PRIVACY POLICY

1. INTRODUCTION

1.1 BUSINESS REVIEW

At Metropolitan Touring C.A., we offer an excellent service to the traveler. To do this, we focus on creating a history full of good stories that exceed the expectations of our valued clients.

For this reason, we have been rated as one of the most respected companies in the Tourism sector.

We have earned this recognition thanks to the trust of our clients for the effort, respect and ethics in more than 70 years of work.

We started as the first agency in the country, venturing into trips to the Galapagos Islands in 1960. Now we have a broad portfolio of services with which we provide comprehensive and personalized advice to our clients, among which we mention:

Advice on obtaining visas.
Advice on vacation and/or work trips in complementary services such as hotels, city tours in destinations, tourist attractions.
Coordination of medical events and organization of events.
Sale of Travel Insurance.
Sale of Air Tickets.

1.2 LEGAL BASIS AND LEGITIMATE INTEREST

The legal basis of our processing lies in a contractual relationship with the holders of personal data, for example, with our employees, clients, suppliers or allies.

On the other hand, we consider that the processing of personal data is also based on legitimate interest since, for example, the users of our website demonstrate their willingness to obtain our services by browsing our site or filling out the registration forms. or contact, in order to provide our services in favor of the interested parties.

Metropolitan Touring C.A. bases its treatment of personal data on the following legal instruments:

Article 7.1 of the LOPDP: “[b]y consent of the owner for the processing of their personal data, for one or more specific purposes”
Article 7.2 of the LOPDP: “[t]hat is carried out by the person responsible for the treatment in compliance with a legal obligation”;
Article 7.5 of the LOPDP: “[f]or the execution of pre-contractual measures at the request of the owner or for the fulfillment of contractual obligations pursued by the person responsible for the processing of personal data, in charge of the processing of personal data or by a legally authorized third party.”;
Article 7.6 of the LOPDP: “[t]o protect vital interests of the interested party or another natural person, such as their life, health or integrity”;
Article 7.7 of the LOPDP: “[f]or the processing of personal data contained in publicly accessible databases”; and
Article 7.8 of the LOPDP: “[t]o satisfy a legitimate interest of the data controller or a third party, provided that the interest or fundamental rights of the owners do not prevail under the provisions of this standard.”.
Commercial Code Art. 37.-“[e]The merchant or businessman must save and back up the documents and information related to the legal acts that he develops, whether these instruments are public or private, as well as the constant messages in emails that exist about them; The latter will be carried out and will have the effects provided for in the chapter dedicated to electronic commerce contained in this Code.”.
Regulations/Legal obligation: Art. 697 of the Commercial Code & Art 33 of the Organic Law on Protection of Personal Data.
Regulations/Legal Obligation: Articles 319 Companies Law.
Regulations/Legal obligation: Commercial Code Article 691.
Commercial Code Art. 200.- Regulation of sales, withholding and complementary receipts Articles 17 and 18.

2. SCOPE OF THIS POLICY

Metropolitan Touring C.A., hereinafter “METROPOLITAN TOURING” or the “Controller and/or Data Processor”), in compliance with the principles of legality, loyalty and transparency included in the Organic Law on the Protection of Personal Data (hereinafter the “LOPDP”). “), makes this instrument available in order to carry out the processing of your personal data, and in order to guarantee the constitutional right to protect them.
This instrument applies to all processing of personal data of Clients or third parties with whom Metropolitan Touring C.A., Parent Office, Megamaxi Office and Guayaquil Agency Office establish or maintain a relationship of offer or provision of services, excluding from this any entity that appears in representation of the brand.

TYPE OF TREATMENT USED In order to be able to provide the service to clients or third parties of METROPOLITAN TOURING C.A. (hereinafter the “owners”), it is necessary that the Controller and/or Data Processor process data, whether automated or not (mixed processing), and obtain, collect, classify, store, register, use, extract, consult, view , or transfer, and in general, process the personal data of the owners, in accordance with what is permitted in the LOPDP. The treatment carried out by METROPOLITAN TOURING C.A. It is considered on a “large scale”, so the Controller and/or Data Processor has taken all organizational, legal and technical measures to safeguard the confidentiality, integrity and availability of the data. Depending on the service that METROPOLITAN TOURING C.A. provide the Owners, the Data Controller and/or Processor may process the following categories of data:

Identification and contact information.
Data on physical characteristics.
Biometric data.
Employment data.
Academic data.
Asset/financial data
Immigration data.
Facts about hobbies, entertainment and fun.
Data on gender, ideology, religious beliefs, philosophical and/or political beliefs.
Health data.
Data of ethnic or racial origin.

Both the types of processing and the category of data are exemplary, so the types of processing and categories of data will be determined in each case, and depending on the service that the Owners acquire or access for each of the purposes established by METROPOLITAN. TOURING C.A.

3. DEFINITIONS

For the purposes of the application of this Law, the following definitions are established:

Personal Data Protection Authority:

Independent public authority in charge of supervising the application of this law, regulations and resolutions issued by it, in order to protect the fundamental rights and freedoms of natural persons, regarding the processing of their personal data.

Anonymization:

The application of measures aimed at preventing the identification or re-identification of a natural person, without disproportionate efforts.

Database or file:

Structured set of data regardless of the form, method of creation, storage, organization, type of support, treatment, processing, location or access, centralized, decentralized or distributed functionally or geographically.

Consent:

Manifestation of free, specific, informed and unequivocal will, by which the owner of the personal data authorizes the person responsible for the processing of personal data to process the same.

Biometric data:

Unique personal data, related to the physical or physiological characteristics, or behaviors of a natural person that allows or confirms the unique identification of said person, such as facial images or fingerprint data, among others.

Genetic data:

Unique personal data related to inherited or acquired genetic characteristics of a natural person that provide unique information about the physiology or health of an individual.

Personal data:

Data that identifies or makes a natural person identifiable, directly or indirectly.

Personal credit data:

Data that integrates the economic behavior of natural persons, to analyze their financial capacity.

Health related data:

Personal data relating to an individual’s physical or mental health, including the provision of healthcare services, which reveal information about his or her health status.

Sensitive data:

Data relating to: ethnicity, gender identity, cultural identity, religion, ideology, political affiliation, criminal record, immigration status, sexual orientation, health, biometric data, genetic data and data whose improper processing may give rise to discrimination or violate or may violate fundamental rights and freedoms.

Data Protection Officer:

Natural person responsible for informing the controller or the processor of their legal obligations regarding data protection, as well as ensuring or supervising regulatory compliance in this regard, and cooperating with the Personal Data Protection Authority, serving as a point of contact between the latter and the entity responsible for data processing.

Addressee:

Natural or legal person who has been provided with personal data.

Profiling:

Any processing of personal data that allows the evaluation, analysis or prediction of aspects of a natural person to determine behaviors or standards related to: professional performance, economic situation, health, personal preferences, interests, ability, location, physical movement of a person, among others.

Personal data processing manager:

Natural or legal person, public or private, public authority, or other body that alone or jointly with others processes personal data on behalf of and on behalf of a personal data controller.

Certifying Entity:

Entity recognized by the Personal Data Protection Authority, which may, on a non-exclusive basis, provide certifications regarding personal data protection.

Publicly accessible source:

Databases that can be consulted by anyone, whose access is public, unconditional and generalized.

Responsible for the processing of personal data:

Natural or legal person, public or private, public authority, or other body, which alone or jointly with others decides on the purpose and processing of personal data.

Personal data protection seals:

Accreditation granted by the certifying entity to the person responsible for or in charge of processing personal data, for having implemented best practices in its processes, with the aim of promoting the trust of the owner, in accordance with the technical regulations issued by the Personal Data Protection Authority.

Pseudonymization:

Processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Holder:

Natural person whose data is processed.

Transfer or communication:

Statement, declaration, delivery, consultation, interconnection, transfer, transmission, diffusion, disclosure or any form of revelation of personal data made to a person other than the owner, controller or person in charge of processing personal data. The personal data you communicate must be accurate, complete and up to date.

Treatment:

Any operation or set of operations performed on personal data, whether by automated, partially automated or non-automated technical procedures, such as: collection, compilation, obtaining, recording, organization, structuring, storage, custody, adaptation, modification, elimination, indexing, extraction, consultation, processing, use, possession, exploitation, distribution, assignment, communication or transfer, or any other form of enabling access, comparison, interconnection, limitation, deletion, destruction and, in general, any use of personal data.

Breach of personal data security:

Security incident that affects the confidentiality, availability or integrity of personal data.

4. SUMMARY OF DATA COLLECTED AND PROCESSED

Metropolitan Touring C.A., collects and processes the following personal data:

ACADEMIC DATA

Career/instruction
Start and end date of studies
Name of the institution where you studied
Medical Specialty Data

IDENTIFICATION AND CONTACT DATA

Email
First and last names
Identification Number (ID/Passport)
Telephone Number
Birthdate
Nationality
Copy of identification document (ID/Passport)
Copy of voting ballot
Copy of marriage certificate
Copy of birth certificate
Address
Marital status
Relationship
Relationship
Passport
Zip code
Country of Residence
Passport Issue and Expiration Date
Frequent Flyer Number
City of Residence
Age

HEALTH DATA

Disability percentage
Type of disability
Information on drug use
Information about whether you have any mental or physical disorders
Information on whether you have diseases significant to public health
Food restrictions
Copy of Disability Card

WORK DATA

Job Activity / Position
Work Certificate
Military service information
Information about whether you belong to any charitable organization
Name of the company you work for
Associations to which he/she belongs
Address of the company where you work
Username and password for the association portal

MIGRATION DATA

City where you will stay the longest
Country of destination
Airline reservation
Hotel or tour reservation
Length of stay in destination country
City where you will stay the longest
Copy of previously granted visas
Migration history
Residence information for the last 5 years
Information on previous trips to the destination country and others
Information on requested and denied visas
Information on deportations
Country of destination
Airline reservation
Hotel or tour reservation
Length of stay in destination country
Travel dates
Country of destination
Current visa information
Travel dates
Travel dates
Destination address

ASSETS/FINANCIAL DATA

Articles of incorporation in companies in which you have a stake
IESS retirement certificate and pension payment forms
Bank certificates
Investment certificates or accumulation policies
Copy of VAT and Income Tax returns
Credit card statement
Bank statements
Car registration
Property tax payment record
Salary / Monthly Income
Credit Card Holder Name
Consumption amount
Bank account number
Type of Bank Account

DATA ON PHYSICAL CHARACTERISTICS

Photograph
Videos
Audios
Height
Weight

DATA ON GENDER, IDEOLOGY, RELIGIOUS AND/OR POLITICAL BELIEFS

Gender
Certificate of criminal record (only for adults)
Immigration status
Information on insurgent groups
Information about involvement or links to crimes (money laundering, human trafficking, terrorism, illegal activities, crimes against humanity, etc.)

FACTS ABOUT HOBBIES, ENTERTAINMENT AND FUN

Seat preference
Food preference
Travel preference
Interests, likes (activities, etc.)

5. RIGHTS OF THE OWNER

Metropolitan Touring C.A. informs that through the organic law on data protection, it grants certain rights to interested parties. In general terms, you have, or may have, the right (as set forth in more detail in the applicable data protection laws) to:

Right to information.

The owner of personal data has the right to be informed in accordance with the principles of loyalty and transparency by any means.

Right of access.

The owner of the personal data has the right to know and obtain, free of charge from Metropolitan Touring C.A., access to all his/her personal data and to the information detailed in this policy, without having to present any justification.

Right to rectification and updating.

The owner of the personal data has the right to obtain from Metropolitan Touring C.A. the rectification and updating of his/her inaccurate or incomplete data, presenting the supporting documents, when appropriate.

Right of deletion.

The owner of the personal data has the right to have Metropolitan Touring C.A. delete his/her personal data when:

The treatment does not comply with the principles established in this law;
The treatment is not necessary or relevant for the fulfillment of the purpose;
The personal data have fulfilled the purpose for which they were collected or processed;
The period for which personal data is to be retained has expired;
The treatment affects fundamental rights or individual freedoms;
Revoke the consent given or indicate that it has not been given for one or more specific purposes, without the need for any justification; or,
There is a legal obligation.

However, this right is not unlimited, so it may be feasible not to proceed with the deletion when the treatment is necessary for the exercise of freedom of expression and information, for compliance with a legal obligation, for the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred on the controller, for reasons of public interest, in the area of public health, for archiving purposes of public interest, scientific or historical research purposes or statistical purposes, or for the formulation, exercise or defense of claims.

Metropolitan Touring C.A. will be obliged to block the data when it proceeds to its rectification or elimination. The blocking of the data consists of the identification and reservation of the same, adopting technical and organizational measures, to prevent its treatment, including its visualization, except for the provision of the data to the data protection authorities, for the enforcement of possible responsibilities derived from the treatment and only for the period of prescription of the same.

Right to object.

The owner of the personal data has the right to oppose or refuse Metropolitan Touring C.A. to process personal data in the following cases:

The fundamental rights and freedoms of third parties are not affected, the law permits this and it is not public information, information of public interest or information whose processing is ordered by law.
Where personal data is processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her, including profiling; in which case the personal data will no longer be processed for such purposes.
When your consent is not necessary for the processing as a result of the existence of a legitimate interest, as provided for in article 7 of the Organic Law on Personal Data Protection, and it is justified by a specific personal situation of the owner, provided that a law does not provide otherwise.

Metropolitan Touring C.A. will stop processing your personal data in these cases, unless we prove legitimate and compelling reasons for the processing to prevail over the interests, rights and freedoms, or for the formulation, exercise or defense of claims.

Right to portability.

The owner of the personal data has the right to receive from Metropolitan Touring C.A., his/her personal data in a compatible, updated, structured, common, interoperable and machine-readable format, preserving its characteristics; or to transmit them to other controllers.

The owner may request that Metropolitan Touring C.A. transfer or communicate his/her personal data to another data controller as soon as technically possible. If this is possible, Metropolitan Touring C.A. will proceed to delete it, unless the owner orders its conservation.

The controller who has received the information will assume the responsibilities contemplated in this Law. For the right to data portability to apply, at least one of the following conditions must occur:

1) The data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes. The transfer or communication will be made between those responsible for the processing of personal data when the operation is technically possible; otherwise the data must be transmitted directly to the data subject.

2) That the treatment is carried out by automated means;

3) That it is a relevant volume of personal data, according to the parameters defined in the regulations of this law; or,

4) That the processing is necessary for the fulfillment of obligations and the exercise of rights of the person responsible for or in charge of processing personal data, or of the owner in the field of labor law and social security.

This right will not apply when it concerns information inferred, derived, created, generated or obtained from the analysis or treatment carried out by Metropolitan Touring C.A., based on the personal data provided by the owner, as is the case of personal data that has been subjected to a process of personalization, recommendation, categorization or creation of profiles.

For the transmission of data, when feasible, it will be done in XML format, Excel or any other electronic format and channel commonly accepted by the interlocutor designated by the recipient entity or data controller.

Right to suspension of processing.

The owner of the personal data has the right to receive from Metropolitan Touring C.A., the suspension of the processing of the data, when any of the following conditions are met:

1) When the data subject contests the accuracy of the personal data, while the data controller verifies the accuracy of the same;

2) The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

3) The controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; and,

4) When the interested party has opposed the treatment under article 31 of this law, while verifying whether the legitimate reasons of the controller prevail over those of the interested party.

Right not to be subject to a decision based solely or partially on automated assessments.

The owner of the personal data has the right not to be subject to a decision based solely or partially on assessments that are the product of automated processes, including profiling, which produce legal effects on him or her or which violate his or her fundamental rights and freedoms, for which he or she may:

Request a reasoned explanation of the decision made by Metropolitan Touring C.A., or the person in charge of processing personal data;
Submit comments;
Request the evaluation criteria for the automated program; or,
Request Metropolitan Touring C.A., about the types of data used and the source from which they have been used and the source from which they have been obtained.
Challenge the decision before Metropolitan Touring C.A., or the data controller.

This right will not apply when:

The decision is necessary for the conclusion or execution of a contract between the owner and Metropolitan Touring C.A., or the person in charge of processing personal data;
It is authorized by applicable regulations, court order, resolution or reasoned mandate of a competent technical authority, for which appropriate measures must be established to safeguard the fundamental rights and freedoms of the holder; or,
It is based on the explicit consent of the owner.
The decision does not entail serious impacts or verifiable risks for the holder.

Metropolitan Touring C.A. will make available to the holders a form so that they can exercise the rights established in this policy, and raise any type of suggestion, doubt or complaint, with reference to the data and treatments that Metropolitan Touring C.A. carries out. The holder can access the form established and made available on the website of Metropolitan Touring C.A.

Metropolitan Touring C.A. reserves the right to continue processing the owner’s personal data, and therefore may not exercise the rights of rectification, updating, deletion, opposition, cancellation and portability in the following cases:

If the applicant is not the owner of the personal data or his/her legal representative is not duly accredited;
When the data is necessary for compliance with a legal or contractual obligation;
When the data is necessary for compliance with a court order, resolution or reasoned mandate of a competent public authority;
When the data is necessary for the formulation, exercise or defense of claims or appeals;
When it may cause harm to the rights or affect the legitimate interests of third parties and this is proven by the person responsible for the database at the time of responding to the owner’s request to exercise the respective right;
When judicial or administrative proceedings in progress, duly notified, may be hindered;
When the data is necessary to exercise the right to freedom of expression and opinion;
When the data is necessary to protect the vital interest of the interested party or another natural person;
In cases where the public interest is involved, subject to compliance with the international human rights standards applicable to the matter, compliance with the principles of this law and the criteria of legality, proportionality and necessity;
In the processing of personal data that is necessary for the archiving of information that constitutes State property, scientific, historical or statistical research.

6. DATA PROCESSED, TREATMENTS AND PURPOSES

6.1 OPENNESS AND LOYALTY

SOURCES OF OBTAINING:

Passenger
Family / Friends
Corporate company (Corporate Segment)
Company websites
Public databases
Chamber of Commerce Bases
Social networks
Corporate Enterprise Database (Corporate Segment)
Responsible for company travel

PURPOSE OF THE TREATMENT	Manage customer loyalty plans, store airline portal access information, manage credit cards and redeem benefits
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number, Work Activity/Position.
PURPOSE OF THE TREATMENT	Contact the owner/prospect to offer travel agency services
DATA OWNER	Potential Client
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Telephone Number, Work Activity / Position
PURPOSE OF THE TREATMENT	Creating the corporate client profile in the Orion system
DATA OWNER	Legal representative of the Client, Responsible for ticket reservation
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collecting
DATA PROCESSED	Email, Date of Birth, First and Last Names, Identification Number, ID Card/Passport), Work Activity/Position
PURPOSE OF THE TREATMENT	Creating a corporate client profile for the use of OBT (Sirius)
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collecting
DATA PROCESSED	Email, Date of Birth, Nationality, First and Last Name, Identification Number (ID/Passport), Telephone Number, Disability Percentage, Type of Disability, Work Activity/Position, Gender
PURPOSE OF THE TREATMENT	Sending and analyzing satisfaction surveys
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Names

PURPOSE OF THE TREATMENT	Evaluate the feasibility of granting credit to potential clients
DATA OWNER	Responsible for payment
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Names and Surnames, Work Activity / Position
PURPOSE OF THE TREATMENT	Collection and dissemination of customer testimonials
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Names and Surnames, Work Activity / Position, Photograph
PURPOSE OF THE TREATMENT	Collect data from key contacts to make follow-up calls on the service provided
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Telephone Number, Work Activity / Position
PURPOSE OF THE TREATMENT	Transfer of information for participation in tenders and/or customer qualifications
DATA OWNER	Corporate Client Representative
TREATMENTS TO BE PERFORMED	Obtaining / Collecting, Transferring
DATA PROCESSED	Email, First and Last Name, Telephone Number, Work Activity / Position

6.2 VISA ADVICE

SOURCES OF OBTAINING:

Applicant
Applicant Assistants
Family
Family Assistants
National authority pages
International Criminal Police Organizations Pages
Consular entity (passport only)
Company

PURPOSE OF THE TREATMENT	Advice and mediation for obtaining permission for minors to leave the country
DATA OWNER	Travel Companion, Minor, Parents of the Minor, Travel Companion
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Copy of Identification Document (ID/Passport), Copy of Voting Card, Copy of Marriage Certificate, Copy of Birth Certificate, Address, Marital Status, First and Last Names, Identification Number (ID/Passport), Telephone Number, Relationship, City in which you will stay the longest, Destination Country, Airline Reservation, Hotel or Tour Reservation, Length of Stay in Destination Country
PURPOSE OF THE TREATMENT	Advice, assistance in the organization and collection of documents for obtaining tourist visas with or without representation of a consulate in Ecuador
DATA OWNER	Visa Applicant, Host, Resident, First Degree Relatives of the Visa Applicant, Spouse of the Applicant and Ex-spouse of the Applicant, Guarantor
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Career/instruction, Start and end date of studies, Name of the institution where you studied, Copy of identification document (ID/Passport), Copy of voting ballot, Copy of marriage certificate, Email, Address, Marital status, Date of marriage, Date of birth, First and last names, Identification number (ID/Passport), Telephone number, Relationship, Passport, Information on drug use, Information on whether you have any mental or physical disorder, Information on whether you have diseases significant to public health, Work activity / Position, Work certificate, Military service information, Information on whether you belong to any charitable organization, Name of the company where you work, City in which you will stay the longest, Copy of previously granted visas, Immigration history, Residence information for the last 5 years, Information on previous trips to the destination country and others, Information on requested and denied visas, Information on deportations, Destination country, Air reservation, Reservation of hotel or tour, Length of stay in destination country, Articles of incorporation in companies in which you have a stake, IESS retirement certificate and pension payment roles, Bank certificates, Investment certificates or accumulation policies, Copy of VAT and Income Tax returns, Credit card statement, Bank statements, Car registration, Property tax payment record, Salary / Monthly income, Photograph, Criminal record certificate (only for adults), Immigration status, Information on insurgent groups, Information on involvement or links to crimes (money laundering, human trafficking, terrorism, illegal activities, crimes against humanity, etc.)
PURPOSE OF THE TREATMENT	Assistance in paying fees and consular services online
DATA OWNER	Person to be billed, Visa applicant, Person responsible for payment
TREATMENTS TO BE PERFORMED	Obtaining / Collecting, Transferring
DATA PROCESSED	Postal Code, Email, Address, First and Last Names, Identification Number (ID/Passport), Country of Residence

