Privacy policy

BILBAO PRIVACY POLICY

LAST UPDATED: JUNE 15, 2022

For the purposes of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ["GDPR"] and Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights ("LOPDPGDD") and its implementing regulations, you are informed that by accepting the accompanying check box, you expressly authorize your personal data, including those related to your image and voice, to be incorporated for strictly confidential processing in a file whose controller is Fundación Industrias Creativas. (hereinafter, "the company"), with Tax ID G01614494, whose address is located in Bilbao (Bizkaia), at Camino de la Ventosa, 46, 1º D, for the purpose of managing your participation and/or attendance at the BIME PRO event (hereinafter, "the event"), carrying out profile segmentation in order to improve and optimize the experience associated with such events, as well as to inform you of other products and services offered by the company and the rest of the companies in the LAST TOUR group detailed below.

The legal bases that legitimize the processing of your personal data are:

Compliance with a contract and/or commercial relationship.
The informed consent that you expressly, freely, and unequivocally grant us when you accept this PRIVACY POLICY by sending us the corresponding form.
For compliance with various legal obligations that are mandatory for the company.
Due to legitimate interest derived from all types of security reasons, improvement of our products and services, management of your information requests, complaints, and fraud management.

The data we request from you is adequate, relevant, and strictly necessary to carry out the purposes described. You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. You also guarantee the authenticity, accuracy, and truthfulness of all the information you provide to us, committing to keep the data you provide updated so that it responds, at all times, to your real situation; you will also be solely responsible for false or inaccurate statements and for the damages they may cause.

We will retain the data as long as there is a contractual or commercial relationship with you, or as long as you do not exercise your right to deletion, cancellation, and/or limitation of data processing; after said retention period, the company will delete, destroy, block, or pseudonymize your personal data. In the case of blocking, your information will always be maintained without any use or processing, while such information may be necessary for the exercise of claims or some type of legal, legal, or contractual liability may derive from its processing that must be addressed and for which reason it is necessary to proceed with its recovery.

DATA TRANSFERS:

The data you provide may be transferred to the following companies of the LAST TOUR group for the correct management of the services indicated above, as well as to inform you of products and services that may be offered in the future:

LAST TOUR CONCERTS, S.L., LASTUR BOOKIN, S.L., MIDDLE GROUND, S.L., CULTURA ROCK, S.L., EVENTOS Y FESTIVALES SONIDO RURAL, S.L., LAST TOUR IBERIA, S.L., LAST TOUR EUROPA, S.L., ACTUACIONES MUSICALES 2020, A.I.E., OSO POLITA RECORDS, S.L., YUUKII RECORDS, S.L., IMCOM MEDIA, S.L., ARF VITORIA GASTEIZ, S.L, KALORAMA FESTIVAL UNIPESSOAL LDA, HOUSE OF FUN ENTERTAINMENT, LDA, LAST TOUR PORTUGAL, SOCIEDADE POR QUOTAS and LAST TOUR AMÉRICA, S.A.S. As well as to any other entity that replaces any of the above, and/or linked or integrated in the LAST TOUR group, and/or that is linked or integrated with it in the future.

If you pay by credit card, the data will be encrypted and transferred to our payment partners. Any personal data about you will only be used internally within the LAST TOUR group and will not be transferred to companies and third parties other than those expressed here, as applicable.

Finally, in the case of submitting a curriculum vitae for job applications, this will become part of a file owned by the company. The purpose of the file is personnel selection, and by spontaneously sending us this information, you are granting us your express consent for your data to be available in future hiring processes or personnel selection. In addition, this data may be transferred to LAST TOUR CONCERTS, S.L. and BALKBONE TOUR, S.L. for the same purpose, as well as to any other entity referred to in point 1 of this clause, and/or that replaces any of them, and/or that is linked or integrated in the LAST TOUR group, and/or that is linked or integrated with it in the future.

EXERCISE OF RIGHTS:

You may exercise the rights of access, rectification or deletion, limitation of processing, cancellation or opposition, as well as your right to portability, at the company, Camino de la Ventosa, 46, 1º D, CP 48013 in Bilbao, dpo@lasttour.org. You also have the right to file a complaint with the Spanish Data Protection Agency. The exercise of your rights contemplated in the data protection legislation may be carried out in the Basque, Spanish, and English languages.

