1. Controller

Lanzarote Experience Tours S.L.U., tax ID B76071836, Calle Calderetas, 100, 35550 San Bartolomé - Lanzarote. Contact: support@lanzaroteexperiencetours.com · +34 646 08 05 85 · +34 928 52 12 26.

2. Data we collect

Bookings: name, email, phone, language, hotel or cruise ship, flight number if needed, passenger numbers, date and service, notes, and payment data (Stripe handles the card; we do not store the full card number).

Contact form: name, email, phone and message.

Browsing: preferred language, cookie consent and, only if you accept, analytics identifiers. Technical logs may include IP address, browser or device type for security and site operation.

3. Purposes and legal bases

Running the booking, voucher, incidents, cancellations, invoices and service emails: performance of a contract (GDPR art. 6.1.b).

Answering enquiries: pre-contractual steps or legitimate interest (art. 6.1.b and 6.1.f).

Tax and accounting duties (Canary Islands IGIC): legal obligation (art. 6.1.c).

Non-essential cookies and any marketing: consent (art. 6.1.a), which you may withdraw at any time.

4. Retention

Booking and billing data are kept for as long as commercial and tax law require (generally up to 6 years after the relevant financial year).

Contact messages are kept only as long as needed to reply and at most 2 years if there is no contract.

Cookie consent is stored for 180 days.

5. Recipients

Service providers: hosting (Vercel), storage (Supabase), email, payments (Stripe) and, if you accept analytics, Google Analytics.

Stripe and Google may process data outside the EEA using standard contractual clauses or other GDPR art. 46 safeguards.

We do not sell your data. We only disclose it to authorities when the law requires it.

6. Your rights

You may request access, rectification, erasure, objection, restriction and portability by emailing support@lanzaroteexperiencetours.com, stating the right and attaching ID.

You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local EU authority.

7. Children

Bookings are made by adults. If minors travel, the person who books confirms they have authority from the holder of parental responsibility.