Privacy Policy

Eventyria Travel Agency

Ingrid M. Cavazos C., operating under the trade name Eventyria Travel Agency (hereinafter “Eventyria,” “we,” or “the Company”), is responsible for the use and protection of your personal data and informs you as follows:

1. Personal Data We Collect

We collect the following personal data directly and/or through our website:

  • Full name

  • Date of birth

  • Nationality

  • Contact information (email address, phone number, residential address)

  • Billing information (Tax ID number – RFC, fiscal address)

  • Passport, visa, and travel insurance information (when necessary for the trip)

  • Relevant dietary preferences and medical information necessary for travel participation

2. Purpose of Data Processing

Your personal data will be used for the following purposes:

  • Managing and booking tourism services (accommodation, transportation, activities, experiences)

  • Issuing invoices and tax receipts

  • Preparing contracts and liability waivers

  • Complying with legal and regulatory requirements in Mexico and destination countries

  • Informing you about itinerary updates, changes, promotions, and travel-related communications

  • Internal administrative and statistical purposes

We process your data on the legal basis of:

  • Performance of a contract (trip booking and service delivery)

  • Compliance with legal obligations

  • Your explicit consent (where required)

  • Legitimate business interests related to organizing and operating group trips

3. Sensitive Data

In certain cases, we may request health-related information (such as allergies, mobility conditions, or medical insurance details) strictly for your safety during the trip.

This information will be treated as sensitive data and handled with strict confidentiality. For participants residing in the European Economic Area (EEA), such data will only be processed with explicit consent in accordance with Article 9 of the GDPR.

4. Data Transfers

Your personal data may be shared with:

  • Tourism service providers (hotels, transport companies, tour operators, insurance providers) strictly for the provision of contracted services

  • Government authorities when required by applicable law

We do not sell or commercially transfer your personal data to third parties.

Because we operate internationally, your data may be transferred to countries outside your country of residence, including Mexico and destination countries. Where required, we implement appropriate safeguards to protect such transfers in accordance with applicable data protection laws.

5. Data Retention

Your personal data will be retained only for as long as necessary to fulfill the purposes described above and to comply with applicable legal, tax, and contractual obligations.

6. Security Measures

We implement administrative, technical, and physical safeguards to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

7. Your Rights

Under Mexican Law (ARCO Rights)

You have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Cancel your data when legally applicable

  • Object to its processing

To exercise these rights, please send an email to: eventyria.travel@gmail.com

Include:

  • Your full name

  • Proof of identity

  • A clear description of the data and right you wish to exercise

We will respond within a maximum of 20 business days.

Additional Rights for Residents of the European Economic Area (EEA)

If you are located in the European Union, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Object to processing

  • Withdraw consent at any time

  • Lodge a complaint with your local data protection authority

Requests may be submitted to: eventyria.travel@gmail.com

8. Withdrawal of Consent

You may revoke your consent at any time by sending an email to eventyria.travel@gmail.com. However, doing so may prevent us from continuing to provide contracted services.

9. Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve your browsing experience, analyze traffic, and optimize performance.
You may disable cookies through your browser settings; however, some website functionalities may be affected.
For users in the European Union, non-essential cookies will only be used after obtaining your consent.

10. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy to comply with legislative changes or internal policies. Updates will be published on our official website: www.eventyriatravel.com

11. Governing Law

This Privacy Policy is governed by the applicable laws of the United Mexican States.

12. Consent

By providing your personal data, you confirm that you have read, understood, and accepted this Privacy Policy.