Legal information

Privacy policy

What data we collect when you book a tour, what we use it for, who it's shared with, and how to exercise your rights.

Page under review. Contains data marked as [DATA PENDING] still to be confirmed. It should not be considered final or used as a legal basis until completed and reviewed by a professional — see the Spanish version's docs/LEGAL-PENDIENTE.md tracking document, which applies to this page too.

1. Data controller

Name: [DATA PENDING: legal name or business name]
Tax ID: [DATA PENDING]
Address: [DATA PENDING]
Contact to exercise your rights: [DATA PENDING — dedicated privacy email]
Data Protection Officer (if applicable): [DATA PENDING: to confirm whether required based on processing volume]

2. What data we collect

Today, none automatically: this site doesn't yet have its own contact form. When you book a tour through one of our links, you leave buggytenerife.es and provide your data directly to the booking platform (for example, GetYourGuide) or the contact channel you use (for example, WhatsApp) — not to us. That data is handled by that platform under its own privacy policy, not ours.

This site does not collect card or payment data: Buggy Tenerife does not charge the customer — see how booking works.

3. Purpose

Currently not applicable, as no data is collected directly. If we add our own contact form in the future, this section will be updated to explain exactly what that data would be used for before we start collecting it.

4. Who your data is shared with

Buggy Tenerife doesn't share your data with anyone, because it doesn't collect it. When you book through a link on our site, you provide it directly to the relevant booking platform or operator — that relationship is governed by that platform's privacy policy, not ours.

[DATA PENDING: if a contact form is implemented in the future (see the Spanish TODO.md Fase 7, currently no active plan), this section will be completed with where that data is processed and stored].

5. Legal basis

Currently not applicable, as no data is collected. If we add our own form in the future, processing would be based on the performance of pre-contractual measures taken at the data subject's request (Art. 6.1.b GDPR). Any optional additional communication (for example, a newsletter, if one existed in the future) would be based on your express consent, never pre-ticked.

6. Retention period

Currently not applicable. [DATA PENDING: if a form exists in the future, the exact retention period will be defined here].

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [DATA PENDING: privacy email]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe processing doesn't comply with applicable regulations.

8. Security

We adopt reasonable technical and organisational measures to protect any data you provide us against unauthorised access, loss or alteration. The exact technical detail depends on the final implementation of a contact form (see point 4).

9. Cookies

See our cookie policy for the detail of what's stored in your browser.

10. Changes to this policy

This policy may be updated to reflect legal or service changes, particularly once a contact form is implemented and the pending data in this document is confirmed.