SECURITY MEASURES:

In order to safeguard the security of your personal data, we inform you that the company has adopted all necessary technical and organizational measures to guarantee the computer security of the personal data provided, including (among others):

The pseudonymization and encryption of personal data when appropriate.
The ability to ensure the confidentiality, integrity, availability, and permanent resilience of processing systems and services.
The ability to restore the availability and access to personal data quickly in the event of a physical or technical incident.
A process of regular verification, evaluation, and assessment of the effectiveness of technical and organizational measures to ensure the security of processing.

BOGOTÁ PRIVACY POLICY

The objective of this Personal Data Processing Policy (hereinafter the "PDTP") is to develop and establish the terms and conditions with which LAST TOUR AMERICA S.A.S. (hereinafter "Last Tour"), as Data Controller, processes the Personal Data of Data Subjects. In harmony with the provisions of Article 15 of the Political Constitution of Colombia, Law 1266 of 2008, Law 1581 of 2012, Decree 1377 of 2013, Law 1266 of 2008, Decree 886 of 2014, Sole Decree 1074 of 2015, and all those regulations that regulate, add, repeal or modify them, this PDTP sets out the business policies with which Last Tour processes the Personal Data of Data Subjects, the purposes of Processing, the rights of Data Subjects, and the mechanisms available to Data Subjects to know, update, rectify, delete, and generally enforce their rights as Personal Data Subjects.

The Personal Data of Data Subjects will be processed with special observance of the principles of legality, purpose, freedom, truthfulness or quality, transparency, restricted access and circulation, security, and confidentiality.

Data Subjects, by authorizing the Processing of their Personal Data, fully accept this PDTP and its additions or modifications, which will be communicated to them through suitable means, in accordance with current regulations.

The information provided by Data Subjects will be used by virtue of the contractual relationship or link that arises with Last Tour and in accordance with the purposes indicated later in this PDTP. If the Personal Data provided is of a financial, credit, or commercial nature, it will be processed to carry out transactions arising from the contractual relationships that are generated. Furthermore, if Data Subjects provide information through the website https://bime.org/, Last Tour will use the information to send cookies to your hard drive, with the aim of providing a service according to the preferences of the Data Subject.

FIRST: DEFINITIONS

For the purposes of interpreting the terms of this PDTP, the following rules will be observed:

Terms with initial capital letters will have the meaning assigned to them.
Terms that denote the singular also include the plural and vice versa, whenever the context so requires.
Terms that are not expressly defined will be understood in the sense attributed to them by technical language, or in their natural sense, according to their general use.
References to applicable laws or legal provisions include all applicable laws or legal provisions added, extended, consolidated, modified, or replaced from time to time and to any order, regulation, instrument, or other provision made under them.
The titles and/or sections included in this Personal Data Processing Policy have been incorporated for convenience and will not be considered part of it nor will they limit the scope of the terms and provisions of it.
Any enumeration or relation of concepts where the disjunctive conjunction "or" exists should be understood to include some or all of the elements of such enumeration or relation. Likewise, any enumeration or relation of concepts where the copulative conjunction "and" exists should be understood to include each and every one of the elements of such enumeration or relation.

Without prejudice to the other definitions found in this PDTP, in accordance with current regulations, the following definitions will be used:

