1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), the personal data collected through this website will be processed by:

2. Purpose of Data Processing

Depending on how you interact with the website, your personal data may be processed for the following purposes:

  • Contact Forms / Email Enquiries: To answer your requests for information, queries, or booking requests submitted through contact forms or directly via email.
  • Service Management: To provide, manage, and fulfill any booked tours, experiences, or contractual agreements made through the website.
  • Newsletter / Marketing Communications: If explicitly consented to, to send you news, updates, or promotional materials related to our services.
  • Website Analytics: To optimize user experience and evaluate website performance (using anonymized or aggregated data where applicable).

3. Legal Basis for Processing

The lawful basis for processing your personal data depends on the specific context:

  • Consent (Art. 6.1.a GDPR): When you fill out a contact form, subscribe to a newsletter, or accept analytical cookies. You may withdraw your consent at any time.
  • Contractual Execution (Art. 6.1.b GDPR): When the processing is necessary to perform a contract or service requested by you.
  • Legitimate Interest (Art. 6.1.f GDPR): To ensure website security, prevent fraud, or manage basic administrative enquiries.

4. Data Retention

Your personal data will be kept only for as long as necessary to fulfill the purpose for which it was collected:

  • Contact & Enquiries: Retained for as long as necessary to address your request and up to 1 year thereafter, unless a ongoing commercial/contractual relationship is established.
  • Contractual Data: Retained for the duration of the service and subsequently for the statutory limitation periods required by Spanish tax and administrative laws (typically up to 4–6 years).
  • Marketing Communications: Retained until you request to unsubscribe or withdraw your consent.

5. Recipients & Data Transfers

Your personal data will not be sold, rented, or disclosed to third parties, except in the following cases:

  • Legal Obligation: When required by competent judicial or public authorities under Spanish or EU law.
  • Essential Service Providers (Data Processors): Technical infrastructure providers essential to operate the website (e.g., hosting providers, web analytics tools, or email platforms). These providers process data strictly on our behalf and under compliant data processing agreements.

International transfers outside the European Economic Area (EEA) will only occur if adequate safeguards are in place (such as EU Standard Contractual Clauses or certified frameworks).

6. Your Rights

Under the GDPR and Spanish LOPDGDD, you have the right to exercise the following rights free of charge:

  • Access: Request a copy of the personal data held about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure (“Right to be Forgotten”): Request deletion of your personal data when it is no longer necessary for the purpose it was collected.
  • Restriction of Processing: Request temporary restriction of processing under certain legal circumstances.
  • Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
  • Objection: Object to the processing of your data based on legitimate interests or direct marketing.

To exercise any of these rights, send a request with a copy of an identifying document (such as a NIE, Passport, or ID) to: 📧 niall@yourbasquejourney.com

If you feel your data privacy rights have been infringed, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Security Measures

Appropriate technical and organizational security measures are implemented to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.