PRIVACY POLICY

Last updated: September 2026

1. Data Controller

The personal data collected through this website are processed by:

Data Controller: Iván Sánchez Rodríguez
Trading name: Easy Andalusia
NIF: 25605544N
Address: Avda. Andalucía 122 A, 11680 Algodonales, Cádiz, Spain
Email: hello@easyandalusia.com
Phone: +34 667 033 088
Website: easyandalusia.com

Easy Andalusia is responsible for the processing of personal data collected through this website and in connection with the services offered through it.

2. Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following personal data:

Name and surname
Email address
Telephone or WhatsApp number
Preferred date and number of participants
Information included in messages, enquiries or requests for personalised experiences
Booking and reservation information
Payment and transaction information necessary to process and manage a booking, where applicable

When you make a booking through our online booking system, your booking and payment information may be processed through Bókun, our booking platform and service provider.

We do not request or store your full payment card details directly through our website.

When a customer provides personal data relating to other participants in a booking, the customer is responsible for ensuring that they are authorised to provide such information.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

To respond to enquiries and messages sent through our contact forms.
To respond to requests for private or personalised experiences.
To communicate with you regarding your enquiry or requested experience.
To manage and process bookings made through our website.
To provide the services you have booked.
To contact you when necessary regarding your booking or experience.
To manage payments and booking-related transactions.
To comply with legal, accounting and tax obligations.
To protect our business, website and services and prevent fraudulent or unlawful activity.

We do not use information submitted through our contact forms to send newsletters or promotional communications unless you have separately provided the required consent.

We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects on you.

4. Legal Basis for Processing

Depending on the purpose, we process your personal data on the following legal bases:

Pre-contractual measures: when you contact us to ask about a tour, request a private experience or make an enquiry before booking.
Performance of a contract: when your personal data are necessary to manage and provide a booked experience.
Legal obligations: when we are required to process or retain certain information under applicable legislation.
Legitimate interests: where necessary to manage and protect our business, respond to enquiries, maintain website security, prevent fraud and protect our legal interests.
Consent: where applicable and where your consent is legally required, such as for certain non-essential cookies or promotional communications.

Providing personal data is generally voluntary. However, certain information is necessary to respond to enquiries, process bookings and provide the services requested. If you do not provide the information required for these purposes, we may be unable to process your enquiry or booking.

5. Booking and Payment Services

Bookings and payments made through this website may be processed using Bókun, an online booking platform provided by Tripadvisor LLC.

Bókun may process personal data necessary to facilitate and manage bookings, including booking details and payment-related information, in accordance with its own privacy policy.

For more information about how Bókun processes personal data, please consult its privacy policy.

Third-party payment service providers may also process payment information where necessary to complete a booking or transaction. Such providers process personal data in accordance with their own privacy policies and applicable data protection legislation.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which they were collected and to comply with applicable legal, accounting and tax obligations.

Enquiry data that are not connected to a booking will not be retained indefinitely and will be deleted or anonymised when they are no longer necessary for the purpose for which they were collected, unless a longer retention period is legally required.

Booking, transaction and accounting information may be retained for the periods required by applicable legislation.

Where processing is based on consent, personal data will be processed until consent is withdrawn, unless another lawful basis for continued processing applies.

7. Sharing of Personal Data

We do not sell your personal data.

We may share or allow access to personal data with service providers and other entities where necessary for the operation of our business or to provide our services, including:

Bókun, for booking and payment management.
Website hosting and technical service providers.
Email and communication service providers where necessary to respond to enquiries and manage bookings.
Payment service providers involved in processing bookings and transactions.
Professional advisers, where necessary to provide accounting, legal or other professional services.
Public authorities, courts or other entities where disclosure is required by law.

Where a service provider processes personal data on our behalf, we require appropriate contractual and data protection safeguards in accordance with applicable legislation.

8. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area.

Where personal data are transferred outside the European Economic Area, we will ensure that the transfer is carried out in accordance with applicable data protection legislation and that an appropriate legal mechanism and safeguards are in place where required, such as an adequacy decision or appropriate contractual safeguards.

9. Your Data Protection Rights

Subject to applicable legal requirements, you have the right to:

Access your personal data.
Request the correction of inaccurate or incomplete data.
Request the deletion of your personal data.
Request the restriction of processing.
Object to certain processing activities.
Request the portability of your personal data where applicable.
Withdraw consent where processing is based on consent.

To exercise your rights, contact us at:

hello@easyandalusia.com

Please include sufficient information to identify your request and specify the right or rights you wish to exercise.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe that your personal data have been processed unlawfully.

10. Third-Party Websites and Services

Our website may contain links or embedded services provided by third parties, such as booking, mapping or other online services.

These third parties may process personal data according to their own privacy policies. Easy Andalusia is not responsible for the privacy practices of third-party websites or services that are outside our control.

Where third-party services are embedded in or integrated into our website, their processing of personal data may also be subject to their own terms and privacy policies.

11. Cookies

Our website may use cookies and similar technologies that are necessary for its operation and, where applicable, cookies that require your consent.

Information about the cookies used on this website, their purposes and how you can manage your preferences is provided through our Cookie Policy and cookie consent mechanism.

Where required by law, non-essential cookies will only be activated after obtaining the appropriate consent.

12. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

However, no method of transmission or storage over the Internet can be guaranteed to be completely secure.

13. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes to our services, website, legal requirements or data processing practices.

The latest version will always be available on this website, together with the date on which it was last updated.

14. Contact

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at:

Iván Sánchez Rodríguez – Easy Andalusia
Email: hello@easyandalusia.com
Phone: +34 667 033 088
Address: Avda. Andalucía 122 A, 11680 Algodonales, Cádiz, Spain