"Authorization": prior, express, and informed consent of the Data Subject for Last Tour to carry out the Processing of their Personal Data, which may be requested through different mechanisms and technical means and may be (i) in writing; (ii) orally; or (iii) through unequivocal behaviors of the Data Subject that reasonably allow for the conclusion that authorization was granted.
"Privacy Notice": verbal or written communication generated by the Controller, addressed to the Data Subject for the Processing of their personal data, through which they are informed about the existence of the PDTP, how to access the PDTP, and the purposes of the Processing that Last Tour will give to Personal Data, published in the Service Channels.
"Database": organized set of Personal Data that is subject to Processing by Last Tour.
"Personal Data": any information linked or that can be associated with one or several determined or determinable natural persons. Last Tour will process the Personal Data established in Section Six of this PDTP.
"Public Data": data that is not semi-private, private, or sensitive. Public Data is considered, among others, data relating to the name and surname, identification number, date of birth, marital status of people, their profession or trade, and their quality as a merchant or public servant. By their nature, Public Data may be contained, among others, in public records, public documents, gazettes and official bulletins, and duly executed judicial sentences that are not subject to reserve.
"Sensitive Data": those that affect the privacy of the Data Subject or whose improper use may generate discrimination, such as those that reveal racial or ethnic origin, political orientation, religious or philosophical convictions, membership in unions, social organizations, human rights or that promote interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data relating to health, sexual life, and biometric data.
"Data Processor": natural or legal person, public or private, who by themselves or in association with others, performs the Processing of personal data on behalf of the Data Controller.
"Data Controller": natural or legal person, public or private, who by themselves or in association with others, decides on the Database and/or the Processing of Personal Data, for the purposes of the PDTP, when referring to the Data Controller, it will refer to Last Tour.
"Data Subject": natural person whose Personal Data is subject to Processing. Data Subjects are defined in Section Six of this PDTP.
"Transfer": the transfer will take place when the Controller and/or Processor of personal data, sends the information or Personal Data to a recipient, who in turn is a Controller and is located inside or outside the country.
"Transmission": Processing of Personal Data that implies the communication of the same within or outside the territory of the Republic of Colombia when its purpose is the realization of Processing by the Data Processor on behalf of the Data Controller, that is, whose sender is the Data Controller and its recipient is the Data Processor.
"Processing": any operation or set of operations on personal data, such as collection, storage, use, circulation, or deletion that will be carried out only for the purposes established in this PDTP with prior Authorization from the Data Subject.

SECOND: SCOPE OF PERSONAL DATA AND SENSITIVE DATA PROCESSING

In the ordinary course of its business and management for the development of its corporate purpose, whether permanently or occasionally, Last Tour will process the Personal Data and Sensitive Data of Data Subjects and will carry out operations of collection, use, storage, circulation, deletion, Transmission or Transfer of Personal Data and Sensitive Data of Data Subjects and in general of any third party with whom it has some type of contractual relationship or link of any nature.

The express or unequivocal authorization of Data Subjects for the Processing of their Personal Data and/or Sensitive Data implies acceptance for the Processing of their Personal Data, which will be carried out in accordance with the provisions of this PDTP. In any case, this PDTP may NOT be interpreted in any way contrary to applicable laws and/or the rights that correspond to Data Subjects.

Likewise, the purposes, measures, and procedures established for the Processing of Personal Data of Data Subjects are established, as well as the mechanisms available to Data Subjects to know, update, rectify, delete, and generally enforce their rights as Personal Data holders.

Last Tour, as responsible for the processing of Personal Data, will make its best professional effort to maintain under adequate standards of quality, protection, and security of information, all Personal Data received from Data Subjects, especially Sensitive Data. Likewise, it will endeavor to ensure that the Personal Data and/or Sensitive Data collected have the necessary technical and legal protection to guarantee their security, integrity, access, and confidentiality. In that order of ideas, by authorizing the Processing of their Personal Data, Data Subjects expressly authorize Last Tour to store their Personal Data and/or Sensitive Data in the manner it deems pertinent and adequate and comply with the security required for the protection of Personal Data and Sensitive Data, according to normal and reasonable standards applicable to ticketing issuance and provision services for mass transportation, public shows, parks, and public and private recreation sites and other activities included in its corporate purpose.

THIRD: IDENTIFICATION OF THE DATA CONTROLLER

Last Tour is a company primarily dedicated to the issuance and provision of tickets for mass transportation, public shows, parks, and public and private recreation sites. This PDTP is of obligatory and strict compliance for Last Tour, whose information is as follows:

Corporate Name: LAST TOUR AMERICA S.A.S.

Tax ID: 901.470.694-5

You can contact Last Tour at:

Address: Calle 84 # 15 – 45 Of 501, Bogotá, D.C.
Phone: +57 3175670672
Email: pqrs@diez.live
Website: https://bime.org/

FOURTH: PERSON AND AREA RESPONSIBLE FOR HANDLING PETITIONS, CONSULTATIONS AND CLAIMS

The designated area arranged by Last Tour for handling petitions, consultations, and claims, and in general for Data Subjects to exercise their rights, will be the Customer Service Area. The person in charge will be the head of this area who can be contacted by Data Subjects or their successors for handling their consultations, claims, requests for rectification, updating, and deletion of their Personal Data, directly in Bogotá, through physical communication to Calle 84 # 15 – 45 Of 501, Bogotá, D.C., or through express request to the email pqrs@diez.live

FIFTH: SERVICE CHANNELS

Last Tour may carry out the operation of collecting Personal Data of Data Subjects in any of the following service channels:

Call Center – Telephone service center.
National network of points of sale.
Online sales through the website https://bime.org/
Directly at the administrative headquarters.