PURPOSE OF THE TREATMENT	Assistance in making appointments for consular interviews to obtain tourist visas
DATA OWNER	Visa applicant
TREATMENTS TO BE PERFORMED	Storage/Recording, Query/Display, Extraction, Obtaining/Collecting, Transfer
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, Address, Marital Status, Date of Birth, Nationality, First and Last Names, Identification Number (ID/Passport), Telephone Number, Passport
PURPOSE OF THE TREATMENT	Closing and billing for visa advice
DATA OWNER	Visa Applicant, Person/Company to be Invoiced
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number
PURPOSE OF THE TREATMENT	Reception / Collection and delivery of passport holders
DATA OWNER	Person who takes the applicant’s passport, Visa applicant
TREATMENTS TO BE PERFORMED	Obtaining / Collecting
DATA PROCESSED	Copy of Identification Document (ID/Passport), Names and Surnames, Identification Number (ID/Passport), Passport
PURPOSE OF THE TREATMENT	Receiving visa advice request
DATA OWNER	Visa applicant
TREATMENTS TO BE PERFORMED	Query / View, Use / Use
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, First and Last Names, Telephone Number, Travel Dates, Destination Country

6.3 COORDINATION OF MEDICAL EVENTS AND EVENT ORGANIZATION

FUENTES DE OBTENCIÓN:

Conference/event attendee
Assistants to the owner
Company
Family / Friends
Organizing body of the congress/event
Social networks
Referrals
Senescyt

PURPOSE OF THE TREATMENT	Accompaniment to events / congresses / land services
DATA OWNER	Conference/Event Assistant, Event/Congress Companion
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Transfer, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Food Restrictions
PURPOSE OF THE TREATMENT	Offer, quote and formalization of pre-established event / congress / land service packages
DATA OWNER	Conference/event attendee
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Telephone Number
PURPOSE OF THE TREATMENT	Downloading/using the MetroEvents APP
DATA OWNER	Conference/event attendee
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Utilization / Use, Transfer
DATA PROCESSED	Email, Photos, Names and Surnames, Telephone Number, Identification Number (ID/Passport), Videos
PURPOSE OF THE TREATMENT	Gathering information from those involved, executing and confirming events / congresses / ground services
DATA OWNER	Conference/Event Attendant, Conference/Event Companion, Conference/Event Attendant Emergency Contact, Payment Responsible
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use, Extraction
DATA PROCESSED	Allergies and/or special conditions, Medical specialty information, Copy of identification document (ID/Passport), Email, Address, Date of issue and expiration of the Passport, Date of birth, Nationality, First and last names, Frequent Flyer number, Identification number (ID/Passport), Telephone number, Country of residence, Copy of Disability Card, Food restrictions, Associations to which you belong, Address of the company where you work, Name of the company where you work, Username and password of the association portal, Information on current visas, Photograph, Gender, Seat preference, Food preference, Travel preference, Blood type
PURPOSE OF THE TREATMENT	Closing and billing for events / conferences / land services
DATA OWNER	Conference/event attendee, Conference/event companion, Payment officer
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Transfer, Utilization / Use, Obtaining / Collection
DATA PROCESSED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Associations to which you belong, Username and password for the association’s portal

6.4 ADMINISTRATIVE MANAGEMENT

SOURCES OF OBTAINING:

Customer
Legal Representative
Spouse of the Legal Representative

PURPOSE OF THE TREATMENT	Sending parcels by courier Sending and receiving messages from Metropolitan Touring C.A.
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Telephone Number
PURPOSE OF THE TREATMENT	Generation of Dashboards for non-payroll processes for decision making
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage/Recording, Classification, Query/Display
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Application and renewal of Metropolitan Touring C.A. insurance policies
DATA OWNER	Spouse of the Legal Representative of Metropolitan Touring C.A.
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Transfer
DATA PROCESSED	Copy of identification document (ID/Passport)

6.5 FINANCIAL MANAGEMENT

SOURCES OF OBTAINING:

Client (natural person)
Third party related to the owner
Financial institution
Beneficiary

PURPOSE OF THE TREATMENT	Physical voucher file and passive file
DATA OWNER	Client, Beneficiary of payment
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, Address, First and Last Names, Identification Number (ID/Passport), Telephone Number, Consumption Amount, Bank Account Number, Type of Bank Account
PURPOSE OF THE TREATMENT	Customer consumption database query to generate credit card settlements
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Consumption Amount
PURPOSE OF THE TREATMENT	Follow up on electronic and/or physical vouchers with updates with Metropolitan Touring C.A. code
DATA OWNER	Client, Beneficiary of payment
TREATMENTS TO BE PERFORMED	Classification, Consultation / Display, Utilization / Use
DATA PROCESSED	First and last names
PURPOSE OF THE TREATMENT	Settlement of tickets in cash BSP
DATA OWNER	Client, Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport/RUC)
PURPOSE OF THE TREATMENT	Process customer refund requests
DATA OWNER	Client, Beneficiary of payment
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence, Name of Banking Institution, Bank Account Number, Type of Bank Account
PURPOSE OF THE TREATMENT	Transfer of customer identification documents for application of discounts
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Transfer
DATA PROCESSED	Copy of Identification Document (ID/Passport), Copy of Birth Certificate, Copy of Disability Card
PURPOSE OF THE TREATMENT	Transfer of information for external audit of financial statements
DATA OWNER	Client, Beneficiary of payment
TREATMENTS TO BE PERFORMED	Transfer
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Validation of payments made to airlines using credit card payment method (BSP)
DATA OWNER	Customer, Passenger, Payer
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Transfer, Utilization / Use
DATA PROCESSED	First and last names

6.6 MARKETING

SOURCES OF OBTAINING:

Digital channels
Passenger
Potential Client
Customer
Passerby

PURPOSE OF THE TREATMENT	Analyze information resulting from interaction with advertising and analysis of the interests of the owner
DATA OWNER	Passenger, Potential Client, Customer
TREATMENTS TO BE PERFORMED	Classification, Consultation / Display, Utilization / Use
DATA PROCESSED	City of Residence, Email, Age, First and Last Names, Telephone Number, Country of Residence, Gender, Interests, Likes (activities, etc.)

PURPOSE OF THE TREATMENT	Sending information about promotions, offers, new/modified policies
DATA OWNER	Passenger, Potential Client, Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Obtaining / Collection, Utilization / Use
DATA PROCESSED	City of Residence, Email, First and Last Names, Phone Number, Travel Dates
PURPOSE OF THE TREATMENT	Sending promotions and advertisements through digital channels (not to children and adolescents)
DATA OWNER	Passenger, Potential Client, Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Obtaining / Collection, Utilization / Use
DATA PROCESSED	City of Residence, Email, First and Last Name, Telephone Number
PURPOSE OF THE TREATMENT	Generate advertising and promotions through digital channels aimed at groups with similar interests
DATA OWNER	Passenger, Potential Client, Customer
TREATMENTS TO BE PERFORMED	Classification, Consultation / Display, Utilization / Use
DATA PROCESSED	City of Residence, Email, Age, First and Last Names, Telephone Number, Country of Residence, Gender, Interests, Likes (activities, etc.)
PURPOSE OF THE TREATMENT	Generate a database
DATA OWNER	Passenger, Potential Client, Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Obtaining / Collection, Utilization / Use
DATA PROCESSED	City of Residence, Email, First and Last Names, Phone Number, Travel Dates
PURPOSE OF THE TREATMENT	Promotion of the Metropolitan Touring C.A. brand
DATA OWNER	Customer, Passerby
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Extraction, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Photos, Videos, Audios

6.7 AIR TICKETS SALES

SOURCES OF OBTAINING:

Passenger
Family / Friends
Corporate company (Corporate Segment)
Corporate Enterprise Database (Corporate Segment)
Travel Management Tools (Corporate Segment)
Passenger Assistants
Company

PURPOSE OF THE TREATMENT	Advice and recommendations according to the travel destination
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Obtaining / Collecting, Utilization / Use
DATA PROCESSED	Date of Issue, Passport Expiration, Nationality
PURPOSE OF THE TREATMENT	Advising customers and providing ease to passengers when issuing airline tickets for a comfortable and satisfactory trip
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Obtaining / Collecting, Transferring
DATA PROCESSED	Height, Weight
PURPOSE OF THE TREATMENT	Redeeming miles using the corresponding form
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Email, Date of Birth, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence
PURPOSE OF THE TREATMENT	Closing and billing of ticket sales
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number
PURPOSE OF THE TREATMENT	Confirmation of all services with wholesalers, operators and airlines
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Copy of Identification Document (ID/Passport), Copy of Disability Card
PURPOSE OF THE TREATMENT	Issuance of airline tickets for the USA and certain European countries
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Nationality, Country of Residence, Gender (Europe and USA)
PURPOSE OF THE TREATMENT	Generate boarding passes
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Email, Date of Birth, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence, Destination Address
PURPOSE OF THE TREATMENT	Frequent traveler profile survey
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Copy of Identification Document (ID/Passport), Passport Issue and Expiration Date, Nationality, Frequent Flyer Number, Copy of Disability Card, Gender (Europe and USA), Seat Preference, Food Preference, Travel Preference
PURPOSE OF THE TREATMENT	To make valid the client’s own benefits with the supplier in the sale of airline tickets
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Frequent Flyer Number, Seat Preference, Meal Preference, Travel Preference
PURPOSE OF THE TREATMENT	Benchmarking for advertising campaigns
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Obtaining / Collecting, Utilization / Use
DATA PROCESSED	Date of Issue Passport Expiration, Nationality
PURPOSE OF THE TREATMENT	Have the minimum information of the holder, required by the airlines for the issuance of tickets
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Country of Residence, Copy of Disability Card
PURPOSE OF THE TREATMENT	Verification of all services with airlines
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Email, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Country of Residence

6.8 ALL PROCESSES

SOURCES OF OBTAINING:

Customer
Passerby

PURPOSE OF THE TREATMENT	Video capture and storage to provide security and monitoring to Metropolitan Touring C.A. facilities.
DATA OWNER	Customer, Passerby
TREATMENTS TO BE PERFORMED	Storage and Recording, Query/View, Deletion, Obtaining/Collecting
DATA PROCESSED	Surveillance videos
PURPOSE OF THE TREATMENT	Payment for advice on obtaining visas, events/conferences/land services, airline tickets, travel insurance, travel assistance, other processes
DATA OWNER	Responsible for payment
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	First and last names
PURPOSE OF THE TREATMENT	Signing contracts with third parties
DATA OWNER	Counterpart
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Copy of Identification Document (ID/Passport), First and Last Names, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Consent for processing of personal data of the owner
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number
PURPOSE OF THE TREATMENT	Exercise of the rights of the organic law on the protection of personal data by the owner
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, Address, First and Last Names, Identification Number (ID/Passport).

6.9 OTHER PROCESSES

SOURCES OF OBTAINING:

Passenger
Customer

PURPOSE OF THE TREATMENT	Advice on vacation and/or business trips in complementary services such as hotels, city tours at the destination, tourist attractions (cruises, amusement parks, etc.) Personalized assistance for national and international departures, in the VIP lounge of Quito and Guayaquil airports
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Email, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Country of Residence
PURPOSE OF THE TREATMENT	Car rental advice Coordination of in/out transfers at national or international destination
DATA OWNER	Passenger
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Copy of valid driver’s license, Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence
PURPOSE OF THE TREATMENT	Launch marketing and communication campaigns for customers focused on inspiring them to continue traveling with third-party benefits through Metropolitan Touring
DATA OWNER	Customer
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Transfer
DATA PROCESSED	City of Residence, Postal Code, Email, Address, State, First and Last Name, Name of the company where you work, Identification Number (ID/Passport), Country of Residence

6.10 TRAVEL INSURANCE SALE

SOURCES OF OBTAINING:

Customer
Passerby
Counterpart

PURPOSE OF THE TREATMENT	Travel insurance policy quote for Úsame
DATA OWNER	Insured person
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Destination, Trip end date, Trip start date
PURPOSE OF THE TREATMENT	Creating a request and issuing a travel insurance policy for Seguros Equinoccial
DATA OWNER	Insured person
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, Age, Marital Status, Date of Birth, First and Last Name, Identification Number (ID/Passport), Telephone Number, Destination, End of Trip Date, Start of Trip Date, Gender
PURPOSE OF THE TREATMENT	Creating a request and issuing a travel insurance policy for Úsame
DATA OWNER	Insured person, Insured emergency contact
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, Age, Date of Birth, Nationality, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence
PURPOSE OF THE TREATMENT	Travel insurance purchase billing
DATA OWNER	Person to be billed
TREATMENTS TO BE PERFORMED	Consultation / Visualization, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number

7. TRANSFER OF PERSONAL DATA

Since Metropolitan Touring C.A.’s business line is intermediation, it is not feasible to explicitly specify to whom the data processed by the owner will be sent, since the decision of which provider to go with depends entirely on the owner and can vary greatly depending on the case, so in this case the type of company/embassy to which the data is transferred will be generally cited, which will always be selected with the authorization of the owner.

OPENNESS AND LOYALTY
PURPOSE OF THE TREATMENT	Transfer of information for participation in tenders and/or customer qualifications
DATA OWNER	Corporate Client Representative
DATA TRANSFERRED	Email, First and Last Name, Telephone Number, Work Activity / Position
RECIPIENT OF PERSONAL DATA	Prospective and/or Current Clients Metropolitan Touring C.A.
COUNTRY	Ecuador, country of tax residence of the prospective and/or current client.

VISA ADVICE
PURPOSE OF THE TREATMENT	Advice and mediation for obtaining permission for minors to leave the country/td>
DATA OWNER	Travel Companion, Minor, Parents of the Minor, Travel Companion
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), Copy of Voting Card, Copy of Marriage Certificate, Copy of Birth Certificate, Address, Marital Status, First and Last Names, Identification Number (ID/Passport), Telephone Number, Relationship, City in which you will stay the longest, Destination Country, Airline Reservation, Hotel or Tour Reservation, Length of Stay in Destination Country
RECIPIENT OF PERSONAL DATA	Embassy or Consulate where the visa is being requested
COUNTRY	Country for which the visa is being requested
PURPOSE OF THE TREATMENT	Advice, assistance in the organization and collection of documents for obtaining tourist visas with or without representation of a consulate in Ecuador
DATA OWNER	Visa Applicant, Host, Resident, First Degree Relatives of Visa Applicant, Spouse of Applicant, Ex-Spouse of Applicant, Guarantor
DATA TRANSFERRED	Career/instruction, Start and end date of studies, Name of the institution where you studied, Copy of identification document (ID/Passport), Copy of voting ballot, Copy of marriage certificate, Email, Address, Marital status, Date of marriage, Date of birth, First and last names, Identification number (ID/Passport), Telephone number, Relationship, Passport, Information on drug use, Information on whether you have any mental or physical disorder, Information on whether you have diseases significant to public health, Work activity / Position, Work certificate, Military service information, Information on whether you belong to any charitable organization, Name of the company where you work, City in which you will stay the longest, Copy of previously granted visas, Immigration history, Residence information for the last 5 years, Information on previous trips to the destination country and others, Information on requested and denied visas, Information on deportations, Destination country, Air reservation, Reservation of hotel or tour, Length of stay in destination country, Articles of incorporation in companies in which you have a stake, IESS retirement certificate and pension payment roles, Bank certificates, Investment certificates or accumulation policies, Copy of VAT and Income Tax returns, Credit card statement, Bank statements, Car registration, Property tax payment record, Salary / Monthly income, Photograph, Criminal record certificate (only for adults), Immigration status, Information on insurgent groups, Information on involvement or links to crimes (money laundering, human trafficking, terrorism, illegal activities, crimes against humanity, etc.)
RECIPIENT OF PERSONAL DATA	Embassy or Consulate where the visa is being requested
COUNTRY	Country for which the visa is being requested
PURPOSE OF THE TREATMENT	Assistance in paying fees and consular services online
DATA OWNER	Person to be billed, Visa applicant, Person responsible for payment
DATA TRANSFERRED	Postal Code, Email, Address, First and Last Names, Identification Number (ID/Passport), Country of Residence
RECIPIENT OF PERSONAL DATA	Embassy or Consulate where the visa is being requested, Medianet, Credimatic, Interdin, Banco de Guayaquil (Amex), Banco del Pacífico (Pacificard), Banco Bolivariano (Alia)
COUNTRY	Country for which the visa is being requested, Country of the bank acquirer (Ecuador)
cPURPOSE OF THE TREATMENT	Assistance in making appointments for consular interviews to obtain tourist visas
DATA OWNER	Visa applicant
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), Email, Address, Marital Status, Date of Birth, Nationality, First and Last Names, Identification Number (ID/Passport), Telephone Number, Passport
RECIPIENT OF PERSONAL DATA	Embassy or Consulate where the visa is being requested
COUNTRY	Country for which the visa is being requested
PURPOSE OF THE TREATMENT	Closing and billing for visa advice
DATA OWNER	Visa Applicant, Person/Company to be Invoiced
DATA TRANSFERRED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number
RECIPIENT OF PERSONAL DATA	Embassy or Consulate where the visa is being requested
COUNTRY	Country for which the visa is being requested

COORDINATION OF MEDICAL EVENTS AND EVENT ORGANIZATION
PURPOSE OF THE TREATMENT	Accompaniment to events / congresses / land services
DATA OWNER	Conference/Event Assistant, Event/Congress Companion
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Food Restrictions
RECIPIENT OF PERSONAL DATA	Hotel service company, ground/air transportation service, food, entertainment service that is related to the event/congress to participate in
COUNTRY	Country where the event/congress will be held
PURPOSE OF THE TREATMENT	Download/use of the MetroEvents APP
DATA OWNER	Conference/event attendee
DATA TRANSFERRED	Email, Photos, Names and Surnames, Telephone Number, Identification Number (ID/Passport), Videos
RECIPIENT OF PERSONAL DATA	MetroEvents APP service company
COUNTRY	Country where the MetroEvents APP database is hosted
PURPOSE OF THE TREATMENT	Gathering information from those involved, executing and confirming events/congresses/ground services
DATA OWNER	Conference/Event Attendant, Conference/Event Companion, Conference/Event Attendant Emergency Contact, Payment Responsible
DATA TRANSFERRED	Medical specialty data, Copy of identification document (ID/Passport), Email, Address, Date of issue and expiration of the Passport, Date of birth, Nationality, First and last names, Frequent Flyer number, Identification number (ID/Passport), Telephone number, Country of residence, Copy of Disability Card, Food restrictions, Associations to which you belong, Address of the company where you work, Name of the company where you work, Username and password of the association portal, Information on current visas, Photograph, Gender, Seat preference, Food preference, Travel preference
RECIPIENT OF PERSONAL DATA	Hotel service company, land/air transportation service, food, entertainment service that is related to the event/congress to participate, Medianet, Credimatic, Interdin, Banco de Guayaquil (Amex), Banco del Pacífico (Pacificard), Banco Bolivariano (Alia)
COUNTRY	Country where the event/congress will be held, Country of the bank acquirer (Ecuador)
PURPOSE OF THE TREATMENT	Closing and billing for events / conferences / land services
DATA OWNER	Conference/event attendee, Conference/event companion, Payment officer
DATA TRANSFERRED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Associations to which you belong, Username and password for the association’s portal
RECIPIENT OF PERSONAL DATA	Hotel service company, land/air transportation service, food, entertainment service that is related to the event/congress to participate, Medianet, Credimatic, Interdin, Banco de Guayaquil (Amex), Banco del Pacífico (Pacificard), Banco Bolivariano (Alia)
COUNTRY	Country where the event/congress will be held, Country of the bank acquirer (Ecuador)

ADMINISTRATIVE MANAGEMENT
PURPOSE OF THE TREATMENT	Application and renewal of Metropolitan Touring C.A. insurance policies
DATA OWNER	Spouse of the Legal Representative of Metropolitan Touring C.A.
DATA TRANSFERRED	Copy of identification document (ID/Passport)
RECIPIENT OF PERSONAL DATA	Equinoccial Insurance S.A, Chubb Insurance Ecuador S.A.
COUNTRY	Ecuador, United States
PURPOSE OF THE TREATMENT	Sending parcels by courier Sending and receiving messages from Metropolitan Touring C.A.
DATA OWNER	Customer
DATA TRANSFERRED	Email, Address, First and Last Name, Telephone Number
RECIPIENT OF PERSONAL DATA	DHL Express S.A.
COUNTRY	Ecuador

