenever necessary or reasonable for your usage.

● As part of the Exoticca service, it may entail the use of personal data to make personalized commercial communications available to you, related to our products and services through electronic means, taking into account information related to your purchases, interests and preferences.

● Depending on your configuration on the use of cookies and/or similar technologies, for the measurement and generation of statistical analysis and to create profiles based on your browsing habits such as the number of impressions or clicks on a specific product or the demographic distribution of visitors to the site.

● Proceeding with the personnel selection processes that may open up and managing candidates.

4. LEGAL BASIS FOR PROCESSING THE DATA

The legal basis for the processing of your personal data based on the indicated purposes are the following:

● In the event that you decide to register with Exoticca, contract and/or reserve our mediation services in the contracting of trips or tourist packages, the collection and processing of your personal data is based on the execution of the contractual relationship and/or the adoption of pre-contractual measures.

● In the event that you contact the customer service channels available at Exoticca, the collection and processing of your personal data is based on the execution of the contractual relationship or the adoption of pre-contractual measures.

In the event that you consent to it, and do not express your opposition to the sending, by electronic means, of personalized commercial communications related to our products and services, as well as the configuration on the use of cookies and the collection and processing of your data, is based on your consent.

5. DATA RETENTION PERIOD

We will keep your personal data for as long as the service provision relationship is maintained and remains legally established.

Exoticca will keep your personal data to attend and/or carry out the requested services and will keep them during the necessary prescription periods based on the legislation that, in each case, is applicable to attend to future responsibilities.

6. DATA RECIPIENTS

To fulfil the purposes indicated in this Privacy Policy, it may be necessary for us to communicate or transfer your personal data to:

● Communications between the companies of the Exoticca Group: for the management of mediation activities and/or organization of tourist services, as well as the management of marketing campaigns, acting as data processors.

In connection with any reorganization, restructuring, merger or sale, or other transfer of assets, we will transfer information, including personal information, as long as the receiving party agrees to treat your personal information in a manner consistent with our Privacy Policy.

● Communications to Tourist Providers: for the provision of mediation activities and/or organization of tourist services, Exoticca will communicate personal data to tourist providers or organizers of combined trips, acting as data controllers.

● Communications to Technology Providers: Exoticca has contracted service providers who, acting as data processors, provide us with marketing, advertising, communications, infrastructure and IT services, to personalize and optimize our service, to process credit card transactions credit or other payment methods, provide customer service, collect debts, analyze and improve data, and process and administer satisfaction surveys.

Some recipients of your personal data may be located outside the European Economic Area. Any transfer outside the European Economic Area is carried out through the adoption of adequate guarantees or other measures and always in accordance with the applicable regulations for the protection of personal data.

Likewise, Exoticca could be forced to communicate your personal data to third parties to comply with legal or regulatory obligations, as well as to respond to requests from legally authorized authorities.

7. DATA PROTECTION RIGHTS

At any time, you can exercise your rights of access, rectification, deletion, opposition, limitation of treatment or portability of your data through the email address dpo@exoticca.com.

To deactivate email communications, access the "My Subscriptions" section found in the "My Account" section of our website and uncheck the communications you wish to unsubscribe from.

We will respond to your request as soon as possible and, in any case, within the established legal term. In the event that we fail to comply with our data protection obligations, you have the right to file a claim with the Information Commissioner’s Office (https://www.gov.uk/data-protection).

8. LINKS

Exoticca may include or display links to other web pages for your convenience and information. Such web pages may operate independently of us. These linked pages may have their own privacy policies, which we strongly encourage you to read when you visit them. To the extent that any linked websites you visit are not from Exoticca, we are not responsible for the content of such websites, their use, or their privacy practices.