These service channels represent the ways in which Last Tour collects Personal Data from Data Subjects (1, 2, 3, and 4 hereinafter as the "Service Channels").

SIXTH: DATA SUBJECTS AND PERSONAL DATA SUBJECT TO PROCESSING

Last Tour will process the Personal Data of the following persons (for all purposes of this PDTP they will be referred to as Data Subjects):

Clients – Buyers or promoters.
Employees – Active or inactive collaborators.
Former employees.
Pensioners.
SENA apprentices.
Job vacancy applicants.
People in selection processes.
Family members of employees or former employees, such as their spouse, permanent partner, or children.
Mission workers.
Suppliers.
Contractors.
Inactive practice personnel.
Third parties with commercial relationships.
Representatives of public entities.
Representatives of the competition.
Business allies.
Partners.

By voluntarily providing their Personal Data and/or Sensitive Data in the manner indicated in this PDTP and in the express, verbal, written authorization or through unequivocal behaviors, Data Subjects expressly or unequivocally authorize Last Tour to process their Personal Data and/or Sensitive Data and any other information they provide, in accordance with this PDTP, the law, and for the purposes established in this PDTP (Section Seven) or any additional purpose authorized by the Data Subjects.

In general, Last Tour may collect:

Location data

Physical location of the Data Subject, such as residential address, domicile, address, and name of the company where they work, among others.

Contact and communication data

Telephone and cell phone numbers, as well as email address and identification on social networks.

Labor data

Information of a labor and academic nature, which allows accrediting the experience and training of its Data Subject.

Registration data

In cases of browsing the website https://bime.org/, certain information will be stored automatically, including search queries made, IP address of internet users, system activity, computer failures, browser type, specifications that characterize requests, etc.

Sensitive Data

Last Tour may carry out the Processing of biometric data, such as fingerprints or images (understood as figure, total or partial physiognomy of the Data Subject's body) of the Data Subjects. Sensitive Data, in relation to the Processing that Last Tour may carry out, will be those unique traits of the Data Subjects that individualize them against other people. Sensitive Data will be used for the purposes of: (a) identifying the Data Subject when making purchases at points of sale; (b) surveillance and security reasons at the administrative headquarters or points of sale of Last Tour.

Last Tour informs the Data Subjects of Sensitive Data that providing sensitive information is merely optional and they are not obliged to provide information related to their Sensitive Data.

The Authorization of Data Subjects for the Processing of their Personal Data will be granted by: (a) the Data Subjects, who must prove their identity through the means in which Last Tour requests them; b) the successors or guardians of the Data Subject, who must prove their quality as successors of the Data Subject; and c) the representative and/or attorney of the Data Subject, after accreditation of the representation or power of attorney; and d) another in favor of or for which the Data Subject has stipulated.

Data Subjects who provide their Personal Data or Sensitive Data in any of the Service Channels, authorize Last Tour to process their Personal Data and/or Sensitive Data. Last Tour may carry out the Processing of:

If they are clients, prospects, or business allies, of any nature, in any of the Service Channels:

Name.
Address.
Fixed line telephone number.
Mobile line telephone number.
Email address
Date of birth.
Preferences registered in Vive Last Tour.
Fingerprint.
Image.

If they are employees, former employees, pensioners, interns, SENA apprentices, applicants, mission workers, suppliers, contractors, active or inactive collaborators, job vacancy applicants, third parties with labor or commercial relationship, students, practice personnel, Family members of employees or former employees, such as their spouse, permanent partner or children, third parties with labor or commercial relationship, or business allies, in any of the Service Channels:

Name.
Address.
Fixed line telephone number.
Mobile line telephone number.
Email address
Date of birth.
Professional background.
Labor background.
Fingerprint.
Image.

If they are representatives of public entities or representatives of the competition, in any of the Service Channels:

Name.
Address.
Fixed line telephone number.
Mobile line telephone number.
Email address
Date of birth.
Fingerprint.
Image.

The Authorization may be contained in a physical, electronic document, in any other format that allows guaranteeing its subsequent consultation, or through a suitable technical or technological mechanism by which it can be concluded unequivocally that, had it not been for a conduct of the Data Subject, the Personal Data would never have been captured and stored in the Database.