FINANCIAL MANAGEMENT
PURPOSE OF THE TREATMENT	Process customer refund requests
DATA OWNER	Customer
DATA TRANSFERRED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence, Name of Banking Institution, Bank Account Number, Type of Bank Account
RECIPIENT OF PERSONAL DATA	Current clients Metropolitan Touring C.A.
COUNTRY	Ecuador, country of tax residence of the current client.
PURPOSE OF THE TREATMENT	Transfer of customer identification documents for application of discounts to airlines for senior citizens, infants and the disabled
DATA OWNER	Customer
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), Copy of Birth Certificate, Copy of Disability Card
RECIPIENT OF PERSONAL DATA	All Airlines
COUNTRY	Country of tax residence of airlines.
PURPOSE OF THE TREATMENT	Transfer of information for external audit of financial statements
DATA OWNER	Client, Beneficiary of payment
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport/RUC)
RECIPIENT OF PERSONAL DATA	Deloitte & Touche Ecuador Cia. Ltda
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Validation of payments made to airlines using credit card payment method (BSP)
DATA OWNER	Customer, Passenger, Payer
DATA TRANSFERRED	First and last names
RECIPIENT OF PERSONAL DATA	Airlines
COUNTRY	Country of tax residence airlines

OTHER PROCESSES
PURPOSE OF THE TREATMENT	Advice on vacation and/or business trips in complementary services such as hotels, city tours at the destination, tourist attractions (cruises, amusement parks, etc.) Personalized assistance for national and international departures, in the VIP lounge of Quito and Guayaquil airports
DATA OWNER	Passenger
DATA TRANSFERRED	Email, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Country of Residence
RECIPIENT OF PERSONAL DATA	Airlines representing VIP lounges, hotels, city tours that the passenger chooses
COUNTRY	Ecuador, country where it is directed
PURPOSE OF THE TREATMENT	Car rental advice Coordination of in/out transfers at national or international destination
DATA OWNER	Passenger
DATA TRANSFERRED	Copy of valid driver’s license, Email, Address, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Country of Residence
RECIPIENT OF PERSONAL DATA	Car rental agency chosen by the passenger, Representative of commercial tourism transport
COUNTRY	Ecuador, country where it is directed

PURPOSE OF THE TREATMENT	Launch marketing and communication campaigns for customers focused on inspiring them to continue traveling with third-party benefits through Metropolitan Touring
DATA OWNER	Customer
DATA TRANSFERRED	City of Residence, Postal Code, Email, Address, State, First and Last Name, Name of the company where you work, Identification Number (ID/Passport), Country of Residence
RECIPIENT OF PERSONAL DATA	Virtuoso
COUNTRY	Supplier’s country of tax residence

ALL PROCESSES
PURPOSE OF THE TREATMENT	Signing contracts with third parties
DATA OWNER	Counterpart
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), First and Last Names, Identification Number (ID/Passport)
RECIPIENT OF PERSONAL DATA	Lexvalor Legal Advisory S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Payment for advice on obtaining visas, events/conferences/land services, airline tickets, travel insurance, travel assistance, other processes
DATA OWNER	Passenger, Responsible for payment
DATA TRANSFERRED	First and last names
RECIPIENT OF PERSONAL DATA	Medianet, Credimatic, Interdin, Banco de Guayaquil(Amex), Banco del Pacífico(Pacificard), Banco Bolivariano(Alia), Nuvei/Paymentez
COUNTRY	Country of the bank acquirer (Ecuador)

TRAVEL INSURANCE SALE
PURPOSE OF THE TREATMENT	Travel insurance policy quote for Úsame
DATA OWNER	Insured person
DATA TRANSFERRED	Destination, Trip end date, Trip start date
RECIPIENT OF PERSONAL DATA	Usame-innovatech S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Creating a request and issuing a travel insurance policy for Seguros Equinoccial
DATA OWNER	Insured person
DATA TRANSFERRED	Email, Address, Age, Marital Status, Date of Birth, First and Last Name, Identification Number (ID/Passport), Telephone Number, Destination, End of Trip Date, Start of Trip Date, Gender
RECIPIENT OF PERSONAL DATA	Seguros Equinoccial S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Creating a request and issuing a travel insurance policy for Úsame
DATA OWNER	Insured person, Insured emergency contact
DATA TRANSFERRED	Email, Address, Age, Date of Birth, Nationality, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence
RECIPIENT OF PERSONAL DATA	Usame-innovatech S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Travel insurance purchase billing
DATA OWNER	Person to be billed
DATA TRANSFERRED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number
RECIPIENT OF PERSONAL DATA	Usame-innovatech S.A., Seguros Equinoccial S.A.
COUNTRY	Ecuador

AIR TICKETS SALES
PURPOSE OF THE TREATMENT	Advising customers and providing ease to passengers when issuing airline tickets for a comfortable and satisfactory trip
DATA OWNER	Passenger
DATA TRANSFERRED	Height, Weight
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	Redeeming miles using the corresponding form
DATA OWNER	Passenger
DATA TRANSFERRED	Email, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Country of Residence
DESTINATARIO DE LOS DATOS PERSONALES	Mayoristas, operadores y aerolíneas, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	Closing and billing of ticket sales
DATA OWNER	Passenger
DATA TRANSFERRED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	Confirmation of all services with wholesalers, operators and airlines
DATA OWNER	Passenger
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), Copy of Disability Card
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	Issuance of airline tickets for the USA and certain European countries
DATA OWNER	Passenger
DATA TRANSFERRED	Nationality, Country of Residence, Gender (Europe and USA)
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	Generate boarding passes
DATA OWNER	Passenger
DATA TRANSFERRED	Email, Date of Birth, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence, Destination Address
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	Frequent traveler profile survey
DATA OWNER	Passenger
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), Passport Issue and Expiration Date, Nationality, Frequent Flyer Number, Copy of Disability Card, Gender (Europe and USA), Seat Preference, Food Preference, Travel Preference
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	To make valid the client’s own benefits with the supplier in the sale of airline tickets
DATA OWNER	Passenger
DATA TRANSFERRED	Frequent Flyer Number, Seat Preference, Meal Preference, Travel Preference
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	Have the minimum information of the holder, required by the airlines for the issuance of tickets
DATA OWNER	Passenger
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), Email, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Country of Residence, Copy of Disability Card
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM
PURPOSE OF THE TREATMENT	Verification of all services with airlines
DATA OWNER	Passenger
DATA TRANSFERRED	Email, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Country of Residence
RECIPIENT OF PERSONAL DATA	Wholesalers, carriers and airlines, GDS Sabre, GDS KIU, TSPM, Concur, Getthere
COUNTRY	Tax residence country of wholesalers, operators and airlines, Tax residence country of GDS Sabre and Kiu, Tax residence country of obt concur, getthere, TSPM

8. CONSENT

Metropolitan Touring C.A. will receive explicit consent through:

In the case of in-person, telephone or virtual assistance, chat applications and/or email will be used to send the link where consent will be collected and the policy will be communicated.

Web attention: Through the Metropolitan Touring C.A. website, communicating the policy with a hyperlink on the same page where consent is collected.

Event log: If applicable, through a web form on the event’s privacy policy page at the time of registration, if there is no event website, a QR code will be scanned that will direct to the page where the organization’s privacy policy is located with a hyperlink on the same page where consent is collected.

Manual form: In the event that the person does not have the technological facility, Metropolitan Touring C.A. will present the policy with the support of the commercial advisor and will proceed to collect consent in a manual form that the owner will fill out.

When specific events and/or services offered by Metropolitan Touring C.A. are carried out, the hyperlink to the privacy policy will be sent along with the link where consent is collected.

9. STORAGE TIME AND WITHDRAWAL OF TREATMENT

Once the processing/contract has been completed, the data will be kept for the sole purpose of complying with the legal obligations required by Ecuadorian public entities and for the formulation, exercise or defense of claims, during the period of prescription of the actions derived from the Law.

The personal data processed will be kept as long as necessary to fulfill the processing purposes indicated in this document or as long as the Passenger and/or Applicant and/or Beneficiary and/or Client does not withdraw their consent.

If the owner wishes to exercise the right to deletion, the data will be permanently and securely rendered illegible or unrecognizable within the period established in the form for requests regarding personal data published on the Metropolitan Touring C.A. website.

10. PERSONAL DATA SECURITY

In order to protect the personal data of the client, Metropolitan Touring C.A. has an information security management system based on the ISO/IEC 27001:2022 standard, which considers the following controls among its main requirements:

Information access control, secure authentication, technical vulnerability management, configuration management, data masking, data leak prevention, information backup, network security control, application security from project conception and design, among others.

11. PRIVACY OF BOYS, GIRLS AND ADOLESCENTS

Metropolitan Touring C.A. will process data of minors as long as this processing respects the best interests of children and adolescents, ensures respect for their fundamental rights and is aligned with the provisions of the Code of Childhood and Adolescence.

Once the above requirements have been met, Metropolitan Touring C.A. will only process the personal data of children and adolescents when their legal representative has given their consent for the activities and services that Metropolitan Touring C.A. offers to its clients.

In accordance with the provisions of the Organic Law on the Protection of Personal Data in article 21, Metropolitan Touring C.A., in order to promote the progressive exercise of rights of adolescents between the ages of 15 and 18, will take as valid the consent given by them.

Metropolitan Touring C.A. will implement additional security measures such as encryption of the location where the data is located, pixelation of the face in the photo, restriction of access to the data to specific persons, non-dissemination of names, among others.

In the event that adolescents between the ages of 15 and 18 or the legal representative of children or adolescents wish to receive information, they may contact the personal data protection officer whose information can be found in the “ORGANIZATION CONTACTS” section.

In the event that adolescents between the ages of 15 and 18 or the legal representative of the children or adolescents wish to exercise their rights, Metropolitan Touring C.A. will make a form available to the holders so that they can exercise their rights or raise any type of suggestion, doubt or complaint, with reference to the data and treatments that Metropolitan Touring C.A. carries out. The holder can access the form established and made available on the Metropolitan Touring C.A. website.

In order to provide its service, Metropolitan Touring C.A. may transfer data collected from children or adolescents to third parties in order to manage the treatments and purposes defined in the section “DATA PROCESSED, PROCESSING AND PURPOSES”, this transfer will be carried out by obtaining the consent of the legal representative.

12. PRIVACY OF PEOPLE WITH DISABILITIES

Metropolitan Touring C.A. will process data of persons with disabilities as long as this processing respects their best interests and ensures respect for their fundamental rights.

Once the above requirements have been met, Metropolitan Touring C.A. will only process the personal data of persons with disabilities when they, their legal guardian and/or representative have given their consent for the activities and services that Metropolitan Touring C.A. offers to its clients.

Metropolitan Touring C.A. will implement additional security measures such as not disclosing the degree of disability, medical conditions and names, restricting access to data to specific persons, among others.

If the disabled person, his/her legal guardian and/or representative wishes to obtain information, he/she may contact the personal data protection officer whose information can be found in the “ORGANIZATION CONTACTS” section.

In the event that the disabled person, his/her agent and/or legal representative wishes to exercise his/her rights, Metropolitan Touring C.A. will make a form available to the holders so that they can exercise their rights or raise any type of suggestion, doubt or complaint, with reference to the data and processing carried out by Metropolitan Touring C.A. The holder can access the form established and made available on the Metropolitan Touring C.A. website.

In order to provide its service, Metropolitan Touring C.A. may transfer data collected from people with disabilities to third parties in order to manage the treatments and purposes defined in the section “DATA PROCESSED, PROCESSING AND PURPOSES”. This transfer will be carried out by obtaining the consent of the person with a disability, his/her agent and/or legal representative.

13. EXERCISE OF RIGHTS

To exercise the rights detailed in the policy or to make a claim regarding the processing of personal data, data owners must go to the footer of our website. https://metropolitantouring.com.ec “Exercise of your rights” option.

14. ORGANIZATION CONTACTS

To contact us you can do so at the following contacts:

14.1 CONTACT DETAILS OF THE PERSONAL DATA PROTECTION OFFICER

Address: Av. Amazonas N-014 y NNUU, Ed. La Previsora, Torre A, Piso 6, Ofic. 602.

Phone: (593-2) 392-2164; (593-9) 9 562-2011

Email: delegado.protecciondedatos@mtagencia.com

14.2 IDENTITY AND CONTACT INFORMATION OF THE ORGANIZATION

METROPOLITAN TOURING C.A – Parent Agency

Address: Av. Amazonas N-014 y NNUU, Ed. La Previsora, Torre A, Piso 6, Ofic. 602. Quito 170135

08h00 a 13:00 / 14h00 a 17h00

Phone: (593-2) 392-2164, (593-9) 9 353-1012

Ruc: 1790022838001

METROPOLITAN TOURING C.A – Megamaxi Agency

Address: Megamaxi, Av. 6 de Diciembre y Germán Alemán

10h00 a 19:00

Phone: (593-2) 245-7924, (593-9) 9 973-8240

Ruc: 1790022838001

METROPOLITAN TOURING C.A – Guayaquil Agency

Address: Parque Empresarial Colón, Torre Empresarial 4, Planta Baja, Local 1. 08h00 a 13:00 / 14h00 a 17h00

Phone: (593-4) 395-1738, (593-9) 9 973-0456

Ruc: 1790022838001

In addition, if you prefer, you can communicate directly with the Ecuadorian Personal Data Protection Authority.

For support with your queries and to obtain more information about Metropolitan Touring C.A., you can refer to the “We are Metropolitan Touring” or “Contact” sections on the website. https://metropolitantouring.com.ec

15. CHANGES TO THIS POLICY

Metropolitan Touring C.A., may update its Privacy Policy when:

The entities to which you transfer personal data change.
When Metropolitan Touring C.A. changes, increases or removes services that it makes available to the client.
When there are changes in national legislation.
If a processed data is created or removed, as well as the processing to be carried out.

In the event of such changes, the Company undertakes to notify the owner to obtain consent for this change or updated policy through the mechanisms proposed in this policy.

1. INTRODUCTION

1.1 BUSINESS REVIEW

At Metropolitan Touring C.A., we offer an excellent service to the traveler. To do this, we focus on creating a history full of good stories that exceed the expectations of our valued clients.

For this reason, we have been rated as one of the most respected companies in the Tourism sector.

We have earned this recognition thanks to the trust of our clients for the effort, respect and ethics in more than 70 years of work.

Advice on obtaining visas.
Advice on vacation and/or work trips in complementary services such as hotels, city tours in destinations, tourist attractions.
Coordination of medical events and organization of events.
Sale of Travel Insurance.
Sale of Air Tickets.

1.2 LEGAL BASIS AND LEGITIMATE INTEREST

The legal basis of our processing lies in a contractual relationship with the holders of personal data, for example, with our employees, clients, suppliers or allies.

Metropolitan Touring C.A. bases its treatment of personal data on the following legal instruments:

Article 7.1 of the LOPDP: “[b]y consent of the owner for the processing of their personal data, for one or more specific purposes”
Article 7.2 of the LOPDP: “[t]hat is carried out by the person responsible for the treatment in compliance with a legal obligation”;
Article 7.5 of the LOPDP: “[f]or the execution of pre-contractual measures at the request of the owner or for the fulfillment of contractual obligations pursued by the person responsible for the processing of personal data, in charge of the processing of personal data or by a legally authorized third party.”;
Article 7.6 of the LOPDP: “[t]o protect vital interests of the interested party or another natural person, such as their life, health or integrity”;
Article 7.7 of the LOPDP: “[f]or the processing of personal data contained in publicly accessible databases”; and
Article 7.8 of the LOPDP: “[t]o satisfy a legitimate interest of the data controller or a third party, provided that the interest or fundamental rights of the owners do not prevail under the provisions of this standard.”.
Commercial Code Art. 37.-“[e]The merchant or businessman must save and back up the documents and information related to the legal acts that he develops, whether these instruments are public or private, as well as the constant messages in emails that exist about them; The latter will be carried out and will have the effects provided for in the chapter dedicated to electronic commerce contained in this Code.”.
Regulations/Legal obligation: Art. 697 of the Commercial Code & Art 33 of the Organic Law on Protection of Personal Data.
Regulations/Legal Obligation: Articles 319 Companies Law.
Regulations/Legal obligation: Commercial Code Article 691.
Commercial Code Art. 200.- Regulation of sales, withholding and complementary receipts Articles 17 and 18.

2. SCOPE OF THIS POLICY

Metropolitan Touring C.A., hereinafter “METROPOLITAN TOURING” or the “Data Controller and/or Data Processor”), in compliance with the principles of legality, loyalty and transparency contained in the Organic Law on Personal Data Protection (hereinafter the “LOPDP”), makes this instrument available in order to carry out the processing of your personal data, and in order to guarantee the constitutional right to protection thereof.
This instrument applies to all processing of personal data of Clients or third parties with which Metropolitan Touring C.A., Matriz, Oficina Megamaxi and Oficina Agencia Guayaquil establish or maintain a relationship of offer or provision of services, excluding from this any entity that appears on behalf of the brand.

TYPE OF TREATMENT USED

In order to provide the service to clients or third parties of METROPOLITAN TOURING C.A. (hereinafter the “Owners”), It is necessary that the Data Controller and/or Data Processor process data, whether automatically or not (mixed processing), and obtain, collect, classify, store, record, use, extract, consult, view, or transfer, and in general, process the personal data of the owners, in accordance with what is permitted in the LOPDP.

The processing carried out by METROPOLITAN TOURING C.A. is considered to be “large-scale”, and the Data Controller and/or Data Processor has therefore taken all organisational, legal and technical measures to safeguard the confidentiality, integrity and availability of the data.

Depending on the service that METROPOLITAN TOURING C.A. provides to the Data Subjects, the Data Controller and/or Processor may process the following categories of data:

Identification and contact information.
Data on physical characteristics.
Biometric data.
Employment data.
Academic data.
Assets/financial data
Migration data.
Data on hobbies, entertainment and fun.
Data on gender, ideology, religious beliefs, philosophical and/or political beliefs.
Health data.
Data on ethnic or racial origin.

Both the types of treatment and the category of data are exemplary, so the types of treatment and the categories of data will be determined in each case, and depending on the service that the Holders acquire or access for each of the purposes established by METROPOLITAN TOURING C.A.

3. DEFINITIONS

For the purposes of the application of this Law, the following definitions are established:

Personal Data Protection Authority:

Anonymization:

The application of measures aimed at preventing the identification or re-identification of a natural person, without disproportionate efforts.

Database or file:

Consent:

Manifestation of free, specific, informed and unequivocal will, by which the owner of the personal data authorizes the person responsible for the processing of personal data to process the same.

Biometric data:

Genetic data:

Unique personal data related to inherited or acquired genetic characteristics of a natural person that provide unique information about the physiology or health of an individual.

Personal data:

Data that identifies or makes a natural person identifiable, directly or indirectly.

Personal credit data:

Data that integrates the economic behavior of natural persons, to analyze their financial capacity.

Health related data:

Personal data relating to an individual’s physical or mental health, including the provision of healthcare services, which reveal information about his or her health status.

Sensitive data:

Data Protection Officer:

Addressee:

Natural or legal person who has been provided with personal data.

Profiling:

Personal data processing manager:

Natural or legal person, public or private, public authority, or other body that alone or jointly with others processes personal data on behalf of and on behalf of a personal data controller.

Certifying Entity:

Entity recognized by the Personal Data Protection Authority, which may, on a non-exclusive basis, provide certifications regarding personal data protection.

Publicly accessible source:

Databases that can be consulted by anyone, whose access is public, unconditional and generalized.

Responsible for the processing of personal data:

Natural or legal person, public or private, public authority, or other body, which alone or jointly with others decides on the purpose and processing of personal data.

Personal data protection seals:

Pseudonymization:

Holder:

Natural person whose data is processed.

Transfer or communication:

Treatment:

Breach of personal data security:

Security incident that affects the confidentiality, availability or integrity of personal data.

4. SUMMARY OF DATA COLLECTED AND PROCESSED

Metropolitan Touring C.A., collects and processes the following personal data:

IDENTIFICATION AND CONTACT DATA

Email
First and last names
Telephone Number
Identification Number (ID/Passport)
Copy of identification document (ID/Passport)
Address
Country of Residence
First and last names
Identification Number (ID/Passport)

WORK DATA

Name of the company you work for

ASSETS/FINANCIAL DATA

Name of the Banking Institution
Bank account number
Type of Bank Account
Consumption amount

DATA ON PHYSICAL CHARACTERISTICS

Photos, Videos and Audios
Surveillance videos

5. RIGHTS OF THE OWNER

Right to information.

The owner of personal data has the right to be informed in accordance with the principles of loyalty and transparency by any means.

Right of access.

Right to rectification and updating.

Right of deletion.

The owner of the personal data has the right to have Metropolitan Touring C.A. delete his/her personal data when:

The treatment does not comply with the principles established in this law;
The treatment is not necessary or relevant for the fulfillment of the purpose;
The personal data have fulfilled the purpose for which they were collected or processed;
The period for which personal data is to be retained has expired;
The treatment affects fundamental rights or individual freedoms;
Revoke the consent given or indicate that it has not been given for one or more specific purposes, without the need for any justification; or,
There is a legal obligation.

Right to object.

The owner of the personal data has the right to oppose or refuse Metropolitan Touring C.A. to process personal data in the following cases:

The fundamental rights and freedoms of third parties are not affected, the law permits this and it is not public information, information of public interest or information whose processing is ordered by law.
Where personal data is processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her, including profiling; in which case the personal data will no longer be processed for such purposes.
When your consent is not necessary for the processing as a result of the existence of a legitimate interest, as provided for in article 7 of the Organic Law on Personal Data Protection, and it is justified by a specific personal situation of the owner, provided that a law does not provide otherwise.

Right to portability.

2) That the treatment is carried out by automated means;

3) That it is a relevant volume of personal data, according to the parameters defined in the regulations of this law; or,

Right to suspension of processing.

