420 clos de la courine, 93160 Noisy-le-Grand
In compliance with the provisions of the General Data Protection Regulation (GDPR), of May 25, 2016, REGULATION (EU) 2016/679, we inform you that at Autocares Rehene, SL we work every day to offer you the best deals on trips and tourism products in general. To achieve this, we need to collect information from our users. If you have any questions about your privacy, you can contact us at undefined or by regular mail at C/ Jerónimo Roure, 43, LOCAL TP3 (Semisótano).
| Data Controller | DREAM CITY BUS TOURS. |
| Purpose of Processing | Travel reservations and advertising. |
| Legal Basis for Processing | Management of the relationship with clients. |
| Recipients | Your data may be communicated to certain service providers. The company undertakes to sign an agreement with them requiring compliance with European data protection regulations. |
| Rights | You have the right to access, rectify and delete your data, as well as other rights explained in the additional information. |
Name: DREAM CITY BUS TOURS.
Tax ID (NIE): B53858924.
Address: C/ Jerónimo Roure, 43, LOCAL TP3 (Semisótano).
Phone: 685935773.
E-mail: undefined.
The data we collect from users is strictly necessary to carry out our activity of offering travel and tourism products. To provide the service, we must collect contact information and other essential personal data.
1. Management of bookings, contracts, and invoicing: presentation, proposal, booking, and invoicing of the requested trip or tourism product.
Legal basis: performance of a contract.
2. Customer service and inquiries: responding to requests for information, questions, or issues raised by users.
Legal basis: consent of the data subject and/or performance of a contract.
3. Communication of data to suppliers and official bodies: transmission of travellers’ data to tourism service providers (airlines, hotels, local partners, etc.) and competent authorities when required by law.
Legal basis: performance of a contract and compliance with a legal obligation.
4. Travellers’ Register (Royal Decree 933/2021): creation and storage of the required documentation for three years, as well as communication of data to the competent authorities when legally necessary.
Legal basis: compliance with a legal obligation.
5. Travel of minors: requesting negative certificates or other official documentation required for travel involving minors.
Legal basis: compliance with a legal obligation.
6. Health data: processing information related to allergies, food intolerances, reduced mobility, or other health-related data when necessary to ensure correct service delivery.
Legal basis: explicit consent of the data subject.
7. Use of images for promotional purposes: use of photos or videos in the agency’s own media (website, social media, promotional materials), only with the client’s consent.
Legal basis: explicit consent of the data subject.
8. Video surveillance in physical offices (if applicable): ensuring the security of individuals, property, and facilities.
Legal basis: compliance with a legal obligation and performance of a task in the public interest.
9. Sending commercial communications: informing clients about news, promotions, and services similar to those already contracted, or for non-clients, about our products or services if consent has been given.
Legal basis: legitimate interest (clients) and explicit consent (non-clients).
10. Compliance with legal obligations: providing traveller information to the competent authorities under Royal Decree 933/2021 and complying with any other applicable legal requirement.
Legal basis: compliance with a legal obligation.
Your data is processed to handle your request based on the consent you have given us. If you refuse to allow your data to be processed, we will be unable to provide our services. Remember that you may always exercise your rights. You can find more information in the “Rights” section of this privacy policy.
We may also process your data to comply with a legal obligation, as well as in cases where a legitimate interest exists.
We will retain your data for as long as necessary to provide the services or until you request its deletion, in accordance with the provisions of the “Rights” section of this privacy policy.
Your data may be communicated to certain service providers related to the website and other partners whose websites or mobile applications host our services. The company undertakes to sign an agreement with them requiring compliance with European data privacy regulations. These providers may only use your data to provide the corresponding services and are not permitted to use the information for their own purposes or transfer it to third parties.
– Right of access: This right allows you to know what personal data we hold about you.
– Right to rectification: This right allows you to request the correction of inaccurate data.
– Right to erasure (“right to be forgotten”): This right allows you to request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
– Right to restriction of processing: This right allows you to request that we, as data controller, suspend the processing of your data when: a) you contest the accuracy of the data, while its accuracy is being verified; or b) you have exercised your right to object, while we assess whether our legitimate grounds override yours. It also allows you to request that we retain your data when: a) the processing is unlawful but you oppose the deletion of the data and request restriction instead; or b) we no longer need the data for processing, but you need it for the establishment, exercise, or defence of legal claims.
– Right to object: This right allows you to object to the processing of your data on grounds relating to your particular situation, or to object to direct marketing activities. We will stop processing the data unless there are compelling legitimate grounds or for the exercise or defence of possible legal claims.
– Right to data portability: This right allows you to request the transfer of your data to another data controller. You may receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller, where technically feasible.
– Right to withdraw consent: This right allows you to withdraw your previously given consent at any time. You can exercise these rights by sending your request to undefined or by regular mail to C/ Jerónimo Roure, 43, LOCAL TP3 (Semisótano). In any case, you may also contact the Spanish Data Protection Agency if you believe your rights have been violated. Additional information about these rights is available on their website: www.aepd.es
Exercising these rights is completely free of charge.
What do you need to provide to exercise your rights?
1 – A written request addressed to the data controller or processor in possession of your personal data.
2 – A photocopy of your ID card, passport, or any other valid identification document.
3 – You may also use an electronic signature instead of an ID document.
4 – If the request is made through a representative, a document or electronic proof of representation is required.
5 – A clear description of the right you wish to exercise.
6 – Address for notification purposes, date, and your signature.
7 – Supporting documents related to your request, if necessary.
Once the request is received, we will assess whether all the necessary information has been provided, as well as its legitimacy and relevance. If the request is not appropriate or cannot be granted due to specific circumstances, we will inform you so that you may file the corresponding claims.
We will respond to your request within the legally established time frames, unless circumstances beyond our control prevent us from doing so. In such cases, we will inform you of the reasons and the estimated response time.
**This privacy policy may be updated.** We recommend that you read this privacy policy regularly. If significant changes are made, we will notify you separately.
Last updated: October 1, 2025.