Privacy Policy
Last updated: April 2024
By using the following “Website” or “Web” and/or communicating electronically with Iberojet, personal data of users accessing and requesting our services may be collected and processed, the processing of which is governed by this privacy policy (the “Privacy Policy”).
BASIC DATA PROTECTION INFORMATION
Controller
EVELOP AIRLINES, S.L.U.
ORBEST, S.A.
Website (domains and subdomains)
Purpose
Managing your travel request
Maintaining the contractual relationship
Handling and managing enquiries made through the contact forms hosted on the Website, by telephone, or through any other means or channels where reference is made to this Privacy Policy
Managing your registration and participation in events and/or promotional actions requested
Registering you as a “Customer” and managing your user account
Sending commercial communications on products and/or services offered by Iberojet
Improving the website
Legal obligations
Legal standing
Consent
Execution of the contractual relationship
Legitimate Interest
Compliance of legal obligations
Recipients
We shall not disclose your personal data to third parties unless we are legally obliged to do so. However, your personal data may be accessed by our partners such as hotels, car rental companies, transport companies or airlines, as well as by the data processors of Iberojet, in other words, service providers who necessarily have to access your personal data for the provision of the services, and cloud storage services.
International Transfers
Iberojet may transfer your personal data to third party partners where the service you have requested is located outside the European Economic Area, pursuant to the exception in article 49.1(b) of the GDPR.
Data subject's rights
Right of access, rectification, erasure, objection, to limit portability or not to be subject to automated individual decisions regarding their personal data.
Additional Information
Additional information about our Website can be found in:
Legal Notice
-
Cookies Policy
- Legal Notice
I. DATA CONTROLLER
Contact details of the data controller:
-
Evelop Airlines S.L., with Tax Identification Number B-57.797.755 and registered office at Calle Gremi de Fusters 23, 07009, Palma de Mallorca (Balearic Islands, Spain).
-
ORBEST, S.A., with Tax Identification Number 507.911.202 and registered office at Rua General Firmino Miguel, 3, 1ºB / Torre 2 - 1600-100, Lisbon (Portugal). Hereinafter referred to as “Iberojet.”
Contact particulars of the Data Protection Officer:
You can contact at the above postal address and/or via e-mail: dpo@avoristravel.com.
II. SCOPE OF THE POLICY
This Privacy Policy is applicable to personal information collected in connection with the services provided by Iberojet through the Website, as well as to the collection of personal data through applications, blogs, forms, legal bases or other means of contact or channels that refer to this Privacy Policy or contain a link to it (hereinafter, collectively, the “Services”).
Evelop Airlines, S.L. is the data controller of personal data that are processed through, refer to or contain a link to the privacy policies hosted on the domain names https://www.iberojet.com/es/proteccion-datos and https://www.iberojet.com/en/data-protection.
For its part, ORBEST, S.A. is the data controller of personal data that are processed through or refer to the domain name https://www.iberojet.com/pt/protecao-dados.
III. IDENTIFICATION, PURPOSE, LEGAL BASIS, AND DURATION OF PROCESSING
For what purpose do we process your personal data?
In general, you may access and browse the Website without providing any personal information, except as set out in the Cookies Policy.
Iberojet shall process your personal data when you provide them to us through the forms and sections adapted for this purpose on our Website or in other sections or channels that Iberojet places at your disposal. In addition, we may process your data when they have been provided to us by third party partners (e.g., travel agencies) for the provision of services requested by you.
Depending on the purpose, this may include your identification data, contact details, information relating to payment methods, information on your preferences or loyalty cards, online registration data, your image, as well as any other information you provide us with in the “Observations” or similar sections.
Detailed information of the processing conducted by Iberojet:
Sending commercial communications (e-mail, SMS, WhatsApp, telephone, etc.) on products and services marketed by Iberojet, which are directly related to the service contracted
Legitimate interest. This processing is necessary for the pursuit of Iberojet’s legitimate interests, in accordance with the provisions of article 21.2 of Law 34/2002, of 11 July, on Information Society and Electronic Commerce Services. If no services have been previously contracted with Iberojet, it shall be necessary to obtain consent for the sending of commercial communications.
In any case, the customer may object to receiving this type of communications through the means provided in section V of this Privacy Policy.
Until you inform us of your wish to stop receiving commercial communications.
Sending electronic (newsletter) and non-electronic (SMS, WhatsApp, telephone calls, etc.) commercial communications concerning offers and promotions on goods and services offered by Iberojet
Consent of the data subject. In order to be able to offer products and services that may be of interest to the customer, offers for products and services related to those contracted with Iberojet shall be sent to the customer for evaluation. In any case, the customer may object to receiving this type of communications through the means provided in section V of this Privacy Policy.