The owner of the personal data has the right to receive from Metropolitan Touring C.A., the suspension of the processing of the data, when any of the following conditions are met:

1) When the data subject contests the accuracy of the personal data, while the data controller verifies the accuracy of the same;

2) The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

3) The controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; and,

4) When the interested party has opposed the treatment under article 31 of this law, while verifying whether the legitimate reasons of the controller prevail over those of the interested party.

Right not to be subject to a decision based solely or partially on automated assessments.

Request a reasoned explanation of the decision made by Metropolitan Touring C.A., or the person in charge of processing personal data;
Submit comments;
Request the evaluation criteria for the automated program; or,
Request Metropolitan Touring C.A., about the types of data used and the source from which they have been used and the source from which they have been obtained.
Challenge the decision before Metropolitan Touring C.A., or the data controller.

This right will not apply when:

The decision is necessary for the conclusion or execution of a contract between the owner and Metropolitan Touring C.A., or the person in charge of processing personal data;
It is authorized by applicable regulations, court order, resolution or reasoned mandate of a competent technical authority, for which appropriate measures must be established to safeguard the fundamental rights and freedoms of the holder; or,
It is based on the explicit consent of the owner.
The decision does not entail serious impacts or verifiable risks for the holder.

If the applicant is not the owner of the personal data or his/her legal representative is not duly accredited;
When the data is necessary for compliance with a legal or contractual obligation;
When the data is necessary for compliance with a court order, resolution or reasoned mandate of a competent public authority;
When the data is necessary for the formulation, exercise or defense of claims or appeals;
When it may cause harm to the rights or affect the legitimate interests of third parties and this is proven by the person responsible for the database at the time of responding to the owner’s request to exercise the respective right;
When judicial or administrative proceedings in progress, duly notified, may be hindered;
When the data is necessary to exercise the right to freedom of expression and opinion;
When the data is necessary to protect the vital interest of the interested party or another natural person;
In cases where the public interest is involved, subject to compliance with the international human rights standards applicable to the matter, compliance with the principles of this law and the criteria of legality, proportionality and necessity;
In the processing of personal data that is necessary for the archiving of information that constitutes State property, scientific, historical or statistical research.

6. DATA PROCESSED, TREATMENTS AND PURPOSES

6.1 ADMINISTRATIVE MANAGEMENT

SOURCES OF OBTAINING:

Supplier (natural or legal person)
Supplier Staff

PURPOSE OF THE TREATMENT	Search and request for quotation from suppliers
DATA OWNER	Supplier
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Telephone Number
PURPOSE OF THE TREATMENT	Provide contractors access to the facilities of Metropolitan Touring C.A., for delivery of supplies, management of services provided, among others
DATA OWNER	Supplier Staff
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Name of the company where you work
PURPOSE OF THE TREATMENT	Identification and Authentication at the entrance and exit of cleaning staff to the facilities of Metropolitan Touring C.A.
DATA OWNER	Supplier Staff
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	First and last names, fingerprint
PURPOSE OF THE TREATMENT	Sending parcels by courier Sending and receiving messages from Metropolitan Touring C.A.
DATA OWNER	Supplier
TREATMENTS TO BE PERFORMED	Storage / Recording, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Telephone Number
PURPOSE OF THE TREATMENT	Generation of Dashboards for non-payroll processes for decision making
DATA OWNER	Supplier
TREATMENTS TO BE PERFORMED	Storage/Recording, Classification, Query/Display
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Supplier registration and purchase formalization
DATA OWNER	Supplier
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number, Name of Banking Institution, Bank Account Number, Type of Bank Account

6.2 FINANCIAL MANAGEMENT

SOURCES OF OBTAINING:

Supplier (natural or legal person)
Beneficiary
Third party related to the supplier
Financial institution

PURPOSE OF THE TREATMENT	Physical voucher file and passive file
DATA OWNER	Supplier, Payee
TREATMENTS TO BE PERFORMED	Storage/Recording, Query/Display
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, Address, First and Last Names, Identification Number (ID/Passport), Telephone Number, Consumption Amount, Bank Account Number, Type of Bank Account
PURPOSE OF THE TREATMENT	Creating suppliers in the organization’s databases
DATA OWNER	Supplier, Payee
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence, Name of Banking Institution, Bank Account Number, Type of Bank Account
PURPOSE OF THE TREATMENT	Payments to third parties (not in the organization’s database)
DATA OWNER	Supplier, Payee
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence, Name of Banking Institution, Bank Account Number, Type of Bank Account
PURPOSE OF THE TREATMENT	Transfer of information for external audit of financial statements
DATA OWNER	Supplier, Payee
TREATMENTS TO BE PERFORMED	Transfer
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)

6.3 MARKETING

SOURCES OF OBTAINING:

Supplier (natural or legal person)
Passerby

PURPOSE OF THE TREATMENT	Promotion of the Metropolitan Touring C.A. brand
DATA OWNER	Supplier, Payee
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Extraction, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Photos, Videos and Audios

6.4 SAFETY, HEALTH AND ENVIRONMENT

SOURCES OF OBTAINING:

Supplier (natural or legal person)
Project Manager

PURPOSE OF THE TREATMENT	Execution of SSA inductions
DATA OWNER	Supplier Staff
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Provide access to the facilities of Metropolitan Touring C.A., to comply with the management of hazardous and non-hazardous waste
DATA OWNER	Supplier Staff
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Name of the company where you work
PURPOSE OF THE TREATMENT	Generation of ATS and special work permits
DATA OWNER	Supplier Staff
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)

6.5 ALL PROCESSES

SOURCES OF OBTAINING:

Supplier (natural or legal person)
Passerby

PURPOSE OF THE TREATMENT	Video capture and storage to provide security and monitoring to Metropolitan Touring C.A. facilities.
DATA OWNER	Provider, Passerby
TREATMENTS TO BE PERFORMED	Storage and Recording, Query/View, Deletion, Obtaining/Collecting
DATA PROCESSED	Surveillance videos
PURPOSE OF THE TREATMENT	Signing contracts with third parties
DATA OWNER	Counterpart
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Copy of Identification Document (ID/Passport), First and Last Names, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Consent for processing of personal data of the owner Carry out internal evaluation and study processes Check for potential conflicts of interest between the supplier, its representative, the shareholders and/or directors and us. Contact you in relation to the services or products you provide to us Manage, maintain and develop the relationship as a supplier Evaluate compliance with contracted benefits and incentive plans Control the quality of the products purchased and manage any action arising from this study
DATA OWNER	Supplier
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number.
PURPOSE OF THE TREATMENT	Exercise of the rights of the organic law on the protection of personal data by the owner
DATA OWNER	Supplier
TRATAMIENTOS A EFECTUAR	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, Address, First and Last Names, Identification Number (ID/Passport).

7. TRANSFER OF PERSONAL DATA

Since Metropolitan Touring C.A.’s business line is intermediation, it is not feasible to explicitly specify to whom the data processed by the owner will be sent, since the decision of which provider to go with depends entirely on the owner and can vary greatly depending on the case, so in this case the type of company to which the data is transferred will be generally cited, which will always be selected with the authorization of the owner.

ADMINISTRATIVE MANAGEMENT
PURPOSE OF THE TREATMENT	Provide contractors with access to Metropolitan Touring facilities, for delivery of supplies, management of services provided, among others
DATA OWNER	Supplier Staff
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Name of the company where you work
RECIPIENT OF PERSONAL DATA	Administrative department of the La Previsora building, Sigma Security, Administrative department of the Parque Empresarial Colón building, Megamaxi 6 de diciembre Administration
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Sending parcels by courier Sending and receiving messages from Metropolitan Touring C.A.
DATA OWNER	Supplier
DATA TRANSFERRED	Email, Address, First and Last Name, Telephone Number
RECIPIENT OF PERSONAL DATA	DHL Express S.A.
PAÍS	Ecuador

FINANCIAL MANAGEMENT
PURPOSE OF THE TREATMENT	Payments to third parties (not in the organization’s database)
DATA OWNER	Supplier, Payee
DATA TRANSFERRED	Email, Address, First and Last Name, Identification Number (ID/Passport), Telephone Number, Country of Residence, Name of Banking Institution, Bank Account Number, Type of Bank Account
RECIPIENT OF PERSONAL DATA	Banking Institution designated by the client.
COUNTRY	Country of tax residence of the banking institution.
PURPOSE OF THE TREATMENT	Transfer of information for external audit of financial statements
DATA OWNER	Supplier, Payee
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport/RUC)
RECIPIENT OF PERSONAL DATA	Deloitte & Touche Ecuador Cia. Ltda
COUNTRY	Ecuador

SAFETY, HEALTH AND ENVIRONMENT
PURPOSE OF THE TREATMENT	Provide access to the facilities of Metropolitan Touring C.A., to comply with the management of hazardous and non-hazardous waste
DATA OWNER	Supplier Staff
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Name of the company where you work
RECIPIENT OF PERSONAL DATA	Administrative department of the La Previsora building, Sigma Security, Administrative department of the Colón business park building, Megamaxi Administration December 6
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Generation of ATS and special work permits
DATA OWNER	Supplier Staff
DATA TRANSFERRED	First and last names Identification Number (ID/Passport)
RECIPIENT OF PERSONAL DATA	Administrative department of the La Previsora building, Sigma Security, Administrative department of the Colón business park building, Megamaxi Administration December 6
COUNTRY	Ecuador

ALL PROCESSES
PURPOSE OF THE TREATMENT	Signing contracts with third parties
DATA OWNER	Counterpart
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), Names and Surnames, Identification Number, ID/Passport)
RECIPIENT OF PERSONAL DATA	Lexvalor Asesoria Legal S.A.
COUNTRY	Ecuador

8. CONSENT

Metropolitan Touring C.A. will receive explicit consent through:

In case of face-to-face care, , telephone or virtual, chat applications and/or email will be used to send the link where consent will be collected and the policy will be communicated..

Web support: Through the Metropolitan Touring C.A. website, communicating the policy with a hyperlink on the same page where consent is collected.

When specific events and/or services offered by Metropolitan Touring C.A. are carried out, the hyperlink to the privacy policy will be sent along with the link where consent is collected.

9. STORAGE TIME AND WITHDRAWAL OF TREATMENT

The personal data processed will be kept as long as necessary to fulfill the processing purposes indicated in this document or as long as the Provider and/or Beneficiary does not withdraw their consent.

10. PERSONAL DATA SECURITY

11. PRIVACY OF BOYS, GIRLS AND ADOLESCENTS

12. PRIVACY OF PEOPLE WITH DISABILITIES

Metropolitan Touring C.A. will process data of persons with disabilities as long as this processing respects their best interests and ensures respect for their fundamental rights.

13. EXERCISE OF RIGHTS

To exercise the rights detailed in the policy or to make a claim regarding the processing of personal data, data owners must go to the footer of our website. https://metropolitantouring.com.ec “Exercise of your rights” option.

14. ORGANIZATION CONTACTS

To contact us you can do so at the following contacts:

14.1 CONTACT DETAILS OF THE PERSONAL DATA PROTECTION OFFICER

Address: Av. Amazonas N-014 y NNUU, Ed. La Previsora, Torre A, Piso 6, Ofic. 602.

Phone: (593-2) 392-2164; (593-9) 9 562-2011

Email: delegado.protecciondedatos@mtagencia.com

14.2 IDENTITY AND CONTACT INFORMATION OF THE ORGANIZATION

METROPOLITAN TOURING C.A – Agencia Matriz

Address: Av. Amazonas N-014 y NNUU, Ed. La Previsora, Torre A, Piso 6, Ofic. 602. Quito 170135

08h00 a 13:00 / 14h00 a 17h00

Phone: (593-2) 392-2164, (593-9) 9 353-1012

Ruc: 1790022838001

METROPOLITAN TOURING C.A – Agencia Megamaxi

Address: Megamaxi, Av. 6 de Diciembre y Germán Alemán

10h00 a 19:00

Phone: (593-2) 245-7924, (593-9) 9 973-8240

Ruc: 1790022838001

METROPOLITAN TOURING C.A – Agencia Guayaquil

Address: Parque Empresarial Colón, Torre Empresarial 4, Planta Baja, Local 1. 08h00 a 13:00 / 14h00 a 17h00

Phone: (593-4) 395-1738, (593-9) 9 973-0456

Ruc: 1790022838001

In addition, if you prefer, you can communicate directly with the Ecuadorian Personal Data Protection Authority.

15. CHANGES TO THIS POLICY

Metropolitan Touring C.A., may update its Privacy Policy when:

The entities to which you transfer personal data change.
When Metropolitan Touring C.A. changes, increases or removes services that it makes available to the client.
When there are changes in national legislation.
If a processed data is created or removed, as well as the processing to be carried out.

In the event of such changes, the Company undertakes to notify the owner to obtain consent for this change or updated policy through the mechanisms proposed in this policy.

1. INTRODUCTION

1.1 BUSINESS REVIEW

At Metropolitan Touring C.A., we offer an excellent service to the traveler. To do this, we focus on creating a history full of good stories that exceed the expectations of our valued clients.

For this reason, we have been rated as one of the most respected companies in the Tourism sector.

We have earned this recognition thanks to the trust of our clients for the effort, respect and ethics in more than 70 years of work.

Advice on obtaining visas.
Advice on vacation and/or work trips in complementary services such as hotels, city tours in destinations, tourist attractions.
Coordination of medical events and organization of events.
Sale of Travel Insurance.
Sale of Air Tickets.

1.2 LEGAL BASIS AND LEGITIMATE INTEREST

The legal basis of our processing lies in a contractual relationship with the holders of personal data, for example, with our employees, clients, suppliers or allies.

Metropolitan Touring C.A. bases its treatment of personal data on the following legal instruments:

Article 7.1 of the LOPDP: “[b]y consent of the owner for the processing of their personal data, for one or more specific purposes”
Article 7.2 of the LOPDP: “[t]hat is carried out by the person responsible for the treatment in compliance with a legal obligation”;
Article 7.5 of the LOPDP: “[f]or the execution of pre-contractual measures at the request of the owner or for the fulfillment of contractual obligations pursued by the person responsible for the processing of personal data, in charge of the processing of personal data or by a legally authorized third party.”;
Article 7.6 of the LOPDP: “[t]o protect vital interests of the interested party or another natural person, such as their life, health or integrity”;
Article 7.7 of the LOPDP: “[f]or the processing of personal data contained in publicly accessible databases”; and
Article 7.8 of the LOPDP: “[t]o satisfy a legitimate interest of the data controller or a third party, provided that the interest or fundamental rights of the owners do not prevail under the provisions of this standard.”.
Commercial Code Art. 37.-“[e]The merchant or businessman must save and back up the documents and information related to the legal acts that he develops, whether these instruments are public or private, as well as the constant messages in emails that exist about them; The latter will be carried out and will have the effects provided for in the chapter dedicated to electronic commerce contained in this Code.”.
Regulations/Legal obligation: Art. 697 of the Commercial Code & Art 33 of the Organic Law on Protection of Personal Data.
Regulations/Legal Obligation: Articles 319 Companies Law.
Regulations/Legal obligation: Commercial Code Article 691.
Commercial Code Art. 200.- Regulation of sales, withholding and complementary receipts Articles 17 and 18.

2. SCOPE OF THIS POLICY

Metropolitan Touring C.A., hereinafter “METROPOLITAN TOURING” or the “Data Controller and/or Data Processor”), in compliance with the principles of legality, loyalty and transparency contained in the Organic Law on Personal Data Protection (hereinafter the “LOPDP”), makes this instrument available in order to carry out the processing of your personal data, and in order to guarantee the constitutional right to protection thereof.
This instrument applies to all processing of personal data of Clients or third parties with which Metropolitan Touring C.A., Matriz, Oficina Megamaxi and Oficina Agencia Guayaquil establish or maintain a relationship of offer or provision of services, excluding from this any entity that appears on behalf of the brand.

TYPE OF TREATMENT USED

Depending on the service that METROPOLITAN TOURING C.A. provides to the Data Subjects, the Data Controller and/or Processor may process the following categories of data:

Identification and contact information.
Data on physical characteristics.
Biometric data.
Employment data.
Academic data.
Assets/financial data
Migration data.
Data on hobbies, entertainment and fun.
Data on gender, ideology, religious beliefs, philosophical and/or political beliefs.
Health data.
Data on ethnic or racial origin.

3. DEFINITIONS

For the purposes of the application of this Law, the following definitions are established:

Personal Data Protection Authority:

Anonymization:

The application of measures aimed at preventing the identification or re-identification of a natural person, without disproportionate efforts.

Database or file:

Consent:

Manifestation of free, specific, informed and unequivocal will, by which the owner of the personal data authorizes the person responsible for the processing of personal data to process the same.

Biometric data:

Genetic data:

Unique personal data related to inherited or acquired genetic characteristics of a natural person that provide unique information about the physiology or health of an individual.

Personal data:

Data that identifies or makes a natural person identifiable, directly or indirectly.

Personal credit data:

Data that integrates the economic behavior of natural persons, to analyze their financial capacity.

Health related data:

Personal data relating to an individual’s physical or mental health, including the provision of healthcare services, which reveal information about his or her health status.

Sensitive data:

Data Protection Officer:

Addressee:

Natural or legal person who has been provided with personal data.

Profiling:

Personal data processing manager:

Natural or legal person, public or private, public authority, or other body that alone or jointly with others processes personal data on behalf of and on behalf of a personal data controller.

Certifying Entity:

Entity recognized by the Personal Data Protection Authority, which may, on a non-exclusive basis, provide certifications regarding personal data protection.

Publicly accessible source:

Databases that can be consulted by anyone, whose access is public, unconditional and generalized.

Responsible for the processing of personal data:

Natural or legal person, public or private, public authority, or other body, which alone or jointly with others decides on the purpose and processing of personal data.

Personal data protection seals:

Pseudonymization:

Holder:

Natural person whose data is processed.

Transfer or communication:

Treatment:

Breach of personal data security:

Security incident that affects the confidentiality, availability or integrity of personal data.

4. SUMMARY OF DATA COLLECTED AND PROCESSED

Metropolitan Touring C.A. collects and processes the following personal data:

ACADEMIC DATA

Career / Instruction
Certifications and additional courses
Name of the institution where you studied
Year you are currently studying (if you are currently studying)
City and country of study
Copies of degrees / Degree certificate

IDENTIFICATION AND CONTACT DATA

Email
First and last names
Telephone Number
Identification Number (ID/Passport)
Age
Marital status
Birthdate
Copy of identification document (ID/Passport)
Address
Nationality
Relationship
City of Residence
Copy of marriage certificate
Copy of birth certificate
Home sketch

HEALTH DATA

Copy of Disability Card
Information about diseases
Disability percentage
Type of disability
Medical diagnosis
Clinical and surgical history
Gynecological-obstetric history (age of first cycle, date of last menstruation, information regarding pregnancies)
Personal, family and work medical history
Male reproductive history and family planning methods
Blood group
Information regarding sexual life and family planning methods
Information on Toxic Habits
Occupational exam results
Results of review of devices and systems
Blood type
Diagnosis and treatment
Date of diagnosis
Place of treatment
Doctor who applied the treatment
Pre-existing medical conditions
Copy of certificate of catastrophic illness

WORK DATA

Job Activity / Position
Date of entry
Departure date
Time of seniority
Regular working hours
Employment Certificates from the companies where you worked
Dates of entry and exit of the companies in which he/she worked
Work History/Position
Digital storage in database for future hiring
History of working time in companies

ASSETS/FINANCIAL DATA

Consumption amount
Bank account number
Type of Bank Account
Salary / Amount to be paid
Asset Value
Value of Expenditures
Value of Other income
Value of Liabilities
Name of the Banking Institution
Credit history information
Alimony Value

DATA ON PHYSICAL CHARACTERISTICS

Photographs
Videos
Audios
Height
Body mass index
Abdominal perimeter
Weight

DATA ON GENDER, IDEOLOGY, RELIGIOUS, PHILOSOPHICAL AND/OR POLITICAL BELIEF

Gender
Sexual orientation
Religion

FACTS ABOUT HOBBIES, ENTERTAINMENT AND FUN

Sports that he practices
Lifestyle Information

5. RIGHTS OF THE OWNER

Right to information.

The owner of personal data has the right to be informed in accordance with the principles of loyalty and transparency by any means.

Right of access.

Right to rectification and updating.

Right of deletion.

The owner of the personal data has the right to have Metropolitan Touring C.A. delete his/her personal data when:

The treatment does not comply with the principles established in this law;
The treatment is not necessary or relevant for the fulfillment of the purpose;
The personal data have fulfilled the purpose for which they were collected or processed;
The period for which personal data is to be retained has expired;
The treatment affects fundamental rights or individual freedoms;
Revoke the consent given or indicate that it has not been given for one or more specific purposes, without the need for any justification; or,
There is a legal obligation.

Metropolitan Touring C.A. will be obliged to block the data when it proceeds to its rectification or elimination. The blocking of the data consists of the identification and reservation of the same, adopting technical and organizational measures, to prevent its treatment, including its visualization, except for making the data available to the data protection authorities, for the enforcement of possible responsibilities derived from the treatment and only for the period of prescription of the same.

Right to object.

The owner of the personal data has the right to oppose or refuse Metropolitan Touring C.A. to process personal data in the following cases:

The fundamental rights and freedoms of third parties are not affected, the law permits this and it is not public information, information of public interest or information whose processing is ordered by law.
Where personal data is processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her, including profiling; in which case the personal data will no longer be processed for such purposes.
When your consent is not necessary for the processing as a result of the existence of a legitimate interest, as provided for in article 7 of the Organic Law on Personal Data Protection, and it is justified by a specific personal situation of the owner, provided that a law does not provide otherwise.

