1. Introduction and scope

At Magic Holidays Travel Agency, we respect the privacy of our travelers, visitors, collaborators, and people interested in becoming part of our team.

This Privacy Policy explains what personal data we collect, how we use it, where it is stored, with whom it may be shared, and what are the rights of its holders.

This policy applies to https://mhtravelagencyweb.com/, Your application forms, information requests, recruitment processes and communications related to the agency's services.

We process personal data in accordance with applicable regulations, including the General Data Protection Regulation of the European Union (GDPR) in activities within its scope of application.

2. Identification and contact

The website is commercially operated by Magic Holidays Travel Agency, based in Orlando, Florida, United States.

Contact information

• Trade name: Magic Holidays Travel Agency
• Address: 7380 West Sand Lake Rd, Suite 500, Orlando, FL 32819, United States
• Email: info@mhtravelagency.com
• Website: https://mhtravelagencyweb.com/
• Florida Seller of Travel Registration: ST42548

For inquiries related to the processing of personal data or the exercise of privacy rights, interested parties may use the e-mail address provided.

3. Personal information we collect

The information collected depends on how each person interacts with our services.

Identification and contact details: name, surname, email address, phone number, WhatsApp, country of residence and other data provided voluntarily.

Travel information: destinations, estimated dates, number of passengers, ages of the group members, accommodation preferences, requested services, approximate budget, and comments to prepare tourist proposals.

Data on applicants: professional information, travel experience, tourism knowledge, availability, country of residence and answers provided during the agent selection process.

Communications: messages, inquiries, requests and conversations maintained through forms, email, WhatsApp or other enabled channels.

Technical data: IP address, browser, device, operating system, pages visited, traffic origin, online identifiers, and interactions with site content.

We do not request particularly sensitive data through our general forms. When a specific management requires additional information, its purpose will be explained and the corresponding legal conditions will apply.

4. Origin of the data

We obtain information directly when a person completes our forms, requests advice, contacts the agency, or participates in a recruitment process.

We also collect certain technical data during navigation.

In some cases, we may receive information through personal references, external platforms, or other channels through which a person requests to be contacted.

When data is obtained from sources other than the interested party themselves, the legally required information will be provided, including the categories and origin of the data where appropriate.

5. Purposes and legal bases

We use personal data for the following activities:

When we use legitimate interest as a basis, we must consider the necessity of the treatment and the rights of the affected individuals.

The consent granted can be withdrawn at any time, without affecting the legality of the previous treatments.

6. Information necessary to request our services

Some fields on the forms are necessary to correctly respond to requests.

To prepare a tourism proposal, we need basic contact information and travel-related data.

If a person does not provide that information, we may not have enough information to respond or prepare a quote.

The additional fields not identified as mandatory are voluntary.

Visitors can browse the public content without having to complete forms.

7. Forms management and CRM

Magic Holidays uses technological tools to manage the requests of travelers and applicants.

Jotform

The forms allow for receiving and organizing the data provided by those requesting information, quotes, or participating in recruitment processes.

CRM system

The commercial inquiries can be incorporated into the customer management system used by the agency.

CRM records allow you to maintain the history of inquiries, organize the follow-up of interested parties, and facilitate the continuity of care.

Assignment of agents

Applications are distributed among authorized agents through internal allocation mechanisms.

The agents receive the necessary information to handle the corresponding query.

Access to the systems must be restricted to personnel and authorized collaborators according to their functions.

8. Data communication to third parties

Magic Holidays Travel Agency does not commercialize the personal data of its travelers or applicants.

However, certain data may be communicated to suppliers and collaborators when necessary to provide services or keep our systems operational.

These categories include:

• Travel agents and authorized personnel.
• Form submission platforms, including Jotform.
• Business management and CRM systems.
• Web hosting, storage, email, and technology support providers.
• Communication and messaging services.
• Tour operators, hotels, theme parks, tour operators and cruise companies, where applicable.
• Digital analysis and measurement services.
• Competent authorities when there is a valid legal obligation.

The information shared must be limited to what is necessary for each purpose.

Suppliers acting on behalf of the agency must be subject to the corresponding contractual and data protection obligations.

9. Cookies and similar technologies

Our site uses or may use cookies and similar technologies to enable features, improve the browsing experience, and obtain statistics about its use.

Cookies can be classified into:

Necessary: related to the technical operation and security of the site.

Functional: They allow us to remember certain visitor preferences.

Analytics: They are used to collect statistical information about navigation.

From third parties: They may be associated with integrated content, communication platforms or external services.

When applicable regulations require authorization to use cookies or non-essential technologies, their use must be subject to the prior consent of the visitor.

Users must have adequate information and mechanisms to accept, reject, or modify their preferences when appropriate.

You can also block or delete cookies by configuring your browser.

The specific identification of cookies, providers, purposes and duration periods must be kept up to date in accordance with the technologies effectively implemented.

