Privacy Policy

Updated: April 2026

I. Name and Contact Information of the Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

MALLORCA CULINARY TOURS
Mr. Robert Tillner
C/ Vapor de Santueri 46
07670 Portocolom
ILLES BALEARS

Phone: +34 629 110 846
Email: info@mallorcaculinarytours.com

---

II. General Information on Data Processing

1. Scope of Processing of Personal Data

We collect and use personal data only to the extent necessary to provide a functional website and to deliver our services. Processing is carried out based on consent, contractual necessity, legal obligations, or legitimate interests.

---

2. Legal Basis for Processing Personal Data

Processing is carried out in accordance with:

- Art. 6(1)(a) GDPR – Consent
- Art. 6(1)(b) GDPR – Contractual performance
- Art. 6(1)(c) GDPR – Legal obligation
- Art. 6(1)(f) GDPR – Legitimate interest

---

3. Storage Duration and Data Deletion

Personal data is deleted as soon as the purpose for storage ceases or statutory retention periods expire.

---

III. Website Provision and Log Files

Each time our website is accessed, the following data is collected automatically:

- Browser type and version
- IP address (anonymized where possible)
- Date and time of access
- Visited pages
- Operating system

This data is used to ensure website functionality, security, and stability.

Legal Basis: Art. 6(1)(f) GDPR (legitimate interest)

Storage Duration: Up to 7 days

---

IV. Use of Cookies

We use cookies to optimize user experience and analyze website usage.

- Essential Cookies: Necessary for website functionality
- Analytics Cookies: Used to understand user behavior
- Marketing Cookies: Used for advertising purposes

Consent for non-essential cookies is obtained via a cookie consent banner. Users can accept, reject, or withdraw consent at any time.

Legal Basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (essential cookies)

---

V. Use of Google Analytics

This website uses Google Analytics 4 with IP anonymization.

Google Analytics helps us understand how visitors use our website and improve our services.

- Data Processing: anonymized IP address, browser details, usage data
- Legal Basis: Art. 6(1)(a) GDPR (consent)
- Opt-Out: Users can disable tracking via browser settings or Google Opt-Out tools

---

VI. Social Media Plugins

We integrate social media plugins (e.g. Facebook, Instagram).

Data is only transmitted when users actively interact with these services.

Legal Basis: Art. 6(1)(a) GDPR (consent)

---

VII. Contact and Booking

When contacting us or making a booking, personal data (e.g. name, email, booking details) is processed.

Bookings are handled via our integrated booking system. Data is used solely for processing reservations and communication.

Legal Basis:
- Art. 6(1)(b) GDPR (contract)
- Art. 6(1)(f) GDPR (legitimate interest)

Storage Duration: Up to 12 months after completion of communication

---

VIII. Rights of Data Subjects

Users have the following rights:

- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

---

IX. Updates to this Privacy Policy

This privacy policy may be updated to reflect legal or technical changes.

Last update: April 2026