Privacy Notice — Gálata Travel
This is a courtesy translation. In case of any discrepancy, the Spanish version prevails.
1. Identity and address of the data controller
Juanita Leticia García Ramírez, an individual with business activity (persona física con actividad empresarial), operating commercially as Gálata Travel, with an address for the purposes of this notice in Torreón, Coahuila de Zaragoza, Mexico, is responsible for the processing of your personal data under this notice. The controller’s full address will be provided to any data subject who requests it in order to exercise their rights, through the email address info@galata.travel.
For any matter related to this notice or to the processing of your personal data, you may contact us at info@galata.travel.
2. Personal data we process
We collect the following personal data directly from you, through our quotation form, our website, WhatsApp, or email:
- Full name
- Email address
- Telephone / WhatsApp number
- Destination of interest, tentative dates, approximate trip length, and number of travelers
- How you found us
In order to manage a confirmed booking, we may additionally require identification data necessary for processing with the wholesaler and the tourism service providers (for example, travelers’ passport details).
We do not collect sensitive personal data. We ask that you not include that type of information in the free-text fields of our forms or messages.
3. Purposes of processing
Necessary purposes (these give rise to and are indispensable for the legal relationship between you and the controller):
- To handle and follow up on your travel quotation request.
- To contact you by WhatsApp, telephone, or email regarding your request.
- To manage, where applicable, the booking and contracting of the requested tourism services.
- To keep internal records and control of requests and sales.
- To comply with applicable legal, tax, and contractual obligations.
Voluntary purposes (these are not necessary for the legal relationship; they require your consent and you may refuse them without being denied services):
- To send you information about promotions, destinations, and news from Gálata Travel.
If you do not wish your data to be processed for the voluntary purpose, you may say so at any time by writing to info@galata.travel with the subject line “No deseo recibir promociones”.
4. Transfers of personal data
In order to fulfill the necessary purposes, your data may be transferred to:
- Wholesale tourism service operators, exclusively to quote and, where applicable, book the services you request.
- Final providers of the tourism services (airlines, hotels, operators at the destination), when necessary for the provision of the contracted service.
- Competent authorities, where there is a legal requirement.
These transfers do not require your consent, as they are necessary for the legal relationship you have requested, in accordance with the Law. Outside of these cases, we do not transfer your data to third parties.
In addition, we use technology providers that process data on behalf of the controller (processors), such as form, storage, and cloud messaging services, under conditions of security and confidentiality.
5. Means to exercise ARCO rights and to revoke consent
You have the right to know what personal data we hold, what we use it for, and the conditions of its use (Access); to request its correction when it is inaccurate or out of date (Rectification); to have it deleted when you consider that it is not being processed in accordance with the regulations (Cancellation); and to object to its processing for specific purposes (Opposition). These are known in Mexican law as ARCO rights.
You may also revoke any consent you have given us, to the extent permitted by law.
To exercise any of these rights, send a request to info@galata.travel stating: (a) your full name and a means of contact for our reply; (b) a copy of a document proving your identity; (c) a clear description of the right you wish to exercise and of the personal data concerned. We will respond to your request within the time limits established by the Law. Exercising ARCO rights is free of charge.
6. Options to limit the use or disclosure of your data
In addition to ARCO rights, you may limit the use or disclosure of your personal data by requesting exclusion from our promotional communications through the same email address, info@galata.travel.
7. Data retention
Data from quotation requests that do not result in a contract is retained for a maximum of 12 months from the last contact, after which it is deleted from our records. Data linked to contracted services is retained for the periods required by applicable legal and tax obligations.
8. Use of cookies and similar technologies
Our website uses only technical cookies necessary for its operation. We do not use advertising cookies or third-party tracking cookies. Should this change, we will update this notice to describe them and to offer you options to disable them.
9. Changes to this privacy notice
This notice may be modified to address legislative developments or changes in our practices. Any modification will be published on this same page. The Spanish original is published at https://galata.travel/aviso-de-privacidad. We recommend that you consult it periodically.
10. Competent authority
If you consider that your right to the protection of personal data has been violated, you may turn to the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), the competent authority in Mexico for the protection of personal data held by private parties.
Date of last update: July 28, 2026