1. Data controller
FIDELTOUR SL is the entity responsible for the processing of the personal data provided through this website, as well as the data collected on social media on which it maintains a corporate presence. The contact details of the data controller appear in the «Company details» block on this page.
2. Purpose of the processing
The personal data provided will be processed by FIDELTOUR SL for the following purposes:
- To respond to enquiries, requests for information or demo requests.
- To manage the contractual and commercial relationship with clients and partners.
- To send commercial communications about FIDELTOUR SL's products and services, where there is express consent or a prior relationship that justifies it.
- To process public profile information when the user interacts with FIDELTOUR SL's corporate pages on social media (Facebook, LinkedIn, X, etc.).
3. Legal basis
The legal basis for the processing is, depending on the case, the data subject's consent, the performance of a contract or of pre-contractual measures requested by the data subject, compliance with applicable legal obligations, or FIDELTOUR SL's legitimate interest in properly managing the relationship with its commercial contacts.
4. Data retention
The data will be retained for the period strictly necessary to fulfil the purposes indicated and the applicable legal obligations. Once that period has elapsed, the data will be blocked and erased in accordance with the legislation in force.
5. Recipients and disclosures
FIDELTOUR SL will not disclose the data to third parties except where required by law. Certain service providers (hosting, analytics, communication, CRM) may have access to the data as data processors, under processing agreements that guarantee a level of protection equivalent to that required by European legislation.
6. Data subject rights
In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the data subject may exercise the following rights at any time:
Right of access
To obtain information on the specific personal data being processed, the purposes of the processing, the origin of the data and the communications made or planned.
Right to rectification
To request the modification of inaccurate or incomplete data. In the case of public information (for example, comments on corporate pages on social media), FIDELTOUR SL may satisfy this right only in respect of the content under its control.
Right to erasure
To request the deletion of personal data, save for the exceptions provided for by the legislation itself that require its retention.
Right to restriction of processing
To request that the purposes of the processing originally envisaged by FIDELTOUR SL be restricted.
Right to data portability
To receive the personal data provided in a structured, commonly used and machine-readable format, and to transmit it to another controller.
Right to object
To request that the processing of personal data not be carried out or that it be discontinued.
To exercise any of these rights, the data subject may send their request, enclosing a copy of their national identity document (DNI) or equivalent document, to the postal address indicated in the company details or by email to club@fideltour.com. In addition, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) as the competent supervisory authority.
7. Specific processing on social media
FIDELTOUR SL maintains corporate profiles on social media with the primary purpose of promoting its products and services. By joining these pages, the user provides their consent to the processing of the personal data published on their profile. FIDELTOUR SL only accesses and processes the user's public information (in particular, their contact name), without incorporating it into any additional file.
The user may consult the privacy policies of each social network at any time and configure their profile to safeguard their privacy.
8. Advertising
FIDELTOUR SL may use social media to advertise its products and services. Should it decide to process the user's contact details for direct commercial prospecting activities, it will always do so in compliance with the legal requirements of the GDPR and the Spanish LSSI-CE.
9. Security and confidentiality
FIDELTOUR SL adopts the appropriate technical and organisational measures to ensure the security of personal data and prevent its alteration, loss or unauthorised access, in accordance with the state of the art and the risks associated with the processing.
10. Cookies
For detailed information on the use of cookies on this website, please consult our Cookie policy.
11. Integration with Google API Services (Google Ads – Customer Match)
legalPrivacidad.clause11.intro
11.1. What data from your Google account does our application access
When a client connects their Google Ads account with FIDELTOUR through Google's OAuth authorisation flow, our application requests exclusively the permissions https://www.googleapis.com/auth/adwords (Google Ads API) and https://www.googleapis.com/auth/datamanager (Google Data Manager API), and accesses only the following Google user data: • The identifier of the authorised Google Ads account (Customer ID) and, where applicable, that of the administrator account (MCC). • The audience lists (Customer Match segments) of that account: their identifier and name, for the sole purpose of locating, creating, updating or closing them on behalf of the client. • The OAuth authorisation credentials (refresh token) issued by Google, which we store encrypted to enable continuous operation of the integration. Our application does not access any other data from the user's Google account (Gmail email, Google contacts, campaigns, billing, reports or any other Google service).
11.2. How we use this data
The above data is used exclusively to provide the audience synchronisation functionality requested by the client: to create and maintain Customer Match lists in their Google Ads account and to add or remove contacts from their segments. In this process, FIDELTOUR sends Google contact identifiers (email, telephone, first and last names) transformed irreversibly by SHA-256 hashing before transmission; the country and postal code are transmitted without hashing as required by the Google API format. Google does not return any of these identifiers to FIDELTOUR. In this functionality, FIDELTOUR acts as a data processor on behalf of its client.
11.3. With whom we share, transfer or disclose Google user data
FIDELTOUR SL does not share, transfer, sell or disclose to any third party the Google user data described in point 11.1 (OAuth credentials, account identifiers and audience lists). Only our hosting infrastructure providers may have technical access to them, in the capacity of sub-processors and under contracts compliant with the GDPR, and competent authorities when there is a legal obligation to do so. This data is not used for FIDELTOUR's own purposes, nor for FIDELTOUR's advertising purposes, nor for training models, nor is it shared with other platforms.