Last Tour will adopt the necessary measures to maintain records or suitable technical or technological mechanisms of when and how it obtained authorization from the Data Subjects.

SEVENTH: PURPOSES OF PROCESSING

The Personal Data and Sensitive Data collected by Last Tour have as a general purpose:

carry out the pertinent procedures for the development of its corporate purpose in what has to do with the fulfillment of the object of the contract celebrated with the Data Subject; (b) compliance with current regulations; (c) educational and academic purposes; (d) establish communication with Data Subjects for any purpose related to the purposes established in this PDTP, whether through calls, text messages, emails and/or physical; (f) sending information about products or services marketed by Last Tour, as well as, news, publications and promotions of its own or third parties, invitations to events and offering new products and services; (g) send information about its own and third-party programs; (h) conduct studies or scientific research for academic or commercial use; (i) either directly or through third parties: consult, carry out administrative procedures, send commercial information, request completion of surveys, collect, store, use, circulate, delete, process, contact, survey, compile, exchange, publish, audit, update and/or dispose of the Personal Data that the Data Subjects provide to incorporate them into the different Databases of Last Tour; (j) manage requests, complaints or claims.

The specific purposes, depending on the relationship with each Data Subject, for which Last Tour will process the Personal Data of the Data Subjects, are:

Inform Data Subjects about news, news, promotions of their own and/or third parties; specify, analyze and optimize existing and future products and services, own and/or third parties; report information on credit risks and control and prevention of money laundering; carry out archiving, updating, storage and processing activities, directly or through third parties with whom they contract for this purpose; promote and market own and/or third-party products and services.
Identify ways in which Last Tour can offer you better service, such as providing you with information about products and services more effectively.
Processing and administration of transactions as a client or member of Vive Last Tour, also establishing a communication channel to inform you of the news that may occur with respect to the products and services offered, such as cancellation of events, change of dates, change of programming, etc.
Offer Data Subjects products and services, prepare marketing, market segmentation and statistical studies and know their consumption habits, tastes and preferences in order to offer them those products that are suitable for Data Subjects; send them promotions, advertising and discount coupons for products or services, as well as those products of the companies with which Las Tour has a corporate relationship; and invite you to participate in contests or sweepstakes and activities.
Marketing and research.
Offer you the products you have requested as a customer.
Provide you with a range of products and services offered by Last Tour.
Comply with the obligations contracted by Last Tour with Data Subjects, in relation to the payment of salaries, social benefits and other remuneration enshrined in the employment contract.
Offer corporate welfare programs and carry out business activities, for the Data Subject and their beneficiaries, such as children, spouse or permanent partner)
Send to the address registered at the time of choosing the shipping method the commercial products and services.
Transfer Personal Data or Sensitive Data to third parties with whom there is a data processing contract, or whose contractual purpose requires the transfer of Personal Data.
Transfer Personal Data to third parties or service providers necessary for Last Tour to develop its corporate purpose.
Transfer to third parties that provide operation services of Last Tour's computer systems, to send physical mail or emails or to companies that perform data analysis, to generate marketing strategies, segmentation of demographic groups and other information of the Data Subjects that allow them to be characterized demographically according to their "genres of interest".
Transfer to third parties that administer, operate or own venues or scenarios where events are held, for which Data Subjects buy tickets with the purpose of offering promotional material about upcoming events.
Transfer Personal Data to third parties with which Last Tour has contractual relationships and that is necessary for the fulfillment of the contracted object, such as the transfer to the promoter or promoters of the events for which the Data Subject acquired tickets so that they, as controllers of the processing, process the Personal Data.
Offer Data Subjects the products and services of Last Tour (including, to process your online purchases), to contact them in the case of an event cancellation, or a change of venue, and for marketing purposes.

Last Tour does not verify, nor assumes the obligation to verify the identity of who provides their Personal Data or Sensitive Data, nor the validity, sufficiency and authenticity of the Personal Data or Sensitive Data that the Data Subject provides about himself, therefore, Last Tour has no responsibility whatsoever for damages and prejudices of any nature that could be generated by the lack of truthfulness, validity, sufficiency or authenticity of the information provided. This includes damages and prejudices that may be generated by the impersonation of a third party. This PDTP applies to any processing of Personal Data and/or Sensitive Data collected in any of the Service Channels.

Among the Personal Data collected by Last Tour are those relating to the interests and preferences of Data Subjects, as well as that relating to the browser used and the devices implemented to navigate the web. According to the stated purposes, Personal Data may be made available to the personnel in charge of the corresponding work at Last Tour.