Right to portability.

The owner may request that Metropolitan Touring C.A. transfer or communicate their personal data to another data controller as soon as technically possible. If this is possible, Metropolitan Touring C.A. will proceed to delete it, unless the owner orders its conservation.

1) That the owner has given his/her consent for the processing of his/her personal data for one or more specific purposes. The transfer or communication will be made between those responsible for the processing of personal data when the operation is technically possible; otherwise the data must be transmitted directly to the owner.

2) That the treatment is carried out by automated means;

3) That it is a relevant volume of personal data, according to the parameters defined in the regulations of this law; or,

4) That the treatment is necessary for the fulfillment of obligations and the exercise of rights of the person responsible for or in charge of processing personal data, or of the owner in the field of labor law and social security.

Right to suspension of processing.

The owner of the personal data has the right to receive from Metropolitan Touring C.A., the suspension of the processing of the data, when any of the following conditions are met:

1) When the data subject contests the accuracy of the personal data, while the data controller verifies the accuracy of the same;

2) The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

3) The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; and,

4) When the interested party has opposed the treatment under article 31 of this law, while verifying whether the legitimate reasons of the controller prevail over those of the interested party.

Right not to be subject to a decision based solely or partially on automated assessments.

Request a reasoned explanation of the decision made by Metropolitan Touring C.A., or the person in charge of processing personal data;
Submit comments;
Request the evaluation criteria for the automated program; or,
Request Metropolitan Touring C.A., about the types of data used and the source from which they have been used and the source from which they have been obtained.
Challenge the decision before Metropolitan Touring C.A., or the data controller.

This right will not apply when:

The decision is necessary for the conclusion or execution of a contract between the owner and Metropolitan Touring C.A., or the person in charge of processing personal data;
It is authorized by applicable regulations, court order, resolution or reasoned mandate of a competent technical authority, for which appropriate measures must be established to safeguard the fundamental rights and freedoms of the holder; or,
It is based on the explicit consent of the owner.
The decision does not entail serious impacts or verifiable risks for the holder.

If the applicant is not the owner of the personal data or his/her legal representative is not duly accredited;
When the data is necessary for compliance with a legal or contractual obligation;
When the data is necessary for compliance with a court order, resolution or reasoned mandate of a competent public authority;
When the data is necessary for the formulation, exercise or defense of claims or appeals;
When it may cause harm to the rights or affect the legitimate interests of third parties and this is proven by the person responsible for the database at the time of responding to the owner’s request to exercise the respective right;
When judicial or administrative proceedings in progress, duly notified, may be hindered;
When the data is necessary to exercise the right to freedom of expression and opinion;
When the data is necessary to protect the vital interest of the interested party or another natural person;
In cases where the public interest is involved, subject to compliance with the international human rights standards applicable to the matter, compliance with the principles of this law and the criteria of legality, proportionality and necessity;
In the processing of personal data that is necessary for the archiving of information that constitutes State property, scientific, historical or statistical research.

6. DATA PROCESSED, TREATMENTS AND PURPOSES

6.1 ADMINISTRATIVE MANAGEMENT

SOURCES OF OBTAINING:

Caller
Visitor
Collaborator
Third parties

PURPOSE OF THE TREATMENT	Control of calls and visits attended and not attended
DATA OWNER	Caller, Visitor
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Email, First and Last Name, Telephone Number
PURPOSE OF THE TREATMENT	Provide access to the facilities (building, parking lots, elevators) to employees and third parties
DATA OWNER	Collaborator, Third Parties
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	First and last names
PURPOSE OF THE TREATMENT	Sending parcels by courier Sending and receiving messages from Metropolitan Touring C.A.
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Transfer, Utilization / Use
DATA PROCESSED	Email, Address, First and Last Name, Telephone Number
PURPOSE OF THE TREATMENT	Sending employee payroll to taxi service provider
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Transfer
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number
PURPOSE OF THE TREATMENT	Generation of Dashboards for non-payroll processes for decision making
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage/Recording, Classification, Query/Display
DATA PROCESSED	First and last names
PURPOSE OF THE TREATMENT	Generation of Dashboards for payroll processes for decision making
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage/Recording, Classification, Query/Display
DATA PROCESSED	Email, Age, Marital Status, Date of Birth, First and Last Names, Identification Number (ID/Passport), Work Activity/Position, Start Date, End Date, Length of Service, Gender

6.2 FINANCIAL MANAGEMENT

SOURCES OF OBTAINING:

Payment recipient
Collaborator
Third party related to the collaborator
Financial institution
Senescyt
Orion system

PURPOSE OF THE TREATMENT	Physical voucher file and passive file
DATA OWNER	Payment Recipient, Contributor
TREATMENTS TO BE PERFORMED	Storage/Recording, Query/Display
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, Address, First and Last Names, Identification Number (ID/Passport), Telephone Number, Consumption Amount, Bank Account Number, Type of Bank Account
PURPOSE OF THE TREATMENT	Creating/Updating data in financial institutions and other public and private organizations
DATA OWNER	Employee, Owner of the basic service contract, Employee’s spouse
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Extraction, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Career/instruction, Copy of identification document (ID/Passport), Email, Address, Marital status, Date of birth, Nationality, First and last names, Identification number (ID/Passport), Telephone number, Work activity/Position, Salary/Amount to pay, Value of assets, Value of expenses, Value of other income, Value of liabilities, Gender
PURPOSE OF THE TREATMENT	Payment of severance pay
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage/Recording, Query/Display, Transfer
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Name of the Banking Institution, Bank Account Number, Type of Bank Account
PURPOSE OF THE TREATMENT	Payroll and social benefits
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Query / Visualization
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Name of the Banking Institution, Bank Account Number, Salary/Amount to Pay, Type of Bank Account
PURPOSE OF THE TREATMENT	Transfer of information for external audit of financial statements
DATA OWNER	Payment Recipient, Contributor
TREATMENTS TO BE PERFORMED	Transfer
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Salary / Amount to be paid

6.3 MARKETING

SOURCES OF OBTAINING:

Digital channels
Passenger
Potential Client
Customer
Passerby

PURPOSE OF THE TREATMENT	Email Signatures
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Photograph
PURPOSE OF THE TREATMENT	Promotion of the Metropolitan Touring C.A. brand
DATA OWNER	Contributor, Passerby
TREATMENTS TO BE PERFORMED	Storage/Recording, Query/Display, Extraction, Obtaining/Collecting, Utilization / Use
DATA PROCESSED	Photos, Videos, Audios

6.4 SAFETY, HEALTH AND ENVIRONMENT

SOURCES OF OBTAINING:

Collaborator
Collaborator’s Family Members
Occupational Physician

PURPOSE OF THE TREATMENT	Execution of SSA inductions
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Preparation of teleworking records
DATA OWNER	Employee, Family Members, Employee Emergency Contact, Employee Spouse, Employee Ex-Spouse
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email Address, Marital Status, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Relationship, Copy of Disability Card, Information about illnesses, Disability percentage, Type of disability, Work Activity / Position, Credit history information, Salary / Amount to pay, Expenses Amount, Other income Amount, Child support Amount, Sports you practice
PURPOSE OF THE TREATMENT	Preparation of absenteeism record
DATA OWNER	Collaborator, Collaborator’s Family Member
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Medical Diagnosis
PURPOSE OF THE TREATMENT	Generation of ATS and special work permits
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Generation of certificates for SSA training managed by third parties
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Occupational record keeping, outpatient care and medical check-ups
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Address, Age, Nationality, First and Last Name, Telephone Number, Medical and surgical history, Gynecological-obstetric history (age of first cycle, date of last menstruation, information regarding pregnancies), Personal, family and work medical history, Male reproductive history and family planning methods, Copy of Disability Card, Medical diagnosis, Blood type, Information regarding sexual life and family planning methods, Information on toxic habits, Percentage of disability, Results of occupational examinations, Results of review of apparatus and systems, Type of disability, Work activity / Position, Start date, Start date, Height, Body mass index, Waist circumference, Weight, Gender, Sexual orientation, Religion, Information on lifestyle
PURPOSE OF THE TREATMENT	Ability of brigadiers
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Names and Surnames, Personal, family and work medical history, Work Activity / Position, Height, Body mass index, Waist circumference, Weight
PURPOSE OF THE TREATMENT	Occupational health programs
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Age, First and Last Names, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Reporting accidents and incidents at the IESS
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Address, Marital Status, First and Last Names, Identification Number (ID/Passport), Telephone Number, Work Activity/Position, Regular Work Schedule, Length of Seniority
PURPOSE OF THE TREATMENT	Reporting management on the platforms of regulatory entities
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Have emergency information from the brigade member for the generation of evacuation plans
DATA OWNER	Contributor, Contributor Emergency Contact
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	First and last names, phone number, relationship, blood type
PURPOSE OF THE TREATMENT	Transfer for the execution of integration and recreation programs
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Transfer for participation in tendering or auditing processes
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Disability percentage, Type of disability
PURPOSE OF THE TREATMENT	Transfer of information to obtain certificates for brigade members endorsed by the Ministry of Labor
DATA OWNER	Brigade Collaborator, Brigade Collaborator Reference
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collection, Utilization / Use, Transfer
DATA PROCESSED	Career/education, Certifications and additional courses, Name of the institution where you studied, City of Residence, Copy of Identification document (ID/Passport), Copy of voting ballot, Email, Address, Age, Marital Status, First and Last Names, Identification Number (ID/Passport), Telephone Number, Work Activity / Position, Digital storage in database for future hiring, History of Work Activity / Position, History of companies where you worked, History of time worked in companies, Photograph

6.5 HUMAN TALENT

SOURCES OF OBTAINING:

Applicant
Universities
Linkedin
Recruitment service companies
Collaborator
Applicant
Referred
University Platforms
Digital job boards
Third parties
Orion system
Legal representative of the foundation

PURPOSE OF THE TREATMENT	Digital storage in database for future hiring
DATA OWNER	Job applicant
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Extraction, Utilization / Use
DATA PROCESSED	Career/education, Certifications and additional courses, Name of the institution where you studied, City of Residence, Email, Address, Age, Marital Status, First and Last Names, Identification Number (ID/Passport), Telephone Number, Photograph
PURPOSE OF THE TREATMENT	Active and passive archival storage Creating a record in the Orion system
DATA OWNER	Employee, Former Employee, Employee/Former Employee’s Dependents, Employee’s Family Member, Employee/Former Employee’s Emergency Contact
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Year you are currently studying, Degree/instruction, Certifications and additional courses, City and country of study, Copies of degrees / Degree certificate, Name of the institution where you studied, Copy of identification document (ID/Passport), Copy of marriage certificate, Copy of birth certificate, Email, Address sketch, Address, Age, Marital status, Date of birth, Nationality, First and last names, Identification number (ID/Passport), Telephone number, Relationship, Disability percentage, Type of disability, Work certificates from the companies where you worked, Dates of entry and exit of the companies where you worked, History of work activity / position, History of companies where you worked, Name of the banking institution, Bank account number, Type of bank account, Photograph, Gender
PURPOSE OF THE TREATMENT	Calculation of the income tax reduction for personal expenses of the period
DATA OWNER	Dependents of the Collaborator, Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Copy of Identification Document (ID/Passport), First and Last Names, Identification Number (ID/Passport), Copy of Catastrophic Illness Certificate
PURPOSE OF THE TREATMENT	Social responsibility campaigns of the Ceipar and La Dolorosa foundations
DATA OWNER	Legal representative of the foundation
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Age, Gender, First and Last Names, Photos, Videos
PURPOSE OF THE TREATMENT	Contact a close relative in case of accidents
DATA OWNER	Collaborator Emergency Contact
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Phone Number, Relationship
PURPOSE OF THE TREATMENT	Contact for closing the disengagement process
DATA OWNER	Spouse of the Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number
PURPOSE OF THE TREATMENT	Hiring staff
DATA OWNER	Job applicant
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Extraction, Utilization / Use
DATA PROCESSED	Year you are currently studying, Degree/instruction, Certifications and additional courses, City and country of study, Copies of degrees/Graduate certificate, Name of the institution where you studied, Copy of marriage certificate, Email, Address sketch, Address, Age, Marital status, Date of birth, Nationality, First and last names, Identification number (ID/Passport), Telephone number, Work certificates from the companies where you worked, Dates of entry and exit of the companies where you worked, History of work activity/position, History of companies where you worked, Photograph
PURPOSE OF THE TREATMENT	Communication of entries, promotions, movements and exits of personnel who have commercial relations
DATA OWNER	Collaborator, Collaborator’s Family Member
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Photos, Videos
PURPOSE OF THE TREATMENT	Dissemination of workplace wellness campaigns, corporate volunteering, events and training
DATA OWNER	Collaborator, Collaborator’s Family Member
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Photos, Videos
PURPOSE OF THE TREATMENT	Dissemination of projects and activities with third parties
DATA OWNER	Collaborator, Third Parties
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Photos, Videos
PURPOSE OF THE TREATMENT	Execution / Coordination of training plans and performance evaluation
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Date of entry
PURPOSE OF THE TREATMENT	Sending updated payroll information for management of internal processes in each area
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage/Recording, Query/Display
DATA PROCESSED	City of Residence, Email, First and Last Names, Identification Number (ID/Passport), Telephone Number
PURPOSE OF THE TREATMENT	Sending updated commercial payroll information to airlines, wholesalers and suppliers for incentive management
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage/Recording, Query/Display, Transfer
DATA PROCESSED	City of Residence, Email, First and Last Names, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Standardize, organize and back up employee information
DATA OWNER	Job applicant, Applicant’s Reference
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Extraction, Utilization / Use
DATA PROCESSED	Year you are currently studying, Degree/instruction, Certifications and additional courses, City and country of study, Copies of degrees/Graduate certificate, Name of the institution where you studied, Copy of marriage certificate, Email, Address sketch, Address, Age, Marital status, Date of birth, Nationality, First and last names, Identification number (ID/Passport), Telephone number, Work certificates from the companies where you worked, Dates of entry and exit of the companies where you worked, History of work activity/position, History of companies where you worked, Photograph
PURPOSE OF THE TREATMENT	Generation of reports and reporting to control entities
DATA OWNER	Collaborator, Person with severe disability that the collaborator represents
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Disability percentage, Disability type, Gender, Disability percentage, Disability type, Gender
PURPOSE OF THE TREATMENT	Management of termination of employment relationship
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Utilization / Use, Storage / Recording, Obtaining / Collection, Transfer
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Date of entry, Date of departure
PURPOSE OF THE TREATMENT	Management of severance payments
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Name of the Banking Institution, Bank Account Number, Type of Bank Account
PURPOSE OF THE TREATMENT	Payroll and benefits management
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Transfer, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Name of the Banking Institution, Bank Account Number, Salary/Amount to Pay, Type of Bank Account
PURPOSE OF THE TREATMENT	Benefits management for immediate family members of employees
DATA OWNER	Dependents of the Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport)
PURPOSE OF THE TREATMENT	Implementation of inclusive policies for employees who have family members with disabilities Include staff as substitutes in disability quota
DATA OWNER	Collaborator, Person with severe disability that the collaborator represents
TREATMENTS TO BE PERFORMED	Storage / Recording, Consultation / Display, Obtaining / Collection, Classification, Transfer, Utilization / Use
DATA PROCESSED	Names and Surnames, Identification Number (ID/Passport), Disability percentage, Type of disability
PURPOSE OF THE TREATMENT	Conducting wellness activities
DATA OWNER	Dependents of the Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Copy of Identification Document (ID/Passport), Copy of Birth Certificate, Date of Birth, First and Last Names, Identification Number (ID/Passport), Relationship
PURPOSE OF THE TREATMENT	Conducting socioeconomic analysis of employees
DATA OWNER	Spouse of the Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number
PURPOSE OF THE TREATMENT	Recruitment and selection
DATA OWNER	Job applicant, Applicant’s Reference
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collection, Extraction, Utilization / Use
DATA PROCESSED	Career/education, Certifications and additional courses, Name of the institution where you studied, City of Residence, Email, Address, Age, Marital Status, First and Last Names, Identification Number (ID/Passport), Telephone Number, Work Activity/Position, Digital storage in database for future hiring, History of Work Activity/Position, History of companies where you worked, History of time worked in companies, Photograph
PURPOSE OF THE TREATMENT	Profit sharing
DATA OWNER	Employee’s Dependents, Employee’s Spouse
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Utilization / Use
DATA PROCESSED	Copy of Identification Document (ID/Passport), Copy of Birth Certificate, Email, Date of Birth, First and Last Names, Identification Number (ID/Passport), Telephone Number, Relationship
PURPOSE OF THE TREATMENT	Transfer information for Life Insurance Policy Management
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collecting, Transferring
DATA PROCESSED	Email, Age, Gender, First and Last Name, Identification Number (ID/Passport), Telephone Number
PURPOSE OF THE TREATMENT	Transfer information to clients in tenders or audits
DATA OWNER	Job applicant, Applicant’s reference, Collaborator, Person with severe disability that the collaborator represents
TREATMENTS TO BE PERFORMED	Storage / Recording, Classification, Consultation / Display, Obtaining / Collection, Extraction, Utilization / Use, Transfer
DATA PROCESSED	Year you are currently studying, Degree/instruction, Certifications and additional courses, City and country of study, Copies of degrees / Degree certificate, Name of the institution where you studied, Copy of marriage certificate, Email, Address sketch, Address, Age, Marital status, Date of birth, Nationality, First and last names, Identification number (ID/Passport), Telephone number, Disability percentage, Type of disability, Work certificates from the companies where you worked, Dates of entry and exit of the companies where you worked, History of work activity / position, History of companies where you worked, Photograph
PURPOSE OF THE TREATMENT	Transferring information in accounting audits
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collecting, Transferring
DATA PROCESSED	Salary / Amount to be paid
PURPOSE OF THE TREATMENT	Transfer information for Health Insurance Policy Management
DATA OWNER	Collaborator, Collaborator’s Family Member
TREATMENTS TO BE PERFORMED	Storage / Recording, Obtaining / Collecting, Transferring
DATA PROCESSED	Email, Address, Date of Birth, First and Last Name, Identification Number (ID/Passport), Telephone Number, Diagnosis and Treatment, Date of Diagnosis, Place of Treatment, Doctor who applied the treatment, Medical Preexisting Conditions, Name of the Banking Institution, Bank Account Number, Type of Bank Account, Gender
PURPOSE OF THE TREATMENT	Transfer information for technical and specific training by external providers
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number, Photographs of the event.
PURPOSE OF THE TREATMENT	Identification and Authentication at the entry and exit of the collaborator
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Names and Surnames, Fingerprint, Facial Recognition, Photograph.
PURPOSE OF THE TREATMENT	Transfer of information for customer service purposes such as proof of services, equipment in charge of the account and replacements
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Obtaining / Collecting, Transferring.
DATA PROCESSED	Email, First and Last Name, Telephone Number, Work Activity/Position.

6.6 ALL PROCESSES

SOURCES OF OBTAINING :

Collaborator
Passerby

Exercise of the rights of the organic law on the protection of personal data by the owner.

PURPOSE OF THE TREATMENT	Video capture and storage to provide security and monitoring to Metropolitan Touring C.A. facilities.
DATA OWNER	Contributor, Passerby
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Deletion, Obtaining / Collection
DATA PROCESSED	Surveillance videos
PURPOSE OF THE TREATMENT	Signing contracts with third parties
DATA OWNER	Counterpart
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting, Transferring
DATA PROCESSED	Copy of Identification Document (ID Card/Passport), First and Last Names, Identification Number (ID Card/Passport)
PURPOSE OF THE TREATMENT	Consent for processing of personal data of the owner
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage / Recording, Query / Display, Obtaining / Collecting
DATA PROCESSED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number.
PURPOSE OF THE TREATMENT	Exercise of the rights of the organic law on the protection of personal data by the owner.
DATA OWNER	Collaborator
TREATMENTS TO BE PERFORMED	Storage/Recording, Query/Display, Obtaining/Collecting.
DATA PROCESSED	Copy of Identification Document (ID/Passport), Email, Address, First and Last Names, Identification Number (ID/Passport).

