1. Data Controller
The data controller responsible for the processing of your personal data is:
- Name: María M. Izquierdo
- NIF: 25156934V
- Address: Avinguda dels Banys 28, 08860 Castelldefels (Barcelona), Spain
- Email: hello@castelldefelstapastour.com
2. What Data We Collect and Why
This website does not use contact forms that store data on a server. When you use the booking form, the information you provide (name, number of guests, preferred date and optional notes) is sent directly to the guide's WhatsApp account via a pre-filled message. No data is transmitted to or stored on our servers.
| Data | Purpose | Legal basis |
|---|---|---|
| Name, number of guests, preferred date | Processing your tour booking request | Art. 6(1)(b) GDPR — performance of a contract or pre-contractual steps |
| WhatsApp phone number (yours) | Confirming your booking and communicating tour details | Art. 6(1)(b) GDPR — performance of a contract |
3. Data Retention
Booking data exchanged via WhatsApp is retained only as long as necessary to manage your reservation and any follow-up queries. Once the tour has taken place and no further communication is required, data is deleted in accordance with WhatsApp's own retention policies.
4. Data Sharing
Your personal data is not sold, rented or shared with third parties, except:
- WhatsApp (Meta Platforms Ireland Ltd.): Booking messages are transmitted via WhatsApp. WhatsApp processes data in accordance with its own Privacy Policy.
- When required by law or competent authorities.
5. Your Rights
Under the GDPR and Spanish Organic Law 3/2018 (LOPDGDD), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erasure ("right to be forgotten")
- Restrict processing
- Object to processing
- Data portability
To exercise any of these rights, contact us at hello@castelldefelstapastour.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.
6. Cookies
This website does not use tracking or analytical cookies of its own. If analytics are enabled in the future, this policy will be updated and a cookie consent banner will be displayed before any data is collected.
7. Security
We apply appropriate technical and organisational measures to protect the personal data you share with us against unauthorised access, alteration, disclosure or destruction.
8. Updates to This Policy
This Privacy Policy may be updated from time to time. The date of the last revision is shown below. We recommend checking this page periodically.
Last updated: May 2025