Privacy Policy

IMPORTANT: We invite you to read this Privacy Statement carefully to understand why we collect your personal data and how such data is processed by Gannet España S.L., located at C/ Gurtubay 6, Madrid. Tax ID (NIF): B75954743

This privacy statement was last updated on April 1, 2025.

1. DATA CONTROLLER

a. Contact details of the data controller:

i. Full name: Gannet España S.L (hereafter, Gannet)

ii. Registered address: C/ Gurtubay 6, 28001, Madrid

b. Data Protection Officer contact details:

You may contact them via email at: spain@gannetworld.com

2. PERSONAL INFORMATION WE COLLECT

Spain: Information regarding the use of personal data is provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

Mexico: In compliance with the Federal Law on Protection of Personal Data Held by Private Parties, we are committed to protecting your privacy and ensuring the proper use of your personal data. We operate in accordance with the provisions of this law to offer security and transparency in the handling of your information. You can consult the full content of the law through the official portals of the Federal Government.

Gannet respects your right to privacy and fully complies with applicable regulations to protect the personal data of its clients and users.

Your personal data is processed with the utmost confidentiality. Gannet, as the Data Controller, has adopted the necessary technical and organizational measures to ensure the confidentiality and security of your personal data, preventing any alteration, loss, unauthorized processing, or access.

In order for you to receive information and, where applicable, reserve or use the products and services offered by Gannet through its website(s), it is necessary for you to provide certain personal data. This allows us to personalize our services and tailor them to your interests and needs.

We collect your personal information for several reasons:

• To respond to service requests.
• To carry out the requested services.
• To generate personalized estimates.
• To send you updates on the status of ongoing services.

• To send promotions we believe may be of interest to our clients.
• To analyze the use of our tourism products and services.
• To ensure compliance with our terms and conditions.

We reserve the right to request additional information if required to process the requested service reservation.

You may revoke your consent at any time, as well as exercise your rights of access, rectification, erasure, restriction of processing, right to be forgotten, data portability, and objection through the means indicated in the “EXERCISING YOUR RIGHTS” section of this document.

3. METHODS OF DATA COLLECTION

Gannet collects personal data through various channels: via the website gannetworld.com; through Gannet’s customer service call center; and at Gannet’s physical locations, when requesting a quote or a service.

In any case, and whenever applicable, we will provide you with the option to refuse the use of your data for advertising communications or promotional purposes.

4. DISCLOSURE TO THIRD PARTIES

For the management and fulfillment of the contract’s purpose, it may be necessary (and mandatory for the provision of the service) to share your data—including information on allergies, food intolerances, etc.—with service providers such as airlines, shipping companies, hotels, and other service suppliers. These parties will be required to use your data solely and exclusively to fulfill the terms of the contract.

Gannet may therefore share personal data with international third parties who provide services directly related to the execution of the contracted services, such as transportation, accommodation, insurance providers, among others.

Depending on your travel destination, these providers may be located in countries that require an international data transfer, including, where applicable, to countries that do not offer a level of data protection equivalent to that required by the EU. In such cases, this transfer will be considered an international data transfer expressly authorized by the data subject. Likewise, in accordance with United States Federal Law, your personal data will be accessible to the U.S. Customs Department if you book a flight that originates, stops over, or ends in the United States.

Finally, you authorize us to send the necessary information to your insurance company in order to process any incident covered under your policy, if required.

If any data processors are located outside the European Economic Area, the joint controllers will sign Standard Contractual Clauses with them, providing appropriate safeguards and ensuring that any access to your data by such third parties is protected at all times.

Under no circumstances will your personal data be shared with third-party companies without your prior consent.

5. HANDLING OF INQUIRIES

With regard to users who receive our commercial communications, we will process their data until they choose to unsubscribe or cancel their subscription.

In relation to this data processing, you may, if you consider it necessary, exercise the following rights:

• Right of access, to know what data we store and process.
• Right to object and restrict, to ensure your personal data is no longer processed—effective from the time your request is received—for the purpose of providing information services.
• Right to rectification, if you believe the data is incorrect or has changed.
• Right to erasure, if you withdraw your consent for this type of data processing.

6. CHANGES TO THE PRIVACY POLICY

Gannet reserves the right to modify this policy in order to adapt it to legislative or judicial developments, as well as to industry practices. In such cases, Gannet will announce any changes made on this page with reasonable notice before they take effect.

This version of the Privacy Policy corresponds to an update published and effective as of April 2025. You may contact Gannet through the established communication channels for any inquiries related to this matter.