7. TRANSFER OF PERSONAL DATA

ADMINISTRATIVE MANAGEMENT
PURPOSE OF THE TREATMENT	Provide access to the facilities (building, parking lots, elevators) to employees and third parties
DATA OWNER	Collaborator, Third Parties
DATA TRANSFERRED	First and last names
RECIPIENT OF PERSONAL DATA	Administrative department of the La Previsora building, Sigma Security, Administrative department of the Colón business park building, Megamaxi Administration December 6
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Sending parcels by courier Sending and receiving messages from Metropolitan Touring C.A.
DATA OWNER	Collaborator
DATA TRANSFERRED	Email, Address, First and Last Name, Telephone Number
RECIPIENT OF PERSONAL DATA	DHL Express S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Sending employee payroll to taxi service provider
DATA OWNER	Collaborator
DATA TRANSFERRED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number
RECIPIENT OF PERSONAL DATA	Civic Action Taxi Passenger Transport Cooperative (Civitaxi)
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Sending employee payroll to taxi service provider
DATA OWNER	Collaborator
DATA TRANSFERRED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number
RECIPIENT OF PERSONAL DATA	Civic Action Taxi Passenger Transport Cooperative (Civitaxi)
COUNTRY	Ecuador

FINANCIAL MANAGEMENT
PURPOSE OF THE TREATMENT	Creating/Updating data in financial institutions and other public and private organizations
DATA OWNER	Employee, Owner of the basic service contract, Employee’s spouse
DATA TRANSFERRED	Career/instruction, Copy of identification document (ID/Passport), Email, Address, Marital status, Date of birth, Nationality, First and last names, Identification number (ID/Passport), Telephone number, Work activity/Position, Salary/Amount to pay, Value of assets, Value of expenses, Value of other income, Value of liabilities, Gender
RECIPIENT OF PERSONAL DATA	Banco Guayaquil S.A., Banco de La Producción S.A. Produbanco, Banco Pichincha C.A., Banco Internacional S.A., y Banco del Pacífico S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Payment of severance pay
DATA OWNER	Collaborator
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Name of the Banking Institution, Bank Account Number, Type of Bank Account
RECIPIENT OF PERSONAL DATA	Banco de La Producción S.A. Produbanco
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Transfer of information for external audit of financial statements
DATA OWNER	Payment Recipient, Contributor
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Salary / Amount to be paid
RECIPIENT OF PERSONAL DATA	Deloitte & Touche Ecuador Cia. Ltda, Superintendency of Companies
COUNTRY	Ecuador

SAFETY, HEALTH AND ENVIRONMENT
PURPOSE OF THE TREATMENT	Generation of ATS and special work permits
DATA OWNER	Collaborator
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport)
RECIPIENT OF PERSONAL DATA	Administrative department of the La Previsora building, Sigma Security, Administrative department of the Colón business park building, Megamaxi Administration December 6
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Occupational record keeping, outpatient care and medical check-ups
DATA OWNER	Collaborator
DATA TRANSFERRED	Address, Age, Nationality, First and Last Names, Telephone Number, Medical and Surgical History Gynecological-obstetric history (age of first cycle, date of last menstruation, information regarding pregnancies), Personal, family and work medical history, Male reproductive history and family planning methods, Copy of Disability Card, Medical diagnosis, Blood type, Information regarding sexual life and family planning methods, Information on toxic habits, Percentage of disability, Results of occupational examinations, Results of review of apparatus and systems, Type of disability, Work activity / Position, Start date, End date, Height, Body mass index, Waist circumference, Weight, Gender, Sexual orientation, Religion, Information on lifestyle
RECIPIENT OF PERSONAL DATA	Latin American Medical Promoters Latinomedical S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Ability of brigadiers
DATA OWNER	Collaborator
DATA TRANSFERRED	Names and Surnames, Personal, family and work medical history, Work Activity / Position, Height, Body mass index, Abdominal circumference, Weight-
RECIPIENT OF PERSONAL DATA	Latin American Medical Promoters Latinomedical S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Occupational health programs
DATA OWNER	Collaborator
DATA TRANSFERRED	Age, First and Last Names, Identification Number (ID/Passport)
RECIPIENT OF PERSONAL DATA	Latin American Medical Promoters Latinomedical S.A., Occupational Physician assigned to the company, Other medical service providers
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Transfer for participation in tendering or auditing processes
DATA OWNER	Collaborator
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Disability percentage, Type of disability
RECIPIENT OF PERSONAL DATA	Prospective and/or Current Clients Metropolitan Touring C.A.
COUNTRY	Ecuador, country of tax residence of the prospective and/or current client.
PURPOSE OF THE TREATMENT	Transfer of information to obtain certificates for brigade members endorsed by the Ministry of Labor
Transfer of information to obtain certificates for brigade members endorsed by the Ministry of Labor	Brigade Collaborator, Brigade Collaborator Reference
DATA TRANSFERRED	Career/education, Certifications and additional courses, Name of the institution where you studied, City of Residence, Copy of Identification document (ID/Passport), Copy of voting ballot, Email, Address, Age, Marital Status, First and Last Name, Identification Number (ID/Passport), Telephone Number, Work Activity/Position, Digital storage in database for future hiring, History of Work Activity/Position, History of companies in which worked, History of time worked in companies, Photograph
RECIPIENT OF PERSONAL DATA	Provider of training services for brigade members SAFECAP CONSULTORA SAFE S.A.S and related providers of training services for brigade members.
COUNTRY	Ecuador

HUMAN TALENT
PURPOSE OF THE TREATMENT	Calculation of the income tax reduction for personal expenses of the period
DATA OWNER	Dependents of the Collaborator, Collaborator
DATA TRANSFERRED	Copy of Identification Document (ID/Passport), First and Last Names, Identification Number (ID/Passport), Copy of Catastrophic Illness Certificate
RECIPIENT OF PERSONAL DATA	Internal Revenue Service
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Social responsibility campaigns of the Ceipar and La Dolorosa foundations
DATA OWNER	Legal representative of the foundation
DATA TRANSFERRED	Photos, Videos
RECIPIENT OF PERSONAL DATA	BCD Travel S.A., Fundación John Marine Van Vlissingen, Pacto Global
COUNTRY	Country of tax residence BCD Travel S.A, Foundation John Marine Van Vlissingen y Pacto Global
PURPOSE OF THE TREATMENT	Communication of entries, promotions, movements and exits of personnel based on commercial relationships
DATA OWNER	Collaborator, Collaborator’s Family Member
DATA TRANSFERRED	Photos, Videos
RECIPIENT OF PERSONAL DATA	Wholesalers, operators, airlines and customers
COUNTRY	Country of tax residence of wholesalers, operators, airlines and customers
PURPOSE OF THE TREATMENT	Sending updated commercial payroll information to airlines, wholesalers and suppliers for incentive management
DATA OWNER	Collaborator
DATA TRANSFERRED	City of Residence, Email, First and Last Names, Identification Number (ID/Passport)
RECIPIENT OF PERSONAL DATA	Wholesalers, operators and airlines
COUNTRY	Country of tax residence of wholesalers, operators and airlines
PURPOSE OF THE TREATMENT	Generation of reports and reporting to control entities
DATA OWNER	Collaborator, Person with severe disability that the collaborator represents
DATA TRANSFERRED	Disability percentage, Disability type, Gender, Disability percentage, Disability type, Gender
DRECIPIENT OF PERSONAL DATA	Ministry of Labor, IESS
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Management of termination of employment relationship
DATA OWNER	Collaborator
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Date of entry, Date of departure
RECIPIENT OF PERSONAL DATA	Ministry of Labor, IESS
CONUTRY	Ecuador
PURPOSE OF THE TREATMENT	Payroll and benefits management
DATA OWNER	Collaborator
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Name of the Banking Institution, Bank Account Number, Salary/Amount to Pay, Type of Bank Account
RECIPIENT OF PERSONAL DATA	Banco de La Producción S.A. Produbanco
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Implementation of inclusive policies for employees who have family members with disabilities Include staff as substitutes in disability quota
DATA OWNER	Collaborator, Person with severe disability that the collaborator represents
DATA TRANSFERRED	Names and Surnames, Identification Number (ID/Passport), Disability percentage, Type of disability
RECIPIENT OF PERSONAL DATA	Ministry of Labor
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Transfer information for Life Insurance Policy Management
DATA OWNER	Collaborator
DATA TRANSFERRED	Email, Age, Gender, First and Last Names, Identification Number (ID/Passport), Telephone Number
RECIPIENT OF PERSONAL DATA	Tecniseguros S.A
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Transfer information to clients in tenders or audits
DATA OWNER	Job applicant, Applicant’s reference, Collaborator, Person with severe disability that the collaborator represents
DATA TRANSFERRED	Year you are currently studying, Degree/instruction, Certifications and additional courses, City and country of study, Copies of degrees / Degree certificate, Name of the institution where you studied, Copy of marriage certificate, Email, Address sketch, Address, Age, Marital status, Date of birth, Nationality, First and last names, Identification number (ID/Passport), Telephone number, Disability percentage, Type of disability, Work certificates from the companies where you worked, Dates of entry and exit of the companies where you worked, History of work activity / position, History of companies where you worked, Photograph
RECIPIENT OF PERSONAL DATA	Any Client who requests payroll information for bidding
COUNTRY	Country of tax residence of the client requesting the tender
PURPOSE OF THE TREATMENT	Transferring information in accounting audits
DATA OWNER	Collaborator
DATA TRANSFERRED	Salary / Amount to be paid
RECIPIENT OF PERSONAL DATA	Deloitte & Touche Ecuador Cia. Ltda.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Transfer information for Health Insurance Policy Management
DATA OWNER	Collaborator, Collaborator’s Family Member
DATA TRANSFERRED	Email, Address, Date of Birth, First and Last Name, Identification Number (ID/Passport), Telephone Number, Diagnosis and Treatment, Date of Diagnosis, Place of Treatment, Doctor who applied the treatment, Medical Preexisting Conditions, Name of the Banking Institution, Bank Account Number, Type of Bank Account, Gender
RECIPIENT OF PERSONAL DATA	Tecniseguros S.A.
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Transfer information for technical and specific training by external providers.
DATA OWNER	Collaborator.
DATA TRANSFERRED	Email, First and Last Name, Identification Number (ID/Passport), Telephone Number, Photos of the event
RECIPIENT OF PERSONAL DATA	Qualified Supplier
COUNTRY	Ecuador
PURPOSE OF THE TREATMENT	Transfer of information for customer service purposes such as proof of services, equipment in charge of the account and replacements
DATA OWNER	Collaborator.
DATA TRANSFERRED	Email, First and Last Name, Telephone Number, Work Activity/Position.
RECIPIENT OF PERSONAL DATA	Prospective and/or Current Clients
COUNTRY	Ecuador, country of tax residence of the client

8. CONSENT

Metropolitan Touring C.A. will receive explicit consent through:

In case of face-to-face care, Telephone or virtual, chat applications and/or email will be used to send the link where consent will be collected and the policy will be communicated.

Web attention: Through the Metropolitan Touring C.A. website, communicating the policy with a hyperlink on the same page where consent is collected.

When specific events and/or services offered by Metropolitan Touring C.A. are carried out, the hyperlink to the privacy policy will be sent along with the link where consent is collected.

9. STORAGE TIME AND WITHDRAWAL OF TREATMENT

The personal data processed will be kept for as long as necessary to fulfill the processing purposes indicated in this document or as long as the Collaborator does not withdraw his/her consent.

10. PERSONAL DATA SECURITY

11. PRIVACY OF BOYS, GIRLS AND ADOLESCENTS

12. PRIVACY OF PEOPLE WITH DISABILITIES

Metropolitan Touring C.A. will process data of persons with disabilities as long as this processing respects their best interests and ensures respect for their fundamental rights.

13. EXERCISE OF RIGHTS

14. ORGANIZATION CONTACTS

To contact us you can do so at the following contacts:

14.1 CONTACT DETAILS OF THE PERSONAL DATA PROTECTION OFFICER

Address: Av. Amazonas N-014 y NNUU, Ed. La Previsora, Torre A, Piso 6, Ofic. 602.

Phone: (593-2) 392-2164; (593-9) 9 562-2011

Email: delegado.protecciondedatos@mtagencia.com

14.2 IDENTITY AND CONTACT INFORMATION OF THE ORGANIZATION

METROPOLITAN TOURING C.A – Agencia Matriz

Address: Av. Amazonas N-014 y NNUU, Ed. La Previsora, Torre A, Piso 6, Ofic. 602. Quito 170135

08h00 a 13:00 / 14h00 a 17h00

Phone: (593-2) 392-2164, (593-9) 9 353-1012

Ruc: 1790022838001

METROPOLITAN TOURING C.A – Agencia Megamaxi

Address: Megamaxi, Av. 6 de Diciembre y Germán Alemán

10h00 a 19:00

Phone: (593-2) 245-7924, (593-9) 9 973-8240

Ruc: 1790022838001

METROPOLITAN TOURING C.A – Agencia Guayaquil

Address: Parque Empresarial Colón, Torre Empresarial 4, Planta Baja, Local 1. 08h00 a 13:00 / 14h00 a 17h00

Phone: (593-4) 395-1738, (593-9) 9 973-0456

Ruc: 1790022838001

In addition, if you prefer, you can communicate directly with the Ecuadorian Personal Data Protection Authority.

15. CHANGES TO THIS POLICY

Metropolitan Touring C.A., may update its Privacy Policy when:

The entities to which you transfer personal data change.
When Metropolitan Touring C.A. changes, increases or removes services that it makes available to the client.
When there are changes in national legislation.
If a processed data is created or removed, as well as the processing to be carried out.

In the event of such changes, the Company undertakes to notify the owner to obtain consent for this change or updated policy through the mechanisms proposed in this policy.

1. INTRODUCCIÓN

1.1 RESEÑA EMPRESARIAL

En Metropolitan Touring C.A., ofrecemos un servicio de excelencia al viajero. Para ello nos enfocamos en crear una historia llena de buenas historias que superen las expectativas de nuestros apreciados clientes.

Por este motivo, hemos sido calificados como una de las empresas más respetada en el sector de Turismo.

Este reconocimiento lo hemos ganado gracias a la confianza de nuestros clientes por el esfuerzo, respeto y ética en más de 70 años de trabajo.

Empezamos como la primera agencia del país incursionando con viajes a las Islas Galápagos en 1960. Ahora tenemos un amplio portafolio de servicios con el que brindamos asesoría integral y personalizada a nuestros clientes entre los que mencionamos:

Revisión Documental para la visa schengen.

1.2 BASE LEGAL E INTERÉS LEGÍTIMO

La base legal de nuestro tratamiento reposa en una relación contractual con los titulares de datos personales, por ejemplo, con nuestros empleados, clientes, proveedores o aliados.

Por otro lado, consideramos que el tratamiento de datos personales también está basado en el interés legítimo ya que, por ejemplo, los usuarios de nuestra página web, demuestran su voluntad en obtener nuestros servicios al navegar en nuestro sitio o al llenar los formularios de registro o de contacto, en aras de que ocurra una prestación de nuestros servicios en favor de los interesados.

Metropolitan Touring C.A., fundamenta el tratamiento que da a los datos personales en los siguientes instrumentos legales:

Artículo 7.1 de la LOPDP: “[p]or consentimiento del titular para el tratamiento de sus datos personales, para una o varias finalidades específicas”
Artículo 7.2 de la LOPDP: “[q]ue sea realizado por el responsable del tratamiento en cumplimiento de una obligación legal”;
Artículo 7.5 de la LOPDP: “[p]ara la ejecución de medidas precontractuales a petición del titular o para el cumplimiento de obligaciones contractuales perseguidas por el responsable del tratamiento de datos personales, encargado del tratamiento de datos personales o por un tercero legalmente habilitado”;
Artículo 7.6 de la LOPDP: “[p]ara proteger intereses vitales del interesado o de otra persona natural, como su vida, salud o integridad”;
Artículo 7.7 de la LOPDP: “[p]ara el tratamiento de datos personales que consten en bases de datos de acceso público”; y
Código de Comercio Art. 37.-“[e]l comerciante o empresario deberá guardar y respaldar los documentos y la información relativa a los actos jurídicos que desarrolle, sean estos instrumentos públicos o privados, así como también los mensajes constantes en correos electrónicos que existen sobre aquellos; estos últimos se llevarán y tendrán los efectos que se prevé en el capítulo dedicado al comercio electrónico que consta en este Código”.
Normativa/ Obligación legal: Art. 697 del Código de Comercio & Art 33 de la Ley Orgánica de Protección de Datos Personales.
Normativa/ Obligación legal: Art 33 & 7 numeral 1 Ley Orgánica de Tratamiento de Datos Personales.
Normativa/ Obligación legal: Artículos 319 Ley de Compañías.
Normativa/ Obligación legal: Código de Comercio Artículo 691.

2. ALCANCE DE ESTA POLÍTICA

Metropolitan Touring C.A., en adelante “METROPOLITAN TOURING” o el “Responsable y/o Encargado del Tratamiento”), en cumplimiento con los principios de juridicidad, lealtad y transparencia recogidos en la Ley Orgánica de Protección de Datos Personales (en adelante la “LOPDP”), pone a disposición el presente instrumento a efecto de llevar a cabo el tratamiento de sus datos personales, y a fin de garantizar el derecho constitucional de protección de los mismos.
El presente instrumento se aplica a todo tratamiento de datos personales de Clientes o terceros con los que Metropolitan Touring C.A. establezca o mantenga una relación de oferta o prestación de servicios.

TIPO DE TRATAMIENTO EMPLEADO

Con el fin de poder brindar el servicio a los clientes o terceros de METROPOLITAN TOURING C.A. (en adelante los “Titulares”), es necesario que el Responsable y/o Encargado del Tratamiento trate datos, ya sea de manera automatizada o no (tratamiento mixto), y obtenga, recolecte, clasifique, almacene, registre, utilice, extraiga, consulte, visualice, o transfiera, y en general, trate los datos personales de los titulares, de conformidad a lo permitido en la LOPDP.

El tratamiento que realiza METROPOLITAN TOURING C.A. es considerado a “gran escala”, por lo que el Responsable y/o Encargado del Tratamiento ha tomado todas las medidas organizativas, jurídicas y técnicas para salvaguardar la confidencialidad, integridad y disponibilidad de los datos.

Dependiendo del servicio que METROPOLITAN TOURING C.A. brinde a los Titulares, el Responsable del Tratamiento y/o Encargado podrá tratar las siguientes categorías de datos:

Datos de identificación y contacto.
Datos sobre características físicas.
Datos biométricos.
Datos laborales.
Datos académicos.
Datos patrimoniales / financieros
Datos migratorios.
Datos sobre pasatiempos, entretenimiento y diversión.
Datos sobre género, ideología, creencias religiosas, creencias filosóficas y/o políticas.
Datos de salud.
Datos de origen étnico o racial.

Tanto los tipos de tratamiento como la categoría de datos son ejemplificativos, por lo que los tipos de tratamiento y las categorías de datos serán determinados en cada caso, y dependiendo del servicio que los Titulares adquieran o accedan para cada uno de los fines establecidos por METROPOLITAN TOURING C.A.

3. DEFINICIONES

Para los efectos de la aplicación de la presente Ley se establecen las siguientes definiciones:

Autoridad de Protección de Datos Personales:

Autoridad pública independiente encargada de supervisar la aplicación de la presente ley, reglamento y resoluciones que ella dicte, con el fin de proteger los derechos y libertades fundamentales de las personas naturales, en cuanto al tratamiento de sus datos personales.

Anonimización:

La aplicación de medidas dirigidas a impedir la identificación o reidentificación de una persona natural, sin esfuerzos desproporcionados.

Base de datos o fichero:

Conjunto estructurado de datos cualquiera que fuera la forma, modalidad de creación, almacenamiento, organización, tipo de soporte, tratamiento, procesamiento, localización o acceso, centralizado, descentralizado o repartido de forma funcional o geográfica.

Consentimiento:

Manifestación de la voluntad libre, específica, informada e inequívoca, por el que el titular de los datos personales autoriza al responsable del tratamiento de los datos personales a tratar los mismos.

Dato biométrico:

Dato personal único, relativo a las características físicas o fisiológicas, o conductas de una persona natural que permita o confirme la identificación única de dicha persona, como imágenes faciales o datos dactiloscópicos, entre otros.

Dato genético:

Dato personal único relacionado a características genéticas heredadas o adquiridas de una persona natural que proporcionan información única sobre la fisiología o salud de un individuo.

Dato personal:

Dato que identifica o hace identificable a una persona natural, directa o indirectamente.

Datos personales crediticios:

Datos que integran el comportamiento económico de personas naturales, para analizar su capacidad financiera.

Datos relativos a la salud:

Datos personales relativos a la salud física o mental de una persona, incluida la prestación de servicios de atención sanitaria, que revelen información sobre su estado de salud.

Datos sensibles:

Datos relativos a: etnia, identidad de género, identidad cultural, religión, ideología, filiación política, pasado judicial, condición migratoria, orientación sexual, salud, datos biométricos, datos genéticos y aquellos cuyo tratamiento indebido pueda dar origen a discriminación, atenten o puedan atentar contra los derechos y libertades fundamentales.

Delegado de protección de datos:

Persona natural encargada de informar al responsable o al encargado del tratamiento sobre sus obligaciones legales en materia de protección de datos, así como de velar o supervisar el cumplimiento normativo al respecto, y de cooperar con la Autoridad de Protección de Datos Personales, sirviendo como punto de contacto entre esta y la entidad responsable del tratamiento de datos.

Destinatario:

Persona natural o jurídica que ha sido comunicada con datos personales.

Elaboración de perfiles:

Todo tratamiento de datos personales que permite evaluar, analizar o predecir aspectos de una persona natural para determinar comportamientos o estándares relativos a: rendimiento profesional, situación económica, salud, preferencias personales, intereses, habilidad, ubicación, movimiento físico de una persona, entre otros.

Encargado del tratamiento de datos personales:

Persona natural o jurídica, pública o privada, autoridad pública, u otro organismo que solo o conjuntamente con otros trate datos personales a nombre y por cuenta de un responsable de tratamiento de datos personales.

Entidad Certificadora:

Entidad reconocida por la Autoridad de Protección de Datos Personales, que podrá, de manera no exclusiva, proporcionar certificaciones en materia de protección de datos personales.

Fuente accesible al público:

Bases de datos que pueden ser consultadas por cualquier persona, cuyo acceso es público, incondicional y generalizado.

Responsable de tratamiento de datos personales:

Persona natural o jurídica, pública o privada, autoridad pública, u otro organismo, que solo o conjuntamente con otros decide sobre la finalidad y el tratamiento de datos personales.

Sellos de protección de datos personales:

Acreditación que otorga la entidad certificadora al responsable o al encargado del tratamiento de datos personales, de haber implementado mejores prácticas en sus procesos, con el objetivo de promover la confianza del titular, de conformidad con la normativa técnica emitida por la Autoridad de Protección de Datos Personales.

Seudonimización:

Tratamiento de datos personales de manera tal que ya no puedan atribuirse a un titular sin utilizar información adicional, siempre que dicha información adicional, figure por separado y esté sujeta a medidas técnicas y organizativas destinadas a garantizar que los datos personales no se atribuyan a una persona física identificada o identificable.

