Any personal data that CLIENTS may disclose to COTUR will be understood as obtained, processed, and transmitted in strict compliance with the GDPR
The confirmation of the reservation implies the introduction into the system, by the CLIENTS, or by the TRAVEL AGENT, by automated or non-automated means, of personal identification data, and data related to credit and debit cards, which will be used to facilitate and enable the contracting and reservation of the specific services that make up the CLIENT’s request, as well as to provide information regarding products and services of COTUR S.A, hereinafter referred to as COTUR. The Processing of Personal Data is carried out in strict compliance with the legislation on the protection of personal data in accordance with the provisions of Regulation (EU) of the European Parliament and of the Council, and/or any legislation that regulates, amends or replaces said legislation, collectively referred to as the “General Data Protection Regulation” (hereinafter referred to as GDPR). By providing their personal data, CLIENTS declare that they authorize and consent to the processing of their data by COTUR for the purposes of facilitating and enabling the contracting and reservation of the specific services that make up their request, as well as to receive meaningful link information regarding products and services provided by COTUR. Your data will be retained for a period of one year from the date of collection of your consent or if you express otherwise. COTUR declares and guarantees that it has implemented, is equipped, and will continue to implement the necessary technical and organizational security measures to ensure the security of personal data provided to it, in order to prevent its alteration, loss, treatment, and/or unauthorized access, taking into account the current state of technology, the nature of the data stored, and the risks to which they are exposed. If the CLIENT wishes to exercise the rights of access, rectification, cancellation, or opposition granted to them by the GDPR, they must send an email to or cancel through the means available in the Newsletter reception.
Under no circumstances will information be requested about philosophical or political convictions, party or union membership, religious faith, private life, racial or ethnic origin as well as data relating to health and sexual life, including genetic data
COTUR employees access information in files with password-protected access, the record of which is documented. Changes to existing data in the files are possible with a record of the date of the person responsible for the change. Personal Data are processed with the legally required level of protection to ensure their security and to prevent their alteration, loss, treatment, or unauthorized access, taking into account the state of the technology. The CLIENT is aware of and accepts that Internet security measures are not impregnable. COTUR has technical peripheral control infrastructures that comply with security requirements and acts in accordance with the standards of the Payment Card Industry Data Security Standard (PCI DSS). Credit card data is used only for payment processing, and after the transaction is completed, it is deleted from our records, except when the CLIENT has authorized us to retain it. For security reasons applicable in certain countries, it is mandatory to include information regarding data such as name, passport number, gender, age, nationality in flight reservations. This information contained in the reservation ely based on Directive (EU) of the European Parliament and of the Council, be accessed by the competent authorities of the countries of origin or destination, for the purposes of prevention, investigation, detection, or repression of criminal offenses or the enforcement of criminal sanctions, and the free movement of such data and Directive (EU) of the European Parliament and of the Council.