Until you inform us of your intention to unsubscribe from the newsletter or your wish to stop receiving electronic or other commercial communications.
Managing enquiries and/or complaints raised through the contact form
Execution of the contractual relationship. If you contact via telephone, the call may be recorded to attend to your request and ensure the quality of the service.
For the necessary legal period and thereafter, for the periods stipulated by law, depending on the content of your enquiry.
Managing enquiries, complaints and/or requests
As appropriate, the legitimate business interests of Iberojet and its business, or your consent, we may record telematic communications and instructions that occur during your use of any Iberojet customer service or sales office and, therefore, we shall process your personal data, including your voice when you contact us through such channels, to provide a record of the transactions you have entered into for any appropriate legal purposes.
During the period necessary to handle your claim/enquiry/complaint and thereafter, for the periods stipulated by law, depending on the content of your enquiry.
Managing the reservation/services contracted
Execution of the contractual relationship. Managing your travel request, as well as processing the payment for the services provided and resolving any doubts, enquiries or complaints that may have arisen in the context of said services and, once your request is confirmed, maintaining the contractual relationship.
When you request a reservation on behalf of a passenger (as a representative/authorised agent), you declare that you have informed the data subject of the content of this Privacy Policy and have obtained their consent to communicate their personal data to Iberojet, being liable for any damage or harm, direct or indirect, that may be caused as a result of a breach of this obligation.
For the duration of the contractual relationship and thereafter for the periods stipulated by law.
Sending quality surveys
Legitimate interest of Iberojet. In order to assess the level of customer satisfaction with the contracted services, quality surveys shall be sent to them in order to obtain their opinion on the services and thus be able to improve those issues that require it in relation to other customers.
For the duration of the contractual relationship and thereafter for the periods stipulated by law.
Sending communications related to the status of your reservation
Execution of the contractual relationship. Based on our contractual relationship with you, to send you status updates and service or operational communications relating to the contracted service, regardless of the channel (direct sales or through agencies/other airlines, online or face-to-face sales, ...) through which you have contracted our services.
For the duration of the contractual relationship and thereafter for the periods stipulated by law.
Sending flight status communications (delays, gate updates, claims, etc.)
Execution of the contractual relationship. Based on our contractual relationship with you, we will send you updates regarding your flight status, such as delays, gate changes, and responses to claims related to your reservation.
During the contractual relationship and subsequently, for the legally stipulated periods.
Sending communications related to the status of your reservation
Execution of the contractual relationship. Based on our contractual relationship with you, we send status updates and service or operational communications regarding the contracted service, regardless of the channel (direct sales or through agencies/other airlines, online or in-person sales, ...) through which you contracted our services.
During the duration of the contractual relationship and afterwards, for the legally stipulated periods.
Sending communications regarding the status of your flight (delays, boarding gate update, complaints, etc.).
Consent by the interested party. After you fill in the form about your flight update, Iberojet may send you communications or notifications with information that could affect your flight, such as delays, changes in the boarding gate, information about your right to lodge complaints, etc. This information will only be sent if you consent to receiving it.
During the period covered by the incidents and until the complaint has been resolved, which should not last more than one (1) week.
Managing your registration and participation in events and/or promotional actions requested
Express consent to manage your participation in promotional activities organised by Iberojet (raffles, competitions or promotions) in which you participate.
For the duration of the promotional action.
Registering as a “Customer”
Express consent to manage your registration as a user of the platform.
Until you have informed us of your wish to unsubscribe as a user. You can cancel your registered user account by contacting us at dpo@avoristravel.com.
Other purposes I
When you authorise us to send advertising for other Iberojet products and services, and from companies in the Ávoris Group, through all available channels (including electronic media), of a general nature or adapted to your personal characteristics in accordance with your interests, by creating a commercial profile based on the information provided and by means of automated processing.
Until you have informed us that you wish to stop sharing your data with these organisations.
Other purposes II
Compliance with legal obligations (for example, for security reasons, fraud prevention, handling immigration formalities, compliance with health regulations). Legitimate interest.
Periods stipulated by law in accordance with the applicable regulations in each case.
Other purposes III
Internal analytical purposes. To improve our services and products through market research, or to process requests, enquiries or potential complaints that may arise as provided for in article 6.1(f) of the General Data Protection Regulation.
Periods stipulated by law in accordance with the applicable regulations in each case.
These data shall be collected and processed by Iberojet only if you provide them to us. All fields marked with (*) in the forms on the Website must be completed, such that the omission of any of them may result in the form concerned not being submitted and, consequently, the requested service not being provided.
By clicking on the “I accept”, “Send” or equivalent button included in the aforementioned forms, you declare that the information and data you have provided are accurate and truthful.