Titular:

Persona natural cuyos datos son objeto de tratamiento.

Transferencia o comunicación:

Manifestación, declaración, entrega, consulta, interconexión, cesión, transmisión, difusión, divulgación o cualquier forma de revelación de datos personales realizada a una persona distinta al titular, responsable o encargado del tratamiento de datos personales. Los datos personales que comunique deben ser exactos, completos y actualizados.

Tratamiento:

Cualquier operación o conjunto de operaciones realizadas sobre datos personales, ya sea por procedimientos técnicos de carácter automatizado, parcialmente automatizado o no automatizado, tales como: la recogida, recopilación, obtención, registro, organización, estructuración, conservación, custodia, adaptación, modificación, eliminación, indexación, extracción, consulta, elaboración, utilización, posesión, aprovechamiento, distribución, cesión, comunicación o transferencia, o cualquier otra forma de habilitación de acceso, cotejo, interconexión, limitación, supresión, destrucción y, en general, cualquier uso de datos personales.

Vulneración de la seguridad de los datos personales:

Incidente de seguridad que afecta la confidencialidad, disponibilidad o integridad de los datos personales.

4. SUMMARY OF DATA COLLECTED AND PROCESSED

Metropolitan Touring C.A., recopila y trata los siguientes datos personales:

DATOS ACADÉMICOS

Carta de admisión de los estudios
Copias de títulos / Acta de grado
Certificado de estudios

DATOS BIOMÉTRICOS

Huellas dactilares de los 10 dedos de las manos (para mayores de 12 años)

DATOS DE IDENTIFICACIÓN Y CONTACTO

Correo Electrónico
Dirección
Edad
Fecha de Nacimiento
Nombres y Apellidos
Número de Identificación (Cédula/Pasaporte)
Número Telefónico
Copia de documento de Identificación (Cédula/Pasaporte)
Copia de papeleta de votación
Copia de partida de matrimonio
Copia de partida de nacimiento
Estado Civil
Nacionalidad
País de Residencia
Pasaporte
Certificado de Empadronamiento
Permisos de salida (menores de edad)
Acta de manifestación
Libro de familia
Ciudad de Residencia
Copia del NIE
Número de Pasaporte

DATOS DE SALUD

Certificado de Sanitario

DATOS LABORALES

Actividad Laboral / Cargo
Certificado Laboral
Roles de Pago
Contrato de Trabajo

DATOS MIGRATORIOS

Reserva aérea
Copia de la reserva de hotel
Copia de la reserva de vuelo
Copia de visas otorgadas anteriormente
Fecha de inicio de viaje
Fecha de fin de viaje
País de ingreso
Países de destino

DATOS PATRIMONIALES / FINANCIEROS

Acta de constitución en empresas en las que tiene participación
Certificados bancarios
Copia de declaraciones del IVA e Impuesto a la renta
Estado de cuenta de tarjetas de crédito
Estados de cuenta bancarios
Matrícula de auto
Registro de pago de impuesto predial
Sueldo / Ingreso Mensual
Comprobantes de giros al Ecuador
Mecanizado del IESS de jubilación

DATOS SOBRE CARACTERÍSTICAS FÍSICAS

Fotografía
Videos de vigilancia

DATOS SOBRE GÉNERO, IDEOLOGÍA, CREENCIA RELIGIOSAS, FILOSÓFICAS Y/O POLÍTICAS

Certificado de antecedentes penales (solo para mayores de edad)
Género

5. RIGHTS OF THE OWNER

Metropolitan Touring C.A., informa que mediante la ley orgánica de protección de datos otorga ciertos derechos a los interesados. En términos generales, usted tiene, o puede tener, el derecho (como se establece con más detalle en las leyes de protección de datos aplicables) a:

Derecho a la información.

El titular de los datos personales tiene el derecho a ser informado conforme los principios de lealtad y transparencia por cualquier medio.

Derecho de acceso.

El titular de los datos personales tiene el derecho a conocer y obtener, gratuitamente de Metropolitan Touring C.A., acceso a todos sus datos personales y a la información detallada en la presente política, sin necesidad de presentar justificación alguna.

Derecho rectificación y actualización.

El titular de los datos personales tiene el derecho a obtener de Metropolitan Touring C.A., la rectificación y actualización de sus datos inexactos o incompletos, presentando los justificativos del caso, cuando sea pertinente.

Derecho de eliminación.

El titular de los datos personales tiene el derecho a que Metropolitan Touring C.A., suprima sus datos personales cuando:

El tratamiento no cumpla con los principios establecidos en la presente ley;
El tratamiento no sea necesario o pertinente para el cumplimiento de la finalidad;
Los datos personales hayan cumplido con la finalidad para la cual fueron recogidos o tratados;
Haya vencido el plazo de conservación de los datos personales;
El tratamiento afecte derechos fundamentales o libertades individuales;
Revoque el consentimiento prestado o señale no haberlo otorgado para uno o varios fines específicos, sin necesidad de que medie justificación alguna; o,
Exista obligación legal.

No obstante, este derecho no es ilimitado, de tal forma que puede ser factible no proceder a la eliminación cuando el tratamiento sea necesario para el ejercicio de la libertad de expresión e información, para el cumplimiento de una obligación legal, para el cumplimiento de una misión realizada en interés público o en el ejercicio de poderes públicos conferidos al responsable, por razones de interés público, en el ámbito de la salud pública, con fines de archivo de interés público, fines de investigación científica o histórica o fines estadísticos, o para la formulación, el ejercicio o la defensa de reclamaciones.

Metropolitan Touring C.A., estará obligado a bloquear los datos cuando proceda a su rectificación o eliminación. El bloqueo de los datos consiste en la identificación y reserva de los mismos, adoptando medidas técnicas y organizativas, para impedir su tratamiento, incluyendo su visualización, excepto para la puesta a disposición de los datos a las autoridades de protección de datos, para la exigencia de posibles responsabilidades derivadas del tratamiento y solo por el plazo de prescripción de las mismas.

Derecho de oposición.

El titular de los datos personales tiene el derecho a oponerse o negarse a que Metropolitan Touring C.A., realice un tratamiento de los datos personales en los siguientes casos:

No se afecten derechos y libertades fundamentales de terceros, la ley se lo permita y no se trate de información pública, de interés público o cuyo tratamiento está ordenado por la ley.
El tratamiento de datos personales tenga por objeto la mercadotecnia directa; el interesado tendrá derecho a oponerse en todo momento al tratamiento de los datos personales que le conciernan, incluida la elaboración de perfiles; en cuyo caso los datos personales dejarán de ser tratados para dichos fines.
Cuando no sea necesario su consentimiento para el tratamiento como consecuencia de la concurrencia de un interés legítimo, previsto en el artículo 7 de la Ley Orgánica de Protección de Datos Personales, y se justifique en una situación concreta personal del titular, siempre que una ley no disponga lo contrario.

Metropolitan Touring C.A., dejará de tratar tus datos personales en estos casos, salvo que acreditemos motivos legítimos e imperiosos para que el tratamiento prevalezca sobre los intereses, derechos y libertades, o para la formulación, ejercicio o defensa de reclamaciones.

Derecho a la portabilidad.

El titular de los datos personales tiene el derecho a recibir de Metropolitan Touring C.A., sus datos personales en un formato compatible, actualizado, estructurado, común, inter-operable y de lectura mecánica, preservando sus características; o a transmitirlos a otros responsables.

El titular podrá solicitar que Metropolitan Touring C.A., realice la transferencia o comunicación de sus datos personales a otro responsable del tratamiento en cuanto fuera técnicamente posible. Si esto fuera posible Metropolitan Touring C.A., procederá a su eliminación, salvo que el titular disponga su conservación.

El responsable que ha recibido la información asumirá las responsabilidades contempladas en esta Ley. Para que proceda el derecho a la portabilidad de datos es necesario que se produzca al menos una de las siguientes condiciones:

1) Que el titular haya otorgado su consentimiento para el tratamiento de sus datos personales para uno o varios fines específicos. La transferencia o comunicación se hará entre responsables del tratamiento de datos personales cuando la operación sea técnicamente posible; en caso contrario los datos deberán ser transmitidos directamente al titular.

2) Que el tratamiento se efectúe por medios automatizados;

3) Que se trate de un volumen relevante de datos personales, según los parámetros definidos en el reglamento de la presente ley; o,

4) Que el tratamiento sea necesario para el cumplimiento de obligaciones y el ejercicio de derechos del responsable o encargado del tratamiento de datos personales, o del titular en el ámbito del derecho laboral y seguridad social.

No procederá este derecho cuando se trate de información inferida, derivada, creada, generada u obtenida a partir del análisis o tratamiento efectuado por Metropolitan Touring C.A., con base en los datos personales proporcionados por el titular, como es el caso de los datos personales que hubieren sido sometidos a un proceso de personalización, recomendación, categorización o creación de perfiles.

Para la transmisión de datos, cuando sea viable, se lo hará en formato XML, Excel o cualquier otro formato electrónico y canal comúnmente aceptado por el interlocutor designado por la entidad destinataria o responsable del tratamiento.

Derecho a la suspensión del tratamiento.

El titular de los datos personales tiene el derecho a recibir de Metropolitan Touring C.A., la suspensión del tratamiento de los datos, cuando se cumpla alguna de las condiciones siguientes:

1) Cuando el titular impugne la exactitud de los datos personales, mientras el responsable de tratamiento verifica la exactitud de los mismos;

2) El tratamiento sea ilícito y el interesado se oponga a la supresión de los datos personales y solicite en su lugar la limitación de su uso;

3) El responsable ya no necesite los datos personales para los fines del tratamiento, pero el interesado los necesite para la formulación, el ejercicio o la defensa de reclamaciones; y,

4) Cuando el interesado se haya opuesto al tratamiento en virtud del artículo 31 de la presente ley, mientras se verifica si los motivos legítimos del responsable prevalecen sobre los del interesado.

Derecho a no ser objeto de una decisión basada única o parcialmente en valoraciones automatizadas.

El titular de los datos personales tiene el derecho a no ser sometido a una decisión basada única o parcialmente en valoraciones que sean producto de procesos automatizados, incluida la elaboración de perfiles, que produzcan efectos jurídicos en él o que atenten contra sus derechos y libertades fundamentales, para lo cual podrá:

Solicitar una explicación motivada sobre la decisión tomada por Metropolitan Touring C.A., o encargado del tratamiento de datos personales;
Presentar observaciones;
Solicitar los criterios de valoración sobre el programa automatizado; o,
Solicitar a Metropolitan Touring C.A., sobre los tipos de datos utilizados y la fuente de la cual han utilizados y la fuente de la cual han sido obtenidos los mismos.
Impugnar la decisión ante Metropolitan Touring C.A., o encargado del tratamiento.

No se aplicará este derecho cuando:

La decisión es necesaria para la celebración o ejecución de un contrato entre el titular y Metropolitan Touring C.A., o encargado del tratamiento de datos personales;
Está autorizada por la normativa aplicable, orden judicial, resolución o mandato motivado de autoridad técnica competente, para lo cual se deberá establecer medidas adecuadas para salvaguardar los derechos fundamentales y libertades del titular; o,
Se base en el consentimiento explícito del titular.
La decisión no conlleve impactos graves o riesgos verificables para el titular.

Una vez que Metropolitan Touring C.A., recibe de parte del titular la solicitud para el ejercicio de los derechos establecidos en la presente política, se compromete a procesar la misma en un plazo de 15 días.

Metropolitan Touring C.A., se reserva el derecho de seguir tratando datos personales del titular, por lo que, no podrá ejercer los derechos de rectificación, actualización, eliminación, oposición, anulación y portabilidad, en los siguientes casos:

Si el solicitante no es el titular de los datos personales o su representante legal no se encuentre debidamente acreditado;
Cuando los datos son necesarios para el cumplimiento de una obligación legal o contractual;
Cuando los datos son necesarios para el cumplimiento de una orden judicial, resolución o mandato motivado de autoridad pública competente;
Cuando los datos son necesarios para la formulación, ejercicio o defensa de reclamos o recursos;
Cuando se pueda causar perjuicios a derechos o afectación a intereses legítimos de terceros y ello sea acreditado por el responsable de la base de datos al momento de dar respuesta al titular a su solicitud de ejercicio del derecho respectivo;
Cuando se pueda obstaculizar actuaciones judiciales o administrativas en curso, debidamente notificadas;
Cuando los datos son necesarios para ejercer el derecho a la libertad de expresión y opinión;
Cuando los datos son necesarios para proteger el interés vital del interesado o de otra persona natural;
En los casos en los que medie el interés público, sujeto al cumplimiento de los estándares internacionales de derechos humanos aplicables a la materia, al cumplimiento de los principios de esta ley y a los criterios de legalidad, proporcionalidad y necesidad;
En el tratamiento de datos personales que sean necesarios para el archivo de información que constituya patrimonio del Estado, investigación científica, histórica o estadística.

6. DATA PROCESSED, TREATMENTS AND PURPOSES

6.1 REVISIÓN DOCUMENTAL PARA LA OBTENCIÓN DE LA VISA SCHENGEN

FUENTES DE OBTENCIÓN:

Aplicante
Familiares
BLS

FINALIDAD DEL TRATAMIENTO	Emisión de facturas a nombre de los clientes
TITULAR DE LOS DATOS	Persona a la que se le factura
TRATAMIENTOS A EFECTUAR	Almacenamiento / Registro, Consulta / Visualización, Obtención / Recolección, Utilización / Uso
DATOS TRATADOS	Correo Electrónico, Dirección, Edad, Fecha de Nacimiento, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte)
FINALIDAD DEL TRATAMIENTO	Generación de cita desde la página web de BLS para visado Shengen
TITULAR DE LOS DATOS	Solicitante de visa
TRATAMIENTOS A EFECTUAR	Consulta / Visualización
DATOS TRATADOS	Correo Electrónico, Fecha de Nacimiento, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa de estudio tipo D
TITULAR DE LOS DATOS	Solicitante de visa, Garante, Acompañante en viaje
TRATAMIENTOS A EFECTUAR	Almacenamiento / Registro, Clasificación, Consulta / Visualización, Obtención / Recolección, Transferencia, Extracción
DATOS TRATADOS	Carta de admisión de los estudios, Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Copias de títulos / Acta de grado, Fotografía, Género, Reserva aérea, Acta de constitución en empresas en las que tiene participación, Actividad Laboral / Cargo, Certificado Laboral, Certificados bancarios, Copia de declaraciones del IVA e Impuesto a la renta, Estado de cuenta de tarjetas de crédito, Estados de cuenta bancarios, Matrícula de auto, Registro de pago de impuesto predial, Roles de Pago, Sueldo / Ingreso Mensual, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Copia de partida de matrimonio, Copia de partida de nacimiento, Correo Electrónico, Dirección, Estado Civil, Fecha de Nacimiento, Nacionalidad, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Pasaporte
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa de familiares de ciudadanos de la unión europea (ESC) (tipo C)
TITULAR DE LOS DATOS	Reagrupante, Solicitante de visa
TRATAMIENTOS A EFECTUAR	Almacenamiento / Registro, Clasificación, Consulta / Visualización, Extracción, Obtención / Recolección, Transferencia
DATOS TRATADOS	Certificado de Empadronamiento, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Fotografía, Género, Huellas dactilares de los 10 dedos de las manos (para mayores de 12 años), Permisos de salida (menores de edad), Acta de manifestación, Comprobantes de giros al Ecuador, Copia de partida de matrimonio, Copia de partida de nacimiento, Libro de familia, Reserva aérea
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa de Recuperación de residencia larga duración Fase 2 (tipo D)
TITULAR DE LOS DATOS	Solicitante de visa
TRATAMIENTOS A EFECTUAR	Clasificación, Consulta / Visualización, Obtención / Recolección, Transferencia, Almacenamiento / Registro, Extracción
DATOS TRATADOS	Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Correo Electrónico, Dirección, Estado Civil, Fecha de Nacimiento, Fotografía, Género, Nacionalidad, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Pasaporte
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa de residencia sin fines de lucro (tipo D)
TITULAR DE LOS DATOS	Solicitante de visa, Cónyugue del Solicitante, Descendiente del Solicitante
TRATAMIENTOS A EFECTUAR	Clasificación, Consulta / Visualización, Obtención / Recolección, Transferencia, Almacenamiento / Registro, Extracción
DATOS TRATADOS	Acta de constitución en empresas en las que tiene participación, Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Certificados bancarios, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Copia de partida de matrimonio, Copia de partida de nacimiento, Correo Electrónico, Dirección, Estado Civil, Estado de cuenta de tarjetas de crédito, Estados de cuenta bancarios, Fecha de Nacimiento, Fotografía, Género, Matrícula de auto, Mecanizado del IESS de jubilación, Nacionalidad, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Pasaporte, Registro de pago de impuesto predial, Reserva aérea
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa por agrupación en régimen general (tipo D)
TITULAR DE LOS DATOS	Reagrupante, Solicitante de visa
TRATAMIENTOS A EFECTUAR	Almacenamiento / Registro, Clasificación, Consulta / Visualización, Extracción, Obtención / Recolección, Transferencia
DATOS TRATADOS	Ciudad de Residencia, Correo Electrónico, Dirección, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico. Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Estado Civil, Fecha de Nacimiento, Fotografía, Género, Nacionalidad, Pasaporte, Reserva aérea
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa por trabajo por cuenta ajena, por contratación en origen o profesionales altamente cualificados tipo D
TITULAR DE LOS DATOS	Solicitante de visa, Acompañante en viaje
TRATAMIENTOS A EFECTUAR	Clasificación, Consulta / Visualización, Obtención / Recolección, Transferencia, Almacenamiento / Registro, Extracción
DATOS TRATADOS	Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Contrato de Trabajo, Fotografía, Género, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Copia de partida de matrimonio, Copia de partida de nacimiento, Correo Electrónico, Dirección, Estado Civil, Fecha de Nacimiento, Nacionalidad, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Pasaporte
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visas tipo C
TITULAR DE LOS DATOS	Anfitrión Residente, Familiares en primer grado del Solicitante de visa, Solicitante de visa, Garante
TRATAMIENTOS A EFECTUAR	Consulta / Visualización, Obtención / Recolección, Transferencia, Clasificación, Almacenamiento / Registro, Extracción
DATOS TRATADOS	Copia del NIE, Dirección, Nombres y Apellidos, Número Telefónico, Copia de documento de Identificación (Cédula/Pasaporte), Fecha de Nacimiento, Nacionalidad, Número de Identificación (Cédula/Pasaporte), Pasaporte, Certificado de estudios, Copia de la reserva de hotel, Copia de la reserva de vuelo, Copia de papeleta de votación, Copia de visas otorgadas anteriormente, Copias de títulos / Acta de grado, Correo Electrónico, Estado Civil, Fechas de viaje, Fotografía, Género, Huellas dactilares de los 10 dedos de las manos (para mayores de 12 años), País de ingreso, Países de destino, Acta de constitución en empresas en las que tiene participación, Actividad Laboral / Cargo, Certificado Laboral, Certificados bancarios, Copia de declaraciones del IVA e Impuesto a la renta, Estado de cuenta de tarjetas de crédito, Estados de cuenta bancarios, Matrícula de auto, Registro de pago de impuesto predial, Roles de Pago, Sueldo / Ingreso Mensual
FINALIDAD DEL TRATAMIENTO	Registro y pago de tasas consulares
TITULAR DE LOS DATOS	Solicitante de visa
TRATAMIENTOS A EFECTUAR	Almacenamiento / Registro, Consulta / Visualización, Obtención / Recolección
DATOS TRATADOS	Nombres y Apellidos, Número de Pasaporte

7. TRANSFER OF PERSONAL DATA

Debido a que el giro de negocio de Metropolitan Touring C.A., es la intermediación es poco viable especificar explícitamente a quien se enviaran los datos tratados del titular ya que la decisión de con que proveedor ir depende netamente del titular y puede variar mucho dependiendo del caso, por lo que en este caso se citará de manera general el tipo de empresa/embaja a la que se transfiere los datos, la cual será siempre seleccionada con autorización del titular.