EIGHTH: EXCEPTIONS TO AUTHORIZATION FOR PERSONAL DATA PROCESSING

Last Tour will not require authorization from Data Subjects for the Processing of Personal Data in the following cases:

(a) When the information is requested from Last Tour by a public or administrative entity that is acting in exercise of its legal functions or by judicial order;
(b) When dealing with data of a public nature because these are not protected by the scope of application of the rule;
(c) Events of medical or health emergency duly proven;
(d) In those events where the information is authorized by law to comply with historical, statistical and scientific purposes;
(e) When dealing with data related to the civil registry of people because this information is not considered to be of a private nature.

Likewise, Last Tour may provide information without the need for authorization from the Personal Data subjects in the following cases:

(a) To the data subjects, their heirs or representatives at any time and through any means when they so request Last Tour;
(b) To judicial or administrative entities in the exercise of functions that make some requirement to the company for the information to be delivered to them;
(c) To third parties who are authorized by some law of the Republic of Colombia; and
(d) To third parties to whom the Data Subject expressly authorizes to deliver the information and whose Authorization is delivered to Last Tour.

NINTH: RIGHTS OF DATA SUBJECTS

The rights of Data Subjects referred to in this Personal Data Processing Policy are contained in Law 1581 of 2012 and Decree 1377 of 2013. In particular, the rights of Data Subjects as established in article 8 of Law 1581 of 2012 are:

Know, update and rectify their personal data before Last Tour, as Data Controller or Data Processors.
Request proof of the authorization granted to Last Tour, as Data Controller, except when expressly exempted as a requirement for Processing, in accordance with the provisions of article 10 of Law 1581 of 2012.
Be informed by Last Tour, as Data Controller or the Data Processor, upon request, regarding the use that has been given to their Personal Data.
Submit complaints to the Superintendence of Industry and Commerce for infractions of the provisions of current regulations.
Revoke the Authorization and/or request the deletion of Personal Data when the Processing does not respect constitutional and legal principles, rights and guarantees. The revocation and/or deletion will proceed when the Superintendence of Industry and Commerce has determined that in the Processing, Last Tour or the Data Processor, incurred in conducts contrary to the law or the Constitution.
Refrain from answering questions about Sensitive Data. Last Tour is transparent with Data Subjects and informs them that the delivery of Sensitive Data will be optional, as well as refraining from giving answers that deal with data of children and adolescents.
Access free of charge to their Personal Data that have been processed by Last Tour.

Data Subjects may, at any time, access the Personal Data stored by Last Tour and the details of the Processing, as well as rectify them if they are inaccurate or incomplete, and delete them when they consider that they are not required for any of the purposes indicated in this PDTP, when they are being used for unauthorized purposes, or simply oppose the Processing.

TENTH: DATABASE SECURITY

The security measures that Last Tour has seek to protect the Personal Data of Data Subjects, in order to prevent their adulteration, loss, unauthorized uses and access. For this, Last Tour, diligently implements administrative, legal and technical protection measures that are reasonably within its reach. Data Subjects expressly accept this form of protection and declare that they consider it convenient and sufficient for all purposes.

Similarly, third parties contracted by Last Tour are obliged to adhere to and comply with the information security policies and manuals, as well as the security protocols that Last Tour applies to all its processes.

Any Last Tour contract with third parties (contractors, external consultants, temporary collaborators, etc.) that involves Processing, includes a confidentiality agreement that details their commitments for the protection, care, security and preservation of the confidentiality, integrity and privacy of it.

Last Tour protects Personal Data, in proprietary data format, which can only be read with proprietary tools. In storing information, Last Tour has taken a series of measures to protect Personal Data from misuse, loss, unauthorized access, modification or disclosure. Personal Data collected online is stored in a Microsoft SQL Server database, a secure data protection center that cannot be accessed via the Internet.

Last Tour encrypts the data sent from the Data Subject's computer to its systems during Internet transactions and the Data Subject's access through networks.

Last Tour also employs firewalls, intrusion detection systems and virus detection tools to protect Personal Data from unauthorized access or viruses. In addition, Last Tour takes reasonable measures to definitively destroy Personal Data when it is no longer needed. It also imposes strict security and confidentiality requirements on all third parties as to how to store and handle Databases.

