Valid from december 5, 2024

1.    Introduction

This Privacy policy ("Privacy Policy") was elaborated by Viajes de Autor S.L., a Spanish company (the "Company," "we," "us," or "our"), to inform you of the following: what information we collect, when we collect it, how and why we collect it, how we use it, how we protect it, how we share it and what choices you have regarding our collection and use of this information.

This Privacy Policy applies to the website https://www.pangeathetravelstore.com/en-US/  and its mobile application (collectively, the “Website” or “Site”).

Please read this Privacy Policy carefully since by accessing or using the Site, you agree to be bound by this Privacy Policy. If you do not agree with any part of this Privacy Policy, you must leave the Site and do not use the Services.

We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised Privacy Policy on the Website. Your continued use of the Services after the posting of the revised Privacy Policy constitutes your acceptance of the changes. If you have any questions, you can contact us at [email protected]

Capitalized terms used herein but not defined have the meaning ascribed to such terms in our Terms and Conditions.

2.          Privacy and Data Protection (in compliance with FIPA and GDPR

2.1. Personal Information Collection and Use

We collect and use your personal information in accordance with this Privacy Policy. By visiting the Site, creating an account on the Site, or using the Services, you consent to the collection, use, and sharing of your personal information as herein.

For Users located in the European Union (“EU”), the processing of personal data is governed by the General Data Protection Regulation (“GDPR”). The Company is committed to complying with GDPR when processing the personal data of EU Users.

For Users located in Florida, the processing of personal data is governed by the Florida Information Protection Act (“FIPA”).

We will not collect any personally identifiable information about you (that is, your name, address, telephone number, or e-mail address) unless you provide it to us voluntarily. You can use many features of the Site without disclosing your personal information. You are not required to provide any personal information as a condition of using our Site, except as it may be necessary to create an account or provide you the Services at your request.

2.2. Legal Basis for Processing

We process your personal data based on the following legal grounds:

- Your consent, which you may withdraw at any time;

- The necessity to perform a contract with you or to take steps at your request before entering into a contract;

- Our legitimate interests, such as improving our Services and providing a secure and efficient User experience; and

- Compliance with legal obligations.

2.3. Data Retention and Deletion

We retain your personal information for as long as necessary to fulfill the purposes for which it is collected, unless a longer retention period is required or permitted by law. You may request deletion of your personal information by contacting us at [email protected]

2.4. Third-Party Data Sharing

We may share your personal information with third-party service providers who assist us in providing the Services, such as payment processors, email service providers, and cloud storage providers. These third-party service providers are obligated to maintain the confidentiality and security of your personal information.

2.5. Your Rights

We may share your personal information with third-party service providers who assist us in providing the Services, such as payment processors, email service providers, and cloud storage providers. These third-party service providers are obligated to maintain the confidentiality and security of your personal information.

Under GDPR, you have the following rights concerning your personal data:

- The right to access and receive a copy of your personal data;

- The right to rectify inaccurate personal data;

- The right to erasure (or "the right to be forgotten") in certain circumstances;

- The right to restrict processing in certain circumstances;

- The right to data portability;

- The right to object to processing based on legitimate interests or for direct marketing purposes; and

- The right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us at [email protected].

2.6. International Data Transfers

Personal data of Users located in the European Economic Area (“EEA”) may be transferred to and processed in countries outside the EEA, including the United States. We will ensure that appropriate safeguards are in place to protect your personal data when transferred outside the EEA, such as standard contractual clauses approved by the European Commission or the Privacy Shield framework.

2.7. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

2.8. Data Breach Notification

In the event of a data breach involving your personal information, we (i) will notify you in accordance with the requirements of the FIPA and take appropriate measures to mitigate any potential harm; and (ii) will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.

We will also communicate the breach to affected Users without undue delay when required by GDPR.

3.    Minors

In light of the importance of protecting children's privacy, we do not collect, process or use on our Site any information relating to an individual whom we know to be under 13 years old without the prior, verifiable consent of his or her parent or guardian. Such parent or guardian has the right, upon request, to view the information provided by the Minor and/or to require that it be deleted.

4.    Cookies

The Site may use cookies to record user-specific information on what pages Users access or visit, record past activity at the Site in order to provide better service when visitors return to our Site and gather statistical information to help improve User experience. With most Internet browsers, you can erase cookies from your computer hard drive, block all cookies, or receive a warning before a cookie is stored. Please refer to your browser instructions to learn more about these functions.

5.    Non-Personal Information

In some cases, we may collect information about you that is not personally identifiable. Examples of this type of information include the type of Internet browser you are using, the type of computer operating system you are using, and the domain name or IP address of the site from which you linked to our Site.