Last updated: 09.09.2025
This document describes how Victoria Andalucia Tour (hereinafter — “We”, “Our website”) collects, uses, and protects the personal data of website visitors. The website runs on the WordPress platform and operates in Spain. We act in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable legislation of Spain.
1. What data we collect
While using the website, we may collect and process the following categories of personal data:
- Contact data: name, email address, phone number — when you submit a request through forms;
- Booking data: information transferred to the third-party service Bokun.io when making a reservation (e.g., participant’s name, date, selected tour, etc.);
- Communication data: messages and files you send through the form — some of these requests may be forwarded to Telegram for faster processing;
- Technical data: IP address, browser and device details, cookies, and server logs, used to ensure proper website operation and analyze traffic.
2. Purposes of data processing
We process personal data for the following purposes:
- Processing and confirming tour bookings via the Bokun.io service;
- Responding to your requests and messages submitted through the website form (including forwarding requests to Telegram with your consent);
- Administrative and technical operations, ensuring the security of the website;
- Analytics and service improvement (e.g., visitor statistics);
- Compliance with legal obligations and the protection of our rights.
3. Third-party services
To provide our services, we use third-party providers:
- Bokun.io — a platform for tour management and booking. Data required to complete a reservation is transferred to Bokun and processed in accordance with their privacy policy;
- Telegram — a messenger used by us to quickly process certain requests. When submitting a message through the form, part of the data (e.g., your name, phone, and message text) may be forwarded to a Telegram chat for handling;
- Additionally, the website may use analytics services, payment gateways, etc. — the use and data processing by these providers are governed by their respective privacy policies.
We recommend reviewing the privacy policies of the above-mentioned services on their official websites.
4. Legal basis for processing
We process personal data on the following legal grounds:
- Your consent (e.g., when submitting a form, subscribing, or expressly agreeing to the transfer of data to Telegram);
- Necessity for the performance of a contract (e.g., to confirm and complete a tour booking via Bokun);
- Compliance with legal obligations and legitimate interests (site administration, fraud prevention, and security assurance).
5. Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. After the retention period, the data will be securely deleted or anonymized.
7. Data sharing with third parties
We do not sell your personal data to third parties. Data sharing may occur only in the following cases:
- When using Bokun.io — the data required for booking is transferred to this service;
- When submitting a request through the form, we may forward data to Telegram for processing;
- If required by law or court order, or for the protection of our rights and security.
8. Data subject rights (GDPR)
In accordance with GDPR, you have the following rights regarding your personal data:
- Right of access — you can request a copy of the data we process about you;
- Right to rectification — request the correction of inaccurate or incomplete data;
- Right to erasure (“right to be forgotten”) — in certain cases, you can request the deletion of your data;
- Right to restriction of processing — request limitation of processing in specific circumstances;
- Right to data portability — receive your data in a structured format and, if necessary, transfer it to another service;
- Right to object — object to data processing based on legitimate interests or for direct marketing purposes;
- Right to withdraw consent — if processing is based on consent, you can withdraw it (without affecting the lawfulness of processing before withdrawal).
To exercise any of these rights, please contact us using the details below. We will respond within the timeframes established by law.
9. Data security
We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, or alteration. However, complete security on the internet cannot be guaranteed — please take care when transmitting confidential information.
10. Children
Our website is not intended to collect personal data from children under the age of 16. If you believe we are processing data from a minor without parental or guardian consent, please contact us immediately.
11. Contact
If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact us:
Company name: Victoria Andalucia Tour12. Changes to this policy
We may update this Privacy Policy from time to time. All changes will be published on this page with the date of the last update indicated.