Transitour — Website Privacy Policy

Last updated: 21 February 2026

This Privacy Policy describes how Unimedia Technology S.L.U. ("Unimedia", "we", "us", or "our") collects and processes Personal Data when you visit the website https://www.transitour.es (the "Website").

This Privacy Policy applies exclusively to data collected through the Website. If you are a registered user of the TransiTour SaaS platform, the processing of your data within the platform is governed by the TransiTour SaaS Privacy Policy and the Terms and Conditions.

1. Data Controller

The Data Controller for Personal Data collected through this Website is:

Company Name: Unimedia Technology S.L.U.
CIF: B66934365
Registered Office: C/Esteve Terradas, 1, 111A – Mediterranean Technology Park (PMT) – 08860 Castelldefels, Barcelona, Spain
Data Protection Contact Email: transitour@unimedia.tech
Phone: +34 936 01 40 40

2. Applicable Legislation

Our data processing activities are governed by:

General Data Protection Regulation (EU) 2016/679 ("GDPR")
Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights ("LOPDGDD")
Spanish Law 34/2002 on Information Society Services and Electronic Commerce ("LSSI-CE")

3. Personal Data We Collect

We collect minimal data through this Website, limited to what is necessary for its operation and your interactions with us.

3.1. Data Collected Automatically (All Visitors)

When you browse the Website, we automatically collect the following technical data:

IP address
Browser type and version
Device type and operating system
Referring URL (the page that linked you to our Website)
Pages visited, time spent on each page, and clickstream data
Date and time of access
Language preferences

This data is collected through cookies and similar technologies (see Section 8 below).

3.2. Data Collected Through the Live Chat

When you use the live chat feature on this Website, we may collect:

Your name (if you provide it)
Your email address (if you provide it)
Your company name (if you provide it)
The content of your messages and any information you voluntarily share during the conversation
Your IP address and technical data associated with the chat session
Date, time, and duration of the chat session

Providing your name or email in the live chat is voluntary. However, if you wish us to follow up on your enquiry, we may need your contact details to do so.

4. Purposes and Legal Bases for Processing

Purpose	Data Used	Legal Basis (Art. 6(1) GDPR)
Displaying and operating the Website	Technical data (IP, browser, device)	Legitimate interest (f) — ensuring the Website functions correctly
Responding to your live chat enquiries	Name, email, message content	Pre-contractual measures (b) — responding to your request; or legitimate interest (f) — handling enquiries
Website analytics and improvement	Anonymised/aggregated usage data	Consent (a) — for analytics cookies; legitimate interest (f) — for anonymised, aggregated data
Security and fraud prevention	IP address, access logs	Legitimate interest (f) — protecting the Website and our systems
Compliance with legal obligations	All data as required	Legal obligation (c) — where required by Spanish or EU law

5. Data Sharing

We do not sell, rent, or trade your Personal Data to third parties for marketing purposes.

We may share your data with the following recipients, solely for the purposes described in this Privacy Policy:

5.1. Sub-Processors / Service Providers

Provider	Purpose	Data Location
Amazon Web Services EMEA SARL	Website hosting	EU-West-1 (Ireland), EEA

5.2. Other Recipients

We may also share data with: (a) professional advisors (legal, accounting) under confidentiality obligations; (b) competent authorities where required by law; (c) successor entities in the event of a corporate transaction.

6. International Data Transfers

The Website is hosted within the European Economic Area (EEA) on AWS EU-West-1 (Ireland). We do not transfer your Personal Data outside the EEA unless:

The transfer is protected by Standard Contractual Clauses (SCCs) adopted by the European Commission
An adequacy decision by the European Commission applies
Another appropriate safeguard under Chapter V of the GDPR is in place

7. Data Retention

Data Category	Retention Period
Technical/access logs	12 months from collection
Live chat conversations	24 months from the date of the conversation, or until you request deletion
Analytics data (anonymised)	Retained indefinitely (not Personal Data)
Cookie data	See Section 8 below

After the applicable retention period, Personal Data is securely deleted or irreversibly anonymised.

8. Cookies and Tracking Technologies

8.1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help the website function, improve performance, and provide information to the website owner.

8.2. Cookies We Use

Cookie Type	Purpose	Consent Required	Duration
Strictly Necessary	Essential for the Website to function (security, load balancing, session management)	No	Session or up to 12 months
Analytics	Help us understand how visitors use the Website (page views, traffic sources, navigation paths)	Yes	Up to 24 months
Live Chat	Enable the live chat widget to function, remember your chat history and preferences during a session	Functional cookies — Yes	Session or up to 12 months

8.3. Cookie Consent

In accordance with the LSSI-CE and the GDPR, when you first visit the Website, a cookie consent banner will be displayed, allowing you to:

Accept all cookies
Reject non-essential cookies (only strictly necessary cookies will be placed)
Manage your preferences by category

Non-essential cookies will not be placed until you have given your consent. You may change your cookie preferences at any time by accessing the cookie settings on the Website.

8.4. Managing Cookies via Your Browser

You may also control cookies through your browser settings. Please note that blocking certain cookies may affect the functionality of the Website or the live chat feature. Instructions for common browsers:

Chrome: Settings > Privacy and Security > Cookies
Firefox: Settings > Privacy & Security > Cookies and Site Data
Safari: Preferences > Privacy > Manage Website Data
Edge: Settings > Cookies and Site Permissions

9. Your Rights

Under the GDPR and the LOPDGDD, you have the following rights with respect to Personal Data for which Unimedia is the Data Controller:

Right of access (Article 15 GDPR) — obtain a copy of your data and information about its processing
Right to rectification (Article 16 GDPR) — correct inaccurate or incomplete data
Right to erasure (Article 17 GDPR) — request deletion of your data where applicable
Right to restriction of processing (Article 18 GDPR) — limit how we process your data in certain circumstances
Right to data portability (Article 20 GDPR) — receive your data in a structured, machine-readable format
Right to object (Article 21 GDPR) — object to processing based on legitimate interests
Right to withdraw consent — for any processing based on consent, at any time

How to Exercise Your Rights

Email: transitour@unimedia.tech
Post: Unimedia Technology S.L.U., C/Esteve Terradas, 1, 111A – Mediterranean Technology Park (PMT) – 08860 Castelldefels, Barcelona, Spain

We will respond within one (1) month of receiving your request, extendable by two further months for complex requests (Article 12(3) GDPR). We may request proof of identity to protect your data.

10. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6 – 28001 Madrid, Spain
Website: https://www.aepd.es
Phone: +34 901 100 099

If you are located in another EU/EEA Member State, you may lodge a complaint with the supervisory authority in your country of habitual residence (Article 77 GDPR).

We encourage you to contact us first at transitour@unimedia.tech so we can try to resolve your concern directly.

11. Children's Privacy

This Website is not directed at children under the age of 16. We do not knowingly collect Personal Data from children under 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. Changes to This Privacy Policy

Unimedia reserves the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date. We recommend that you review this page periodically.

13. Contact Information

For any questions regarding this Privacy Policy or the processing of your data on this Website, please contact:

Unimedia Technology S.L.U.
C/Esteve Terradas, 1, 111A – Mediterranean Technology Park (PMT)
08860 Castelldefels, Barcelona, Spain
Email: transitour@unimedia.tech
Phone: +34 936 01 40 40
Website: https://www.unimedia.tech