ELEVENTH: HANDLING OF PETITIONS, CONSULTATIONS AND CLAIMS

For the filing and attention of your petition, consultation or claim, the Data Subject must provide the following information:

Full name and surnames.
Physical address.
Email.
Telephone number (fixed line).
Mobile number.
Means to receive response to your request.
Reason(s)/fact(s) giving rise to the claim with a brief description of the right you wish to exercise (know, update, rectify, request proof of the authorization granted, revoke, delete, access information).
Signature (if applicable) and identification number.

In case the Data Subject acts through a representative, the documents that accredit the identity and capacity of their representative.

Data Subjects may present their petitions, consultations and claims, in any of the following channels:

Go from 08:00 to 5:00, Monday to Friday, to the administrative headquarters, where you can present it directly to the area in charge, at the address: Calle 84 # 15 – 45 Of 50.
By sending a written communication to the address: Calle 84 # 15 – 45 Of 501 in the city of Bogotá, D.C.
By telephone call to the number: +57 3175670672
By email to the address: pqrs@diez.live

Data Subjects or their successors may exercise their rights or submit petitions, consultations or claims in accordance with the procedures established in this Section. The petition, consultation or claim will be attended within a maximum term of fifteen (15) business days counted from the date of receipt. When it is not possible to attend the consultation within said term, the interested party will be informed, expressing the reasons for the delay and indicating the date on which their consultation will be attended, which in no case may exceed eight (8) business days following the expiration of the first term.

The Data Subject or their successors who intend to exercise their rights such as the correction, updating or deletion of their Personal Data that are subject to Processing by Last Tour, may submit their request, in accordance with the procedure established in this Section. Last Tour will attend to any request within the maximum term provided by law of fifteen (15) business days, counted from the day following the date of its receipt. When it is not possible to attend to the claim within said term, the interested party will be informed of the reasons for the delay and the date on which their claim will be attended, which in no case may exceed eight (8) business days following the expiration of the first term.

For more information about your privacy and consumer protection visit: www.sic.gov.co. If Last Tour totally or partially prevents the exercise of the right by the Data Subject, they may go to the Delegation for Personal Data Protection of the Superintendence of Industry and Commerce.

TWELFTH: NEW USES

Last Tour may request authorization for the use or circulation of Personal Data of Data Subjects or other type of information, for purposes different from those expressed in this PDTP, for which it will publish in any public medium that it deems convenient as the case may be.

THIRTEENTH: PERSONAL DATA OF CHILDREN AND ADOLESCENTS

When Personal Data of children and adolescents is obtained, Authorization will be obtained from the parents or guardian of the minor.

FOURTEENTH: TEMPORALITY

Last Tour will use, process, and store the collected Personal Data and Sensitive Data until it fulfills its purposes, which in any case will not be less than 80 years, and this is the scope of the authorization granted by the Data Subjects.

FIFTEENTH: MODIFICATIONS

Without prejudice to constitutional rights and applicable legal and regulatory provisions, especially those contained in Law 1581 of 2012, and Decree 1377 of 2013, Last Tour may modify this PTDP at any time. Such modifications will be informed to the Data Subjects through any other directed or non-directed mass dissemination mechanism.

SIXTEENTH: INTELLECTUAL PROPERTY

Databases, or different types of electronic repositories, are intellectual creations subject to copyright protection. Last Tour is the owner of the Databases it uses, for which it fully complies with the regulations on Personal Data protection and habeas data contained in Law 1581 of 2012, Decree 1377 of 2013, Law 1266 of 2008, Decree 886 of 2014 and the Unified Decree 1074 of 2015 and other regulations that modify or complement them. Consequently, Last Tour, as the rights holder over the Databases, is the only one with the authority to authorize the use, reproduction, or disposal of them to third parties.

SEVENTEENTH: VALIDITY

Last Tour reserves the right to modify this PTDP at any time, which is why we invite you to regularly or periodically consult our website https://bime.org/, through which the latest version of this PTDP will be kept available to you. However, pursuant to the provisions of article 5 of Decree 1377 of 2013, when substantial changes are made to the PTDP, referring to the identification of the responsible party and the purpose of the Processing, which affect the content of the authorization, it will be necessary to communicate these changes to the Data Subject and Last Tour will obtain a new authorization from the Data Subject. The data provided will be used for the period necessary to fulfill the uses and purposes described in this Processing Policy and in the Terms and Conditions of the Platform.