Privacy policy.

1. Who we are

This policy describes how De la Paz Tur (hereinafter, "DLP", "we"), an inbound tour operator based at Suipacha 531 — 1º piso, Buenos Aires, Argentina, registered with the Travel Agents Registry under Leg. 17379, processes the personal data of the people who visit this website (delapaztur.tur.ar) and who contact us through the various channels available.

DLP acts as the data controller in accordance with Argentine National Law 25.326 on the Protection of Personal Data and complementary regulations issued by the Agency for Access to Public Information (AAIP).

2. Data we collect

We collect the personal data that you voluntarily provide to us, as well as minimal technical data derived from your use of the site:

2.1 Data you provide

• Contact and quotation form: name, email address, country or origin, number of travellers, destinations of interest and free-text message.
• Messaging channels (WhatsApp, email): phone number, profile name, content of messages, photos or files you send us.
• Booking of services: data of the travellers (full name, ID or passport number, date of birth, nationality), billing details, dietary preferences, accessibility requirements and any other information needed to execute the booked trip.
• Communications via social networks: direct messages on Instagram, Facebook or other platforms when you choose to contact us through those channels.

2.2 Technical browsing data

• IP address, device type, browser and operating system.
• Pages visited, time spent and referrers.
• Cookie identifiers and similar technologies (see section 10).

3. Purposes of processing

We process personal data for the following purposes:

• To respond to enquiries and prepare tailor-made travel quotations.
• To manage the reservation, contracting and execution of the requested tourism services (accommodation, transfers, excursions, flights, etc.).
• To issue documentation, invoicing and to comply with legal, tax and accounting obligations.
• To provide assistance before, during and after the trip.
• To improve the content, security and experience of the website.
• To send commercial communications or news, only where you have given express consent or where there is a pre-existing contractual relationship.
• To comply with requests from competent authorities where applicable.

4. Legal basis

We process your data on one of the following bases:

• Consent given when you send us an enquiry, start a conversation through our channels or tick acceptance boxes (art. 5, Law 25.326).
• Performance of a contract for tourism services to which you are a party, or pre-contractual measures you have requested.
• Compliance with legal obligations (for example, the retention of tax records).
• Legitimate interest of DLP in operating the site securely and preventing misuse.

5. How we share data

We do not sell your personal data. We share it only when necessary and with appropriate safeguards:

• Tourism providers: hotels, airlines, ground operators, guides, transfer companies, vessels, restaurants and other suppliers involved in the booked trip, to whom we pass only the information essential to deliver each service.
• Technology providers that enable us to operate: hosting, email, messaging platforms (including Meta Platforms, Inc. for WhatsApp Business and Instagram), analytics tools (Google LLC for Google Analytics 4), CRM systems, payment processors and electronic signature or invoicing services.
• Public authorities when a valid legal request (judicial or administrative) so requires.
• Professional advisors (accountants, lawyers) bound by confidentiality duties.

In particular, if you interact with us via WhatsApp or Instagram, part of the content of those conversations is stored on Meta Platforms' infrastructure and is also subject to its own policies. DLP only accesses the content strictly necessary to assist you.

6. International transfers

Some of the providers mentioned (for example, messaging, analytics or hosting platforms) operate servers outside Argentina, including countries that may not have an equivalent data protection regulation. Where applicable, we select providers that offer contractual safeguards or recognised adequacy mechanisms, in the terms of articles 11 and 12 of Law 25.326 and the regulations issued by the AAIP.

7. Data retention

We retain your personal data only for the time required to fulfil the purposes described and to comply with the legal, fiscal or rights-defence obligations that apply to us. As a general rule:

• Contracts and tax documentation: for the periods required by tax and accounting legislation in force (typically 10 years).
• Messaging conversation records: according to the platform's policy and our internal retention rules.

Once those periods have elapsed, data is deleted or anonymised securely.

8. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or improper disclosure. Communications with this site take place through encrypted channels (HTTPS). No system is infallible, and we therefore cannot guarantee absolute security for transmissions over the internet.

9. Your rights

As data subject, you have the right to access, rectify, update and delete the personal data we hold about you, as well as to request information on its processing, under Law 25.326. You can exercise these rights by writing to us at info@delapaztur.com or by post at Suipacha 531 — 1º piso, Buenos Aires, Argentina.

The data subject may exercise the right of access free of charge at intervals of no less than six months, unless they demonstrate a legitimate interest, pursuant to article 14, paragraph 3 of Law No. 25.326.

The Agency for Access to Public Information (AAIP), the regulator of Law 25.326, has authority to handle complaints and claims filed in connection with breaches of personal data protection rules.

10. Cookies and similar technologies

This site uses two types of cookies and similar technologies:

• Strictly necessary: essential for the site to work properly (remembering your language preference and your cookie choice). No consent required.
• Analytics: help us understand in aggregate how the site is used so we can improve it. We use Google Analytics 4, provided by Google LLC, which records pages visited, approximate session duration, country, device and referrer. This data is processed on Google's infrastructure.

Consent. The first time you visit we show a banner so you can accept or reject analytics cookies. They are off by default until you give consent; if you reject them, Google Analytics only receives aggregate, anonymous signals, with no identifiers that could recognise you. Your choice is stored locally in your browser.

How to revoke consent. You can change your choice at any time by clearing this site's local storage from your browser settings ("Cookies and site data" section or equivalent). On the next page load the banner will appear again so you can choose anew.

We do not use targeted-advertising or remarketing cookies.

11. Minors

This site is addressed to adults. We do not knowingly collect personal data from minors without the consent of their parents, guardians or legal representatives. When a minor is part of a family group that books our services, the data required to provide the service is supplied by the responsible adults.

12. Changes to this policy

We may update this policy to reflect legal, technical or operational changes. The version in force will always be the one published on this page, with the date of last update indicated. If a change is significant, we will communicate it through the appropriate channels.

13. Contact

For any question regarding this policy or the processing of your personal data, you can write to us at info@delapaztur.com or contact us via WhatsApp at +54 9 11 5516 2842. Our office is located at Suipacha 531 — 1º piso, Buenos Aires, Argentina.