REVISIÓN DOCUMENTAL PARA LA OBTENCIÓN DE LA VISA SCHENGEN
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa de estudio tipo D
TITULAR DE LOS DATOS	Solicitante de visa, Garante, Acompañante en viaje
DATOS TRANSFERIDOS	Carta de admisión de los estudios, Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Copias de títulos / Acta de grado, Fotografía, Género, Reserva aérea, Acta de constitución en empresas en las que tiene participación, Actividad Laboral / Cargo, Certificado Laboral, Certificados bancarios, Copia de declaraciones del IVA e Impuesto a la renta, Estado de cuenta de tarjetas de crédito, Estados de cuenta bancarios, Matrícula de auto, Registro de pago de impuesto predial, Roles de Pago, Sueldo / Ingreso Mensual, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Copia de partida de matrimonio, Copia de partida de nacimiento, Correo Electrónico, Dirección, Estado Civil, Fecha de Nacimiento, Nacionalidad, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Pasaporte
DESTINATARIO DE LOS DATOS PERSONALES	Consulado General de España
PAÍS	Ecuador
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa de familiares de ciudadanos de la unión europea (ESC) (tipo C)
TITULAR DE LOS DATOS	Reagrupante, Solicitante de visa
DATOS TRANSFERIDOS	Certificado de Empadronamiento, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Fotografía, Género, Huellas dactilares de los 10 dedos de las manos (para mayores de 12 años), Permisos de salida (menores de edad), Acta de manifestación, Comprobantes de giros al Ecuador, Copia de partida de matrimonio, Copia de partida de nacimiento, Libro de familia, Reserva aérea
DESTINATARIO DE LOS DATOS PERSONALES	Consulado General de España
PAÍS	Ecuador
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa de Recuperación de residencia larga duración Fase 2 (tipo D)
TITULAR DE LOS DATOS	Solicitante de visa
DATOS TRANSFERIDOS	Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Correo Electrónico, Dirección, Estado Civil, Fecha de Nacimiento, Fotografía, Género, Nacionalidad, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Pasaporte
DESTINATARIO DE LOS DATOS PERSONALES	Consulado General de España
PAÍS	Ecuador
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa de residencia sin fines de lucro (tipo D)
TITULAR DE LOS DATOS	Solicitante de visa, Cónyugue del Solicitante, Descendiente del Solicitante
DATOS TRANSFERIDOS	Acta de constitución en empresas en las que tiene participación, Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Certificados bancarios, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Copia de partida de matrimonio, Copia de partida de nacimiento, Correo Electrónico, Dirección, Estado Civil, Estado de cuenta de tarjetas de crédito, Estados de cuenta bancarios, Fecha de Nacimiento, Fotografía, Género, Matrícula de auto, Mecanizado del IESS de jubilación, Nacionalidad, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Pasaporte, Registro de pago de impuesto predial, Reserva aérea
DESTINATARIO DE LOS DATOS PERSONALES	Consulado General de España
PAÍS	Ecuador
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa por agrupación en régimen general (tipo D)
TITULAR DE LOS DATOS	Reagrupante, Solicitante de visa
DATOS TRANSFERIDOS	Ciudad de Residencia, Correo Electrónico, Dirección, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Estado Civil, Fecha de Nacimiento, Fotografía, Género, Nacionalidad, Pasaporte, Reserva aérea
DESTINATARIO DE LOS DATOS PERSONALES	Consulado General de España
PAÍS	Ecuador
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visa por trabajo por cuenta ajena, por contratación en origen o profesionales altamente cualificados tipo D
TITULAR DE LOS DATOS	Solicitante de visa, Acompañante en viaje
DATOS TRANSFERIDOS	Certificado de antecedentes penales (solo para mayores de edad), Certificado de Sanitario, Contrato de Trabajo, Fotografía, Género, Copia de documento de Identificación (Cédula/Pasaporte), Copia de papeleta de votación, Copia de partida de matrimonio, Copia de partida de nacimiento, Correo Electrónico, Dirección, Estado Civil, Fecha de Nacimiento, Nacionalidad, Nombres y Apellidos, Número de Identificación (Cédula/Pasaporte), Número Telefónico, Pasaporte
DESTINATARIO DE LOS DATOS PERSONALES	Consulado General de España
PAÍS	Ecuador
FINALIDAD DEL TRATAMIENTO	Recepción de documentación, respaldo en oficina, validación de forma presencial de la información, envío al consulado y entrega al titular (solo pasaporte) para la obtención de visas tipo C
TITULAR DE LOS DATOS	Anfitrión Residente, Familiares en primer grado del Solicitante de visa, Solicitante de visa, Garante
DATOS TRANSFERIDOS	Copia del NIE, Dirección, Nombres y Apellidos, Número Telefónico, Copia de documento de Identificación (Cédula/Pasaporte), Fecha de Nacimiento, Nacionalidad, Número de Identificación (Cédula/Pasaporte), Pasaporte, Certificado de estudios, Copia de la reserva de hotel, Copia de la reserva de vuelo, Copia de papeleta de votación, Copia de visas otorgadas anteriormente, Copias de títulos / Acta de grado, Correo Electrónico, Estado Civil, Fechas de viaje, Fotografía, Género, Huellas dactilares de los 10 dedos de las manos (para mayores de 12 años), País de ingreso, Países de destino, Acta de constitución en empresas en las que tiene participación, Actividad Laboral / Cargo, Certificado Laboral, Certificados bancarios, Copia de declaraciones del IVA e Impuesto a la renta, Estado de cuenta de tarjetas de crédito, Estados de cuenta bancarios, Matrícula de auto, Registro de pago de impuesto predial, Roles de Pago, Sueldo / Ingreso Mensual
DESTINATARIO DE LOS DATOS PERSONALES	Consulado General de España
PAÍS	Ecuador

8. CONSENT

Metropolitan Touring C.A., recibirá el consentimiento a través de diferentes mecanismos puestos a disposición por la compañía tales como:

EXPLÍCITO:

La manera de recibir el consentimiento de manera explícita será por medio de:

Formulario de google: En caso de atención presencial, uso de aplicaciones de chat y correo electrónico previo o en conjunto con el formulario siempre se adjuntará la política por medio de un link para recopilar el consentimiento.

Atención web: Por medio de la página web de Metropolitan Touring C.A., comunicando la política con un hipervínculo en la misma página donde se recopila el consentimiento.

Registro de evento: Si aplicara el caso, mediante un formulario web en la página de política de privacidad del evento en el momento del registro, en caso de no existir una página web del evento se escaneara un código QR que dirigirá a la política de privacidad de la organización.

Formulario manual: En caso de que la persona no tenga la facilidad tecnológica, Metropolitan Touring C.A., presentara la política con apoyo del asesor comercial y se procederá a recopilar el consentimiento en un formulario manual que el titular llenará.

TÁCITO:

Metropolitan Touring C.A., recibirá el consentimiento tácito enviando un correo conjuntamente con el link de la política de privacidad hasta 24 horas después de recibir el dato hacer tratado en los siguientes casos:

Al Recibir una transferencia del responsable de recolectar los datos.
Cuando se accede a los datos por medio de herramientas OBT.
Cuando existan cambios sustanciales en la política de privacidad.

Cuando se realicen eventos y/o servicios específicos que Metropolitan Touring C.A., ofrezca en su momento, se enviará en conjunto con el link de la política de privacidad el aviso de privacidad donde se recibirá el consentimiento.

9. STORAGE TIME AND WITHDRAWAL OF TREATMENT

Una vez finalizado el tratamiento / contrato, los datos serán conservados, a los únicos efectos de cumplir las obligaciones legales requeridas por las entidades públicas ecuatorianas y para la formulación, ejercicio o defensa de reclamaciones, durante el plazo de prescripción de las acciones derivadas en la Ley.

Los datos personales tratados se conservarán mientras sean necesarios para cumplir con las finalidades de tratamiento indicadas en el presente documento o mientras el Pasajero y/o Aplicante y/o Beneficiario y/o Cliente no retire su consentimiento.

Si el titular quisiera ejercer el derecho a la eliminación, los datos serán ilegibles o irreconocibles de forma definitiva y segura dentro de 15 días de recibida la solicitud por parte del titular de los datos, a menos que exista una obligación legal de conservación que indique que no pueden suprimirse en un tiempo menor al indicado por esta ley.

10. PERSONAL DATA SECURITY

Con la finalidad de proteger los datos personales del cliente Metropolitan Touring C.A., cuenta con un sistema de gestión de seguridad de información en base a la norma ISO/IEC 27001:2022, el cual considera dentro de sus principales requisitos los siguientes controles:

Control de acceso a la información, autenticación segura, gestión de vulnerabilidades técnicas, gestión de configuración, enmascaramiento de datos, prevención de fuga de datos, respaldo de la información, control de seguridad de redes, seguridad de aplicaciones desde la concepción y diseño del proyecto entre otras.

11. PRIVACY OF BOYS, GIRLS AND ADOLESCENTS

Metropolitan Touring C.A., tratará datos de menores de edad siempre y cuando este tratamiento respete el interés superior de los niños, niñas y adolescentes y asegure el respeto de sus derechos fundamentales.

Cumplidos los anteriores requisitos, Metropolitan Touring C.A., solamente tratará los datos personales de niños, niñas y adolescentes cuando su representante legal haya prestado su consentimiento para las actividades y servicios que Metropolitan Touring C.A., ofrece a sus clientes.

Metropolitan Touring C.A., colocará seguridades adicionales como la encriptación del lugar donde se encuentran los datos, pixelado del rostro en la foto, restricción del acceso a los datos a personas específicas, la no difusión de los nombres entre otros.

En el caso de que el representante legal de los niños, niñas o adolescente deseen información o ejercer los derechos de los mismos, puede contactarse con el delegado de protección de datos personales cuya información se encuentra en el apartado “CONTACTOS DE LA ORGANIZACIÓN”.

Con la finalidad de poder brindar su servicio, Metropolitan Touring C.A., podría transferir datos recopilados de niños, niñas o adolescentes a terceros para poder gestionar los tratamientos y finalidades definidos en el apartado “DATOS TRATADOS, TRATAMIENTOS Y FINALIDADES”, esta transferencia se realizará obteniendo el consentimiento del representante legal.

12. PRIVACY OF PEOPLE WITH DISABILITIES

Metropolitan Touring C.A., tratará datos de personas con discapacidad siempre y cuando este tratamiento respete el interés superior de los mismos y asegure el respeto de sus derechos fundamentales.

Cumplidos los anteriores requisitos, Metropolitan Touring C.A., solamente tratará los datos personales de personas con discapacidad cuando haya prestado su consentimiento para las actividades y servicios que Metropolitan Touring C.A., ofrece a sus clientes.

Metropolitan Touring C.A., colocará seguridades adicionales como la no difusión del grado de discapacidad, condiciones médicas y nombres, restricción del acceso a los datos a personas específicas, entre otros.

En el caso de que la persona con discapacidad o su representante legal desee información o ejercer los derechos de la misma, puede contactarse con el delegado de protección de datos personales cuya información se encuentra en el apartado “CONTACTOS DE LA ORGANIZACIÓN”.

Con la finalidad de poder brindar su servicio, Metropolitan Touring C.A., podría transferir datos recopilados de personas con discapacidad a terceros para poder gestionar los tratamientos y finalidades definidos en el apartado “DATOS TRATADOS, TRATAMIENTOS Y FINALIDADES”, esta transferencia se realizará obteniendo el consentimiento del representante legal o la persona con discapacidad.

13. PRIVACIDAD DE PERSONAS CON DISCAPACIDAD

Para el ejercicio de los derechos detallados en la política o reclamación sobre el tratamiento de datos personales, los titulares deberán comunicarse con nosotros de lunes a viernes en los horarios de 8:00-13:00 pm y 14:00-17:00pm a los siguientes contactos:

13.1 DATOS DE CONTACTO DEL DELEGADO DE PROTECCIÓN DE DATOS PERSONALES

Dirección: Av. Río Amazonas 1014, Quito 170135, Ed. La Previsora, Torre A, Piso 6, Ofic. 602.

Teléfono: (593-2)392-2164; (593-9)9 562-2011

Correo electrónico: delegado.protecciondedatos@mtagencia.com

13.2 IDENTIDAD Y DATOS DE CONTACTO DE LA ORGANIZACIÓN

Dirección: Av. Río Amazonas 1014, Quito 170135, Ed. La Previsora, Torre A, Piso 6, Ofic. 602.

Teléfono: (593-2)392-2164

Ruc: 1790022838001

Para apoyo a sus consultas y para obtener más información sobre Metropolitan Touring C.A., puede referirse a los apartados de “Somos Metropolitan Touring” o “Contacto” en el sitio web https://metropolitantouring.com.ec.

14. CAMBIOS EN ESTA POLÍTICA

Metropolitan Touring C.A., puede actualizar su Política de Privacidad cuando:

Las entidades a las que transfiere datos personales cambien.
Cuando Metropolitan Touring C.A., cambie, aumente o quite servicios que pone a disposición del cliente.
Cuando existan cambios en la legislación nacional.
Si se crea o se quita un dato tratado, así como el tratamiento a efectuar.

En caso de realizarse estos cambios, se compromete a notificar al titular para recibir el consentimiento de este cambio o política actualizada a través de los mecanismos propuestos en esta política.

Last update: January 2025

Metropolitan Touring Travel Agency informs you about its Privacy Policy regarding the treatment and protection of personal data of users and customers that may be obtained by browsing or purchasing services through the website www.metropolitantouring.com.ec

On the protection of personal data, the Owner guarantees compliance with current regulations.

Terms and conditions when making purchases of our services website implies the acceptance of this Privacy Policy

Identity of the person in charge:

Owner: Metropolitan Touring Agencia de Viajes
Headquarters: Av. Simón Bolivar y, Vía a Nayón. Ekopark. Torre 2, piso 5.
E-mail: info@metropolitantouring.com.ec
Website: metropolitantouring.com.ec

Applied in data processing Principles

Processing your personal data, the Holder will apply the following principles that comply with the requirements of international data protection regulations:

Legality, loyalty and transparency Principle: For processing, Owner will always require consent of your personal data, it could be for one or more specific purposes, you will always be informed in advance with absolute transparency.

Data minimization Principle: Only the data strictly necessary for the purpose or purposes that are requested will be asked by The Owner.

Conservation period limit Principle: Data will be kept for the time strictly necessary for the purpose or purposes they were requested for.

Corresponding conservation period according to the purpose will be informed by the Owner. Subscriptions will be deactivated when users and clients voluntarily become inactive from subscriptions.

Integrity and confidentiality Principle: Security, confidentiality and integrity of your data is guaranteed, by the way we treat the information.

The owner takes necessary precautions to avoid unauthorized access or improper use of its users’ data by third parties.

Obtaining personal data

You do not need to provide any personal information to navigate through www.metropolitantouring.com.ec. Personal data you do provide in the following cases:

By contacting through the contact forms or sending an email.

By signing up for a subscription form or a promotion delivery service that the Owner manages.

Confirming a purchase for the electronic invoicing process.

Through the payment button by confirming the purchase transaction. This information will only be used at the time of the transaction and will not be managed by the website or used or stored by the Owner.

Your rights

Regarding your personal data, the Owner informs you that you have the right to:

Request access to stored data.
Request a correction or cancellation.
Request the limitation of your treatment.

The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly from the Owner, which means that any client, subscriber or user who has provided their data at any time can contact the Owner and request information about the data that you have stored and how you have obtained them, request their rectification, limit their use or request the cancellation of such data.

You have to send an email to info@metropolitantouring.com.ec, to make use of your rights of access, rectification, cancellation and elimination, later a person assigned by the Owner will contact you to help you in the management of your request.

Processing of personal data purpose

You are providing personal information for which the Owner is responsable, when you connect to the website to send an email to the Owner. This information may include personal data such as your IP address, name and surname, physical address, email address, telephone number, and other information. By providing this information, you give your consent for your information to be collected, used, managed and stored by Metropolitan Touring Travel Agency, only as described in this Privacy Policy.

Depending on the information capture system, the treament of personal data and the purpose of the treatment are different by the Owner.

Contact forms: Requests of personal data by the Owner among which may be: names and surnames, email address and telephone number in order to answer your queries. Depending on the information capture system, the treament of personal data and the purpose of the treatment are different by the Owner.

For example, The Owner uses this data to respond to your messages, doubts, complaints, comments or concerns that you may have regarding the information included on the website, the services provided through the website, the treatment of your personal data, questions regarding the legal texts included in the website, as well as any other query you may have that is not subject to the conditions of the website or the purchase of any service.

Suscription form content: the following personal information: names and surnames, email address, telephone number will be requested by the Owner to manage the list of subscriptions, send newsletters, promotions and special offers.

There are other purposes for which the Owner processes your personal data:

To guarantee compliance with the conditions contained in the Legal Notice and in the applicable law. This may include the development of tools and algorithms that help this website to ensure the confidentiality of the personal data.

To support and improve the services offered by this website.

To analyze navigation. The Owner collects other non-identifying data that are obtained through the use of cookies that are downloaded to your computer when you browse the website, whose characteristics and purposes are detailed in the Cookies policy.

To manage social networks. The Owner has a presence on social networks. If you become a follower on the Owner’s social networks, the treatment of personal data will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network that is appropriate in each case and that you have previously accepted.

You can consult the privacy policies of the main social networks in these links:

Facebook: https://www.facebook.com/mtagenciadeviajes
Twitter: https://twitter.com/MetroTouringEC
Linkedin: https://ec.linkedin.com/company/metropolitan-touring-agencia-de-viajes
Instagram: https://www.instagram.com/metropolitantouringec/

The Owner will process your personal data in order to correctly manage their presence in the social network, inform you of their activities, products or services, as well as for any other purpose that the regulations of social networks allow.

The profiles of followers on social networks, in no case will be used by the owner to send advertising individually.

Personal data security

To protect your personal data, the Owner takes all reasonable precautions and follows the best practices in the industry to prevent their loss, misuse, improper access, disclosure, alteration or destruction of them.

The website is hosted on Amazon Web Services. The security of your data is guaranteed, since they take all the necessary security measures for it. For more information you can check their privacy policy

Other website contents

Pages of this website may include embedded content (eg videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed an additional third-party tracking code, and monitor your interaction using their code.

Cookies policy

To the properly function for this website you need to use cookies, this information is stored in your web browser.

All the information regarding the obtaining policy, the purpose and the treatment of cookies you can consult on the Cookies Policy page.

Data processing legitimation

The processing of your data legal basis is: Consent.

You have to accept this Privacy Policy to contact the Owner, to subscribe to a promotion delivery service or make comments on this website.

Personal data categories

Personal data categories that the Owner deals with are

Categories of personal data

The categories of personal data that the Owner deals with are:

Identification data

Preservation of personal data

Personal data provided by you will be kept by the owner until you request its elimination.

Personal data addressee

Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (“Google”). You will find more information at: https://analytics.google.com

Google Analytics uses “cookies”, which are text files located on your computer, to help the Owner analyze the use made by users of the website. Cookie informaction generated about the use of the website (including your IP address) will be directly transmitted and filed by Google on servers in the United States.

DoubleClick by Google is a set of advertising services provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (“Google”). You will find more information at: https://www.doubleclickbygoogle.com

DoubleClick uses “cookies”, which are text files placed on your computer and which serve to increase the relevance of advertisements related to your recent searches. The Google Privacy Policy explains how Google manages your privacy with regard to the use of cookies and other information.

You can also see a list of the types of cookies used by Google and its partners and all the information related to their use of advertising cookies.

Web navigation

When browsing www.metropolitantouring.com.ec non-identifying data may be collected, which may include the IP address, geolocation, a record of how the services and sites are used, browsing habits and other data that cannot be used for identify you.

This website uses the following third-party analysis services:

Google Analytics
DoubleClick by Google

The Owner uses the information obtained to obtain statistical data, analyze trends, administer the site, study browsing patterns and to collect demographic information.

Personal data accuracy and veracity

You commit yourself that the data provided to the Owner are correct, complete, exact and current, as well as to keep them duly updated.

You are solely responsible, as a user of the website for the veracity and correctness of the data you send to the site, exonerating the Owner of any responsibility in this regard.

Acceptance and consent

You, as a user of the website declare that you have been informed of the conditions on the protection of personal data, you accept and consent to the treatment thereof by the Owner in the manner and for the purposes indicated in this Privacy Policy.

Cancellation

The exercise of your rights does not include any data that the Owner is obliged to keep for administrative, legal or security purposes.

Privacy Policy Changes

The right to modify this Privacy Policy to adapt it to new legislation or jurisprudence, as well as to industry practices is reserved to the Owner.

These policies will be in effect until they are modified by others duly published.

PRIVACY POLICY

1.1 BUSINESS REVIEW

1.2 LEGAL BASIS AND LEGITIMATE INTEREST

6.1 OPENNESS AND LOYALTY

6.2 VISA ADVICE

6.3 COORDINATION OF MEDICAL EVENTS AND EVENT ORGANIZATION

6.4 ADMINISTRATIVE MANAGEMENT

6.5 FINANCIAL MANAGEMENT

6.6 MARKETING

6.7 AIR TICKETS SALES

6.8 ALL PROCESSES

6.9 OTHER PROCESSES

6.10 TRAVEL INSURANCE SALE

14.1 CONTACT DETAILS OF THE PERSONAL DATA PROTECTION OFFICER

14.2 IDENTITY AND CONTACT INFORMATION OF THE ORGANIZATION

1.1 BUSINESS REVIEW

1.2 LEGAL BASIS AND LEGITIMATE INTEREST

6.1 ADMINISTRATIVE MANAGEMENT

6.2 FINANCIAL MANAGEMENT

6.3 MARKETING

6.4 SAFETY, HEALTH AND ENVIRONMENT

6.5 ALL PROCESSES

14.1 CONTACT DETAILS OF THE PERSONAL DATA PROTECTION OFFICER

14.2 IDENTITY AND CONTACT INFORMATION OF THE ORGANIZATION

1.1 BUSINESS REVIEW

1.2 LEGAL BASIS AND LEGITIMATE INTEREST

6.1 ADMINISTRATIVE MANAGEMENT

6.2 FINANCIAL MANAGEMENT

6.3 MARKETING

6.4 SAFETY, HEALTH AND ENVIRONMENT

6.5 HUMAN TALENT

6.6 ALL PROCESSES

14.1 CONTACT DETAILS OF THE PERSONAL DATA PROTECTION OFFICER

14.2 IDENTITY AND CONTACT INFORMATION OF THE ORGANIZATION

1.1 RESEÑA EMPRESARIAL

1.2 BASE LEGAL E INTERÉS LEGÍTIMO

6.1 REVISIÓN DOCUMENTAL PARA LA OBTENCIÓN DE LA VISA SCHENGEN

13.1 DATOS DE CONTACTO DEL DELEGADO DE PROTECCIÓN DE DATOS PERSONALES

13.2 IDENTIDAD Y DATOS DE CONTACTO DE LA ORGANIZACIÓN

Part of the future group (Ecuador)

Certifications

Members of

Follow us on:

Ejercicio de sus derechos