10. Commercial communications

We use the contact data to respond to inquiries and maintain communications related to the services requested.

We may send you news, promotions and tourist recommendations when we have a valid legal basis.

Interested individuals can request to stop receiving promotional communications by writing to info@mhtravelagency.com or by using the available cancellation options.

The cancellation of promotional communications does not affect the messages necessary to manage a query or service requested.

Completing a quote request does not automatically mean accepting advertising communications.

11. Conservation of personal data

Magic Holidays stores personal data in its systems according to the nature of each request and the purposes of the processing.

Jotform Forms

The records received through Jotform are kept on that platform for a period of two years, According to the retention period reported by the agency.

The preservation of a copy in other systems is governed by the purposes and conditions applicable to those systems.

CRM system

The data incorporated into the CRM remain stored to enable the management of inquiries, the history of care, and the monitoring of business relationships.

Currently, no fixed deadline for automatic deletion has been set for all CRM records.

The retention must remain linked to a legitimate purpose and cease when the data are no longer necessary, unless there is another obligation or valid reason to retain them.

Interested parties may request the deletion of their data when legally required.

Propositions

The data received during recruitment processes are kept on the platforms used to manage the assessments and related communications.

Their conservation must be limited to the time necessary for those purposes and to the additional periods legally justified.

Information related to tourism services

It is retained during the provision of services and during the additional periods required by legal, contractual obligations or the handling of claims.

Technical and analytical data

They are preserved according to the configuration of the platforms and to the periods necessary for their purposes.

When the need to retain personal information ends, it must be deleted, anonymized, or its processing restricted in accordance with applicable regulations.

12. International transfers

Magic Holidays Travel Agency operates from the United States and provides advice to people from different countries.

As a result, some data may be stored, accessed, or processed in jurisdictions other than the country where the data subject is located.

Technology providers can also operate through international infrastructure.

When the GDPR applies, international transfers subject to restrictions must have an appropriate legal mechanism.

These mechanisms may include adequacy decisions, standard contractual clauses or other legally recognized guarantees, depending on the circumstances and the intended recipients.

The agency must identify and document the guarantees associated with its actual transfers.

Interested parties can request information about the transfers of their data and the safeguards used by contacting the privacy contact email address.

13. Security and confidentiality

Magic Holidays adopts technical and organizational measures aimed at protecting personal data against unauthorized access, alteration, loss, or improper disclosure.

These measures include access controls, security procedures, and the use of technological services designed to protect information.

Access to data must be limited to persons authorized to perform specific functions.

No Internet-connected system can guarantee absolute security. Therefore, protection measures must be reviewed and adapted to the identified risks.

14. Information about minors

Our advisory and recruitment services are aimed at adult individuals.

During the planning of family trips, we can request information about the number and ages of the minors who are part of the group.

This information must be provided by parents, guardians, or authorized individuals.

We do not seek to collect personal data directly from minors without a proper legal basis or without the corresponding authorizations when necessary.

15. Automatic assignment and profiling

Magic Holidays uses technological tools to organize consultations and distribute requests among agents.

The automated assignment of a query serves an administrative purpose and does not constitute, in itself, a decision intended to produce legal effects or consequences of a similarly significant nature for the person concerned.

We also use navigation statistics to analyze the performance of our content and understand interactions with the site.

We do not use these mechanisms to make decisions that are exclusively automated and have legal or significantly similar effects on visitors or applicants.

In the event of incorporating treatments of that nature, we will provide the additional information and guarantees required by applicable regulations.

16. Rights of the holders

According to applicable legislation, interested parties may be entitled to:

• Access the personal data we hold.
• Request the correction of incorrect information.
• Request the deletion of data when appropriate.
• Objecting to certain treatments.
• Request the limitation of the processing.
• Request the portability of information when applicable.
• Withdraw the granted consent.
• Exercise the rights related to automated decisions.
• Presenting complaints to the competent data protection authorities.

How to exercise these rights

Applications can be sent to info@mhtravelagency.com.

We may request the information reasonably necessary to verify the applicant's identity.

When the GDPR applies, we will respond without undue delay and, as a general rule, within one month, with the legal extensions permitted.

The exercise of these rights is free of charge, except for the exceptions provided for by law.

Interested parties may also file a complaint with a competent data protection authority.

17. External services, modifications and contact

External services

Our site may contain links or integrated content from third parties, including social networks, messaging services, videos, forms and travel platforms.

These services may apply their own privacy policies when acting as independent controllers.

Updates

We may modify this Privacy Policy to reflect changes in our procedures, services, technological tools, or legal obligations.

The current version will be published on this same page, indicating its date of update.

When appropriate, we will inform you of any relevant changes and request new authorizations.

Contact regarding data protection

The protection of personal data and the transparency in its use are part of Magic Holidays Travel Agency’s commitment to its travelers, visitors and collaborators.