1.Introduction
This Privacy Policy explains how FlexYourPass collects, uses, shares and protects your personal data when you visit our website, create an account or purchase and use a pass. We are committed to handling your data responsibly and in line with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where it applies.
2.Who is responsible for your data
The data controller is Rokin Group Internacional SL, registered at Carrer de la Covanella, Núm. 5 Els Buners 7PB, AD300 Ordino, Andorra. For any privacy questions or to exercise your rights, contact us at info [@] flexyourpass [.] com.
3.Data we collect
Depending on how you use the Service, we may collect:
- Identity & contact data — such as your name and email address.
- Booking data — the pass and attractions you choose, arrival dates, number of travellers and booking references.
- Payment data — processed securely by our payment providers; we receive confirmation and limited details, not your full card number.
- Technical & usage data — such as IP address, device and browser information, and how you interact with our website.
- Communications — messages you send to our support team.
4.How we use your data
We use your personal data to process and deliver your orders, issue and manage your pass and tickets, provide customer support, handle cancellations and refunds, keep our Service secure, comply with legal obligations, and — where permitted — to send you relevant updates and improve our services.
5.Legal bases for processing
Where GDPR applies, we rely on: performance of a contract (to provide the pass you purchased); legal obligation (for example, tax and accounting records); legitimate interests (to secure and improve our Service, and prevent fraud); and consent (for example, for certain marketing or non-essential cookies), which you can withdraw at any time.
6.Payments
Payments are handled by third-party payment providers. These providers process your payment details under their own privacy policies. We do not store your full card details on our systems.
7.Sharing your data
We share personal data only as needed to run the Service, including with: attraction and tour partners (to admit you to the experiences you select); payment providers; IT, hosting and email service providers acting on our behalf; and authorities where required by law. We do not sell your personal data.
8.International transfers
As FlexYourPass operates internationally, your personal data may be transferred to and processed in countries other than the one where you live, including countries outside the European Economic Area (EEA) that may have different data protection laws. Whenever we make such a transfer, we take steps to ensure your data continues to receive an appropriate level of protection — for example, by using the European Commission's Standard Contractual Clauses, relying on a recognised adequacy decision, or working only with providers who commit to equivalent safeguards.
9.Cookies
We use cookies and similar technologies to run the website, remember your preferences, measure performance and — with your consent — for analytics and marketing. You can manage your preferences through our cookie banner or your browser settings.
10.Data retention
We keep personal data only for as long as necessary for the purposes described in this policy, including to meet legal, accounting or reporting requirements. When data is no longer needed, we securely delete or anonymise it.
11.Your rights
Subject to applicable law, you have the right to access your data; to correct inaccurate data; to request erasure; to restrict or object to processing; to data portability; and to withdraw consent. Where GDPR applies, you also have the right to lodge a complaint with your local supervisory authority.
12.Security
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, but we work to keep our safeguards up to date.
13.Children
Our Service is intended for use by adults and is not directed at children. We do not knowingly collect personal data from children, and if you are under 18 you should only use the Service with the involvement of a parent or guardian. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will take steps to remove that information.
14.Changes to this policy
We may update this Privacy Policy from time to time. We will post the current version on this page and update the "Last updated" date above. Significant changes may be communicated to you where appropriate.
15.Contact us
For any questions about this policy or how we handle your data, contact us at info [@] flexyourpass [.] com.