Privacy notice for the Stopover Buenos Aires Programme

Controller and contact

Visit Buenos Aires (VBA), a non-state public entity, tax identification number (CUIT) 30-71699080-6, with its address at Charcas 5258, floor 3, office 301, Autonomous City of Buenos Aires, Argentina, is the controller of Programme data. For enquiries about processing and exercising your rights: [email protected].

Data requested and purposes

The form collects the trading name, legal name, CUIT, business address, declarant’s name and position or representative capacity, email address, telephone number, category, location or service, description, benefit, promotional statement, booking or redemption conditions, exclusions and validity dates. The website or social media profile and logo are optional.

These data form part of the Programme’s electronic provider register and are used to assess the application, verify representative authority where appropriate, manage participation and changes to it, publish the approved benefit, communicate decisions and handle enquiries or complaints. Omitting mandatory data prevents the application from being processed; inaccurate data may require correction or prevent approval.

Versions of the listing and accepted terms, the date and time of acceptance, administrative decisions and recorded communications are also retained. Individual links for reviewing listings or reporting results use temporary access identifiers.

Public information and recipients

Once participation is approved, the trading name, service description, promotional statement, benefit and its conditions are published, together with the logo and business link if supplied. The CUIT, representative, position, email address and administrative contact telephone fields are not part of the public listing.

Content intended for publication must not include personal data unrelated to the offer. Administrative data are accessible to authorised VBA personnel and the technology providers involved in operating the service. Programme communications are managed through institutional email; registration does not automatically subscribe applicants to commercial campaigns unrelated to the Programme.

Passenger data

Passengers do not need to register on the portal to browse benefits. Provider reports must contain only aggregated counts and countries of residence, without identifying individuals. They must not include names, identity documents or booking numbers. Providers and airlines are responsible for the data they collect through their own channels.

Browsing technologies and external services

The portal saves the language preference in the browser’s local storage, which can be cleared in the browser settings. The selected airline and filters allow the corresponding benefits to be displayed. No user account is required to browse benefits or submit an application to join.

Hosting services may process technical data, such as IP address, connection date and time, browser information and error logs, to operate and protect the portal. The administration area uses a session cookie to authenticate authorised personnel.

The portal requests fonts from Google Fonts and loads some graphic resources from third-party servers. These services receive browser requests that may include IP address and information about the device and referring page, and may apply their own technologies and privacy policies. External links lead to third-party services.

Adding measurement or advertising tools will require updating this notice and implementing the information and consent mechanisms that apply before activating them.

Hosting and international processing

Visit Buenos Aires uses Railway Corporation’s services to host the portal and process the information needed to manage the Programme. The main hosting and storage facilities are located in the United States. Administrative data are processed to assess applications, manage participation and handle communications, in accordance with the purposes stated in this notice. VBA remains the controller of Programme data.

Retention and security

VBA retains information throughout the management of the Programme and for the subsequent period necessary to comply with legal obligations, provide evidence of participation and handle claims. Once those purposes and the applicable periods have been fulfilled, the data will be deleted or anonymised. The portal uses HTTPS connections and access controls for the administration area.

Data subjects’ rights

You may request access to, rectification, updating or deletion of your data at [email protected]. VBA may verify your identity. Access requests must be addressed within ten calendar days of a formally verifiable demand; rectification, updating or deletion must be addressed within five business days of receiving the claim or discovering the error. Deletion may be limited by legal retention obligations or the rights and legitimate interests of third parties.

Access is free of charge at intervals of no less than six months, unless a legitimate interest is demonstrated. The Argentine Agency for Access to Public Information, the supervisory authority under Law 25,326, receives reports and complaints at argentina.gob.ar/aaip/datospersonales.