🔒 Privacy Policy

1. General Provisions

This Privacy Policy is developed in accordance with the General Data Protection Regulation (GDPR) of the European Union and the legislation of Spain. We respect your right to privacy and strive to protect your personal data. By using our website and services, you agree to the terms of this Policy.

2. What data we collect

When using our website and booking services, we may collect the following information:

• First and last name
• Email address
• Contact phone number
• IP address and website visit data
• Booking information (tours, dates, number of participants)
• Special requests, dietary requirements, medical conditions (if necessary)

3. How we use your data

Your personal data is used for the following purposes:

• Processing and confirming tour bookings
• Sending tickets, vouchers and itineraries to your email
• Contacting you regarding bookings and tour arrangements
• Improving our services and personalizing recommendations
• Analysing visit statistics and website performance
• Marketing communications (only with your consent)

4. Legal Basis for Processing

Your personal data is processed on the following legal bases:

5. Data Transfer to Third Parties

We do not sell or transfer your personal data to third parties for commercial purposes. Your data may be shared only with: tour guides for tour organisation, transport companies, hotels and restaurants (as part of bookings), payment systems for payment processing, and government authorities where legally required. All third parties are bound by confidentiality obligations.

6. Data Transfer Outside the EU

All tours are conducted within Spain (European Union). Your data is processed in accordance with GDPR requirements and is not transferred to countries outside the EU without appropriate safeguards.

7. Data Retention Periods

Your personal data is retained for the duration of the booking contract and for 5 years thereafter in accordance with Spanish tax legislation. Technical data (IP addresses, logs) is retained for up to 12 months for security and statistical purposes. After these periods, data is destroyed or anonymised.

8. Your Rights (GDPR)

Under GDPR, you have the following rights: the right to access your data, the right to rectification, the right to erasure (right to be forgotten), the right to restrict processing, the right to data portability, the right to object to processing, and the right to withdraw consent at any time.

9. Data Security

We take all necessary technical and organisational measures to protect your data: data encryption (SSL/TLS), access restriction, regular backups and security monitoring. All data is transmitted via secure channels.

10. Contact Us

For any questions regarding the processing of your personal data, you can contact us by email: privacy@traveltours.com or by phone: +34 911 234 567. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).