Iberinbound Privacy Policy

1. Who we are

The controller of the personal data collected through https://iberinbound.com is:

• Company: Iberinbound Travel SLU
• Tax ID (CIF): B43988492
• Address: C/ Enric Granados 91, Principal 1ª, 08008 Barcelona, Spain
• Email: iberinbound@iberinbound.com
• Phone: +34 932 509 805

For any question about your data, write to iberinbound@iberinbound.com.

2. What data we collect

When you send an enquiry through our contact form: your name, work email, agency or company, type of business, country and, if you provide them, your phone number, type of programme, group size, travel dates, destinations of interest and the content of your message.

When you use the chat: the messages you send and any details you give us through the “Ayuda” chat window.

When you write to us or work with us: the contact and business details of our trade partners and their staff, and the information exchanged to prepare and run travel programmes.

Technical data: to protect the contact form against spam and abuse, we temporarily keep a coded (hashed) version of your connection’s IP address for one hour. Our hosting provider also keeps standard server logs. With your consent, we collect anonymous statistics about how the website is used (see section 6).

We do not ask for special categories of data through the website. If a programme requires information such as dietary or accessibility needs, it is shared only to the extent needed to deliver the service.

3. Why we use your data and on what legal basis

Purpose	Legal basis (GDPR)
Replying to your enquiry and preparing a proposal	Your consent (art. 6.1.a) and steps taken at your request before a contract (art. 6.1.b)
Managing our business relationship and delivering the services you book	Performance of a contract (art. 6.1.b)
Keeping accounting and tax records	Legal obligation (art. 6.1.c)
Protecting the website against spam, fraud and attacks	Our legitimate interest in keeping the site secure (art. 6.1.f)
Website usage statistics (Google Analytics)	Your consent, given through the cookie banner (art. 6.1.a)

We do not use your data for automated decision-making or profiling.

4. How long we keep your data

• Enquiries that do not lead to a booking: 12 months from our last contact, then deleted.
• Clients and trade partners: for as long as the business relationship lasts, and afterwards for the periods required by law, such as 6 years for accounting records under the Spanish Commercial Code (art. 30) and 4 years for tax purposes.
• Anti-spam IP record: 1 hour.
• Data processed on the basis of consent: until you withdraw your consent.

5. Who we share your data with

We do not sell your data. We share it only when necessary:

• Service providers working for us, under a data-processing agreement, such as our website hosting, email and chat providers.
• Travel suppliers such as hotels, transport companies, guides, restaurants and venues, only to the extent needed to deliver a programme you have booked.
• Public authorities, when required by law.

6. Third-party services on our website

Our website uses some services from Google that may receive your IP address and technical data when you visit a page:

• Google Translate, for the language selector
• Google Maps, for the office map on our contact page
• Google Fonts, for the typefaces on the site

With your consent, given through our cookie banner, we also use:

• Google Analytics, to produce anonymous statistics about how visitors use the website
• Zendesk chat, behind the “Ayuda” button, so you can send us a message from any page. If you use the chat, the messages and any details you give are stored by Zendesk on our behalf

Our site also links to our Facebook and LinkedIn pages. Those networks only receive your data if you click through to them. For details of the cookies these services use, see our Cookies policy.

7. International data transfers

Some of the providers above, such as Google and Zendesk, may process data outside the European Economic Area, in particular in the United States. Where this happens, the transfer is covered by the EU–US Data Privacy Framework or by Standard Contractual Clauses approved by the European Commission.

8. Your rights

You can ask us at any time to:

• access the personal data we hold about you
• correct data that is wrong or incomplete
• delete your data when it is no longer needed
• restrict or object to certain uses of your data
• receive your data in a portable format
• withdraw your consent, without affecting anything done before you withdrew it

To exercise these rights, email iberinbound@iberinbound.com with the subject “Data protection”. We will reply within one month. If you believe we have not handled your data correctly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.

9. Security

We use technical and organisational measures to protect your data, including an encrypted (HTTPS) connection, spam protection on our contact form, and access to data limited to staff who need it.

10. Cookies

For information about the cookies used on this website and how to manage them, see our Cookies policy.

11. Minors

Our services are aimed at travel professionals. We do not knowingly collect data from people under 14 through this website.

12. Changes to this policy

We may update this policy when our services or the law change. The date of the latest version is shown at the top of this page.