IV. RECIPIENTS
Your personal data may be transferred to third parties for the appropriate provision of the service or for internal administrative purposes to companies of the Ávoris Group, the business group to which Iberojet belongs. You can consult the list of companies in said group at https://www.avoristravel.com/companiesandassociates.
When Iberojet is legally obliged to disclose your data, these may be transferred to Public Bodies, the Tax Administration, Judicial Bodies and Law Enforcement Agencies and State Security Forces.
Similarly, your data may be transferred to certain third party service providers with whom Iberojet has a contractual relationship, who provide services associated with the contract, both for its formalisation and for its management and execution. By way of example and without limitation, Iberojet service providers perform their services in the following areas: airline services, railways, hotels, legal services, general ancillary services, commercial communications, technology service providers, banking, fraud prevention, legal consultancy, multidisciplinary professional services, maintenance-related companies, technology service providers, physical security companies and call centre management companies. These service providers, depending on the country of your travel destination, may be located in third countries for which an international transfer of data is necessary.
The aforementioned transfers are limited to enabling the development and maintenance of the contractual relationship between ourselves and you (this is the case of airlines if you ask us to book a flight, hotels to ensure that the requested booking is made, car rental companies to ensure that they book the vehicle on the dates you are interested in, etc.). You may consult the service providers to whom we transfer your data by reviewing the booking documentation that we provide you with on completion of our services. However, it is advisable that you review the privacy policies of these companies to obtain further information on how they process your personal data, as well as in the cases provided for by the prevailing data protection regulations in force at any given time.
V. INTERNATIONAL TRANSFERS
Some of the aforementioned recipients may be located outside the European Union. International data transfers outside the European Union shall be conducted in accordance with the provisions of the applicable data protection regulations and, in particular, pursuant to the exception in article 49.1(b) of the General Data Protection Regulation, as the international transfer must necessarily be undertaken for the execution of the contract between the user and Iberojet.
In any case, we shall ensure that any transfer of your personal information by us or by third parties with whom we share your personal information, and the manner in which we handle your personal information, complies with European data protection legislation.
VI. LINKS
Our Website may contain links to third party websites that are beyond our control. Iberojet is not responsible for the security or privacy of any information collected on third party websites or other services, and therefore you should exercise caution and examine the privacy policies applicable to any third party websites you use.
VII. SECURITY
Iberojet maintains the highest levels of security required by law to protect your personal data against accidental loss and unauthorised access, processing or disclosure, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed. When we receive your data, we use rigorous security procedures and features to prevent any unauthorised access.
The actions described in this section and designed to ensure a level of security appropriate to the risk identified shall include, if necessary, the following measures:
- Pseudonymization and encryption of personal data.
-
Measures capable of guaranteeing the ongoing confidentiality, integrity, availability and resilience of the processing systems and services.
-
Measures capable of restoring availability and access to personal data rapidly in the event of a physical or technical incident.
-
A process of regular verification, evaluation and assessment of the effectiveness of the technical and organisational measures to ensure the security of the data processing.
-
Periodic assessment of the risk of accidental or unlawful destruction, loss or alteration of, or unauthorised disclosure of or access to, personal data transmitted, stored or otherwise processed.
-
Measures to ensure that any person acting under the authority of Iberojet and having access to personal data may only process such data on the instructions of Iberojet.
VIII. CONFIDENTIALITY
The personal data that may be collected shall be processed with the strictest confidentiality, and we undertake the commitment to maintain their secrecy and ensure compliance with our duty to safeguard them by adopting all necessary measures to prevent their alteration, loss and unauthorised processing or access, in accordance with the provisions of the applicable legislation.
IX. RESPONSIBILITY
The user shall be the only party liable if the forms are completed with false, inaccurate, incomplete or out-of-date data.
X. COOKIES
Our Website uses “cookies” to collect information about how you use the Website. For more detailed information on how Iberojet uses cookies, please see the Cookies Policy.
XI. RIGHTS
You may exercise your rights of access, rectification, objection, erasure, limitation of processing, portability and the right not to be subject to individualised decisions, recognised by the prevailing legislation, by sending a written communication to the address indicated in the above heading or by sending an e-mail to the following e-mail addresses proteccion.datos.iberojet.es@avoristravel.com, proteccion.datos.iberojet.pt@avoristravel.com, proteccion.datos.iberojet.paquetes@avoristravel.com or dpo@avoristravel.com, where you can contact our Data Protection Officer.
Where you have given your consent for a specific purpose, you may withdraw your consent at any time by following the procedure set out above.
The above notwithstanding, we inform you that you have the right to seek the protection of the Spanish Data Protection Agency through its website www.aepd.es.