Please take a moment to read our privacy and payment policies. They are here to ensure harmony between you and us throughout your experience.
The website https://surcostours.com/ is an information and tourism service management platform, used for coordinating and booking tours offered by Surcos Tours.
The organization is committed to protecting the personal data of users and to the responsible, lawful, and transparent use of information collected through this website, in accordance with applicable personal data protection regulations.
This Privacy Policy describes how the personal data of website users is collected, used, stored and protected.
The website collects only the personal data necessary for the provision of tourism services and associated administrative management, which may include:
No unnecessary sensitive data or information unrelated to the stated purposes is collected.
Personal data collected is used exclusively for the following purposes:
Under no circumstances will personal data be used for purposes other than those described here without the express consent of the user.
Surcos Tours does not sell, rent or commercialize the personal data of users.
Personal data may only be shared with third parties when strictly necessary for the proper provision of the service, for example:
In all cases, such third parties act as data processors and are subject to confidentiality and information security obligations. Data may also be communicated when a legal obligation requires it.
The organization applies recognized best practices in information security and personal data protection, including technical, organizational and administrative measures aimed at:
These include access controls, secure credential management, information backup, platform updates and best practices in database administration. Security management is reviewed periodically, considering risk identification, the application of proportional controls and continuous improvement of protection measures, in accordance with the risk management approach promoted by ISO/IEC 27001.
Personal data will be retained only for the time necessary to fulfill the purposes for which it was collected, or as required by applicable legal obligations. Once its purpose has been fulfilled, data is securely deleted or anonymized.
Backup and recovery processes form part of service continuity controls. Backups are performed periodically, stored in secure environments and protected by measures that prevent unauthorized access, loss, corruption or improper alteration of information.
Users have the right to:
To exercise these rights, users may contact the company through the official channels indicated on the website or via email at reservations@surcostours.com.
The organization reserves the right to update this Privacy Policy when necessary to reflect platform improvements, regulatory changes or adjustments to internal processes. Updated versions will be published on the website in a timely manner.
Use of the website implies acceptance of the terms set forth in this Privacy Policy.
Questions about our policies? We're happy to help.
Contact us