Privacy and Data Protection Policy - Holaqueya

Privacy and Data Protection Policy

Last updated: [12 October 2026]

At Holaqueya (www.holaqueya.com), we take the privacy and protection of the personal data of our customers (B2C) and partner agencies (B2B) very seriously. This Privacy Policy describes how we collect, use, process and protect your information, in strict compliance with European data protection legislation (General Data Protection Regulation – GDPR, EU 2016/679), thereby ensuring the highest level of confidentiality.

Data Controller

What personal data do we collect?

In order to design and operate your tailor-made trip, we may collect and process the following categories of data:

  • Identification and contact data: first name, surname, email address, telephone number and postal address.
  • Travel data: passport details, nationality and date of birth (essential for booking domestic flights, hotels or ferries).
  • Sensitive data (health and preferences): only if you provide it voluntarily, we collect data on dietary requirements (allergies) or medical/mobility conditions in order to ensure your safety and well-being during excursions and transfers.

Purposes of processing

Your personal data is used fairly and transparently, exclusively for the following purposes:

  • Operational management: arranging travel bookings and issuing travel documents and vouchers.
  • B2B and B2C communication: communicating with you or your partner travel agency to ensure the proper coordination and delivery of services at the destination.
  • Emergency assistance: to be able to assist you immediately should any incident arise during your excursions or stay.
  • Legal obligations: compliance with accounting, tax and administrative obligations.

Legal basis for processing

The processing of your data is based on the following legal grounds (GDPR):

  • Performance of a contract: processing is strictly necessary to organise your trip and deliver the travel services requested.
  • Legitimate interest: to maintain the business relationship with our B2B partner agencies.
  • Explicit consent: for the processing of sensitive data (diet or health) that you provide so that we can adapt your itinerary.

Recipients: who do we share your data with?

Your personal data will never be sold or passed on to third parties for marketing purposes. It is shared on a strictly confidential basis only with:

  • Necessary service providers: hotels, local tour guides, drivers and activity providers (who receive only the minimum information required to deliver the service, such as names and food allergies).
  • Competent authorities: where required by law or in life-threatening emergencies (e.g. the POLITUR tourist police, RD VIAL roadside assistance or medical centres).

International data transfers

As Holaqueya operates and is based in the Dominican Republic, the data of European citizens is transferred outside the European Economic Area (EEA). We guarantee that this transfer is strictly necessary for the performance of your travel contract, and we require all our local providers to uphold the same level of confidentiality and respect for privacy as set out in our internal rules.

Data retention

Your personal data is kept only for as long as necessary to fulfil the purpose for which it was collected (completion of your trip). It is then securely archived for the period during which legal or accounting liabilities may arise (generally a maximum of 5 years), after which it is permanently deleted.

Your rights

Users (end customers) and representatives of B2B agencies may exercise the following rights, guaranteed by the GDPR, at any time and free of charge:

  • Access: to know which of your personal data we are processing.
  • Rectification: to request the correction of inaccurate or incomplete data.
  • Erasure (right to be forgotten): to request the deletion of your data when it is no longer needed.
  • Objection and restriction: to object to the processing of your data or ask us to restrict its use in certain circumstances.
  • Portability: to receive your data in a structured, readable format.

To exercise any of these rights, please send an email to contact@holaqueya.com, attaching a copy of your identity document (or passport) so that we can verify your identity. We will respond to your request within a maximum of one month.

Security measures

Holaqueya implements all the technical and organisational measures necessary to guarantee the security and integrity of personal data, preventing its alteration, loss and unauthorised access.