Who is responsible
The controller of the personal data collected through the forms on this website is:
- Owner
- Eduardo Ballesteros Santa María
- Tax identification number (NIF)
- 53276223N
- Address
- Av. de la República Argentina 25, planta 9, 41011 Sevilla, Spain
- [email protected]
What we collect, and what for
Contact form
Your name, your email address, your message and, if you choose to give it, a booking reference. We use it only to answer you.
Review form
The trip you did, when you went, your rating and your review, your first name, where you are from (if you give it) and, if you want it published, your booking reference. We do not ask for your email address. We use the booking reference only to check that the booking exists before publishing a review; it is never published. Your review is published, with your first name and where you are from, only if you tick the publication box. If you do not, it is only for us.
Searching for your hotel or address
What you type in the search box is sent by our server to the OpenStreetMap search service (Nominatim) to find where it is, and the result is kept for 30 days so that the same search is not repeated. Your IP address and any other data about you are not sent with it.
“Use my location” button
Nothing. If you use it, your browser asks for your permission and the distance to each pickup point is calculated in your own browser. Your location is not sent to us or to anyone else, and it is not stored.
Weather forecast
Nothing. The 7-day forecast on the trip pages is requested by our server from the Norwegian Meteorological Institute (MET Norway) and stored for a few hours. Your browser does not connect to them and no data about you is sent.
The Málaga guide
Nothing. The guide is a direct download: there is no form, we do not ask for your email address and we do not know who downloads it.
We do not send marketing. Your email address is not added to any mailing list, is not used to send offers and is not shared with anyone. If that ever changes, we will ask you first.
On what legal basis
Your consent, given when you tick the box and send a form (Article 6.1.a of the GDPR). For the review form, publishing your review also needs its own box to be ticked. You can withdraw it at any time, which does not affect the lawfulness of what was done before.
How long we keep it
Messages and their replies are kept for as long as needed to deal with them and for any period required by law. Published reviews stay online until you ask us to remove them; unpublished ones are deleted within a year. If you ask us to delete your message or your review, we delete it.
Who else is involved
- Our hosting provider. The website and its database run on servers of Webempresa, located in the European Union.
- Our content delivery network. Traffic to this website passes through Cloudflare, which serves the pages and filters attacks. It sees the connection data that any network provider sees. Its statistics tool, Cloudflare Web Analytics, uses no cookies and only gives us aggregated figures (visits per page, country, browser, referring website), never data about you as a person.
- Our email. Messages sent from the form reach the email address shown above.
- Reviews widget. The reviews shown on some pages are displayed with Trustindex, which loads a script from its own servers. It shows public reviews; it does not receive the data you send us.
- Booking system. The booking calendar on each trip page is loaded from Turitop, the platform the operator uses. What you type in it goes to the operator, not to us.
Your data is not sold and is not shared with anyone for any purpose other than those described here.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, limit what we do with it, object to it being processed, or have it sent to you in a portable format. Write to [email protected] saying what you want and we will do it.
For data you entered in the booking system, the request has to go to the company that operates the trip, whose details are in your confirmation.
If you think we have not dealt with you properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos.
Security
The website runs over an encrypted connection and we apply reasonable technical and organisational measures to protect what you send us. No system is perfect, and we do not pretend otherwise.
Changes to this policy
This policy may be updated to reflect changes in the law or in how the website works. The version in force is always the one published on this page.
See also: Legal notice · Terms and conditions · Cancellations and refunds · Cookie policy