Privacy Policy

Privacy Policy

Last updated: [add date]

This Privacy Policy explains how Elegant Excursions S.L.U. (“we”, “us”, “our”) collects and processes personal data when you use Teide By Night (the “Website”) and related services, including tour reservations.

1) Who is the Data Controller?

Data Controller: Elegant Excursions S.L.U.
Website: Teide By Night (teidebynight.com)
Contact: Use the contact page on this Website or the email address listed in our Legal Notice/Imprint.

2) What personal data we collect

We may collect and process the following categories of personal data:

  • Contact data: name, email address, phone number.
  • Booking data: tour date, pickup area/meeting point preference, number of participants, special requests (e.g., dietary requirements or accessibility notes if you provide them).
  • Transaction data: payment confirmation and transaction references (note: we do not store full card details; payment is processed by our payment provider).
  • Communications: messages you send us by email, forms, WhatsApp/chat, or other channels.
  • Technical/usage data: IP address, browser type, device information, and browsing activity.
  • Cookies and similar technologies: we use cookies for essential functionality and, with your consent, analytics and marketing cookies. See our Cookie Policy for details.

3) Why we use your data and legal bases

We process personal data for the purposes below, relying on the legal bases indicated under the GDPR:

  1. To provide the service and manage bookings (e.g., confirm reservations, organize pickup logistics, respond to service requests).
    Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
  2. To respond to inquiries and provide customer support.
    Legal basis: legitimate interest (GDPR Art. 6(1)(f)) and/or contractual necessity where applicable.
  3. To comply with legal and tax obligations (e.g., invoicing, accounting records).
    Legal basis: legal obligation (GDPR Art. 6(1)(c)).
  4. To improve and secure our Website and services (e.g., fraud prevention, troubleshooting, performance monitoring).
    Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
  5. Analytics and marketing activities (e.g., measuring traffic and improving campaigns), only where you have given consent through our cookie banner/settings.
    Legal basis: consent (GDPR Art. 6(1)(a)).

4) Sharing your data

We may share personal data with trusted service providers who help us operate the Website and deliver the service, such as:

  • Booking and website service providers (hosting, maintenance, forms).
  • Payment providers (to process payments securely).
  • Analytics and marketing providers (only if you consent to analytics/marketing cookies).
  • Customer support tools (e.g., email, chat/WhatsApp integrations if used).

These providers process data under our instructions and are bound by contractual obligations to protect it. We do not sell your personal data.

5) International transfers

Some providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place (such as adequacy decisions or Standard Contractual Clauses) as required by GDPR.

6) Data retention

We keep personal data only as long as necessary for the purposes described above:

  • Booking and service records: retained as needed to provide the service and handle post-service support.
  • Legal/tax records (e.g., invoices): retained for the period required by applicable law.
  • Analytics/marketing data: retained according to the settings of the relevant tools and your consent choices.

7) Your rights

Under the GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (where applicable)
  • Restrict processing
  • Object to processing based on legitimate interests
  • Data portability (where applicable)
  • Withdraw consent at any time (for consent-based processing, such as analytics/marketing cookies)

To exercise your rights, contact us via the details in Section 1. You also have the right to lodge a complaint with your local data protection authority.

8) Cookies

We use essential cookies for the Website to function properly. Analytics and marketing cookies are used only if you consent. You can change your cookie preferences at any time via the cookie settings link on the Website. Please read our Cookie Policy for full details.

9) Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no online system is 100% secure.

10) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a new “Last updated” date.