PRIVACY POLICY
Updated: February 2024
I. Name and Contact Information of the Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU member states is:
MALLORCA CULINARY TOURS
Mr. Robert Tillner
C/ Vapor de Santueri 46
76070 Portocolom
ILLES BALEARS
Phone: +34 629 110 846
Email: info@mallorcaculinarytours.com
II. General Information on Data Processing
1. Scope of Processing of Personal Data
We collect and use personal data only to the extent necessary to provide a functional website and to deliver our content and services. Processing of personal data is either based on consent, for contractual performance, to comply with legal obligations, or to safeguard legitimate interests (see Section 2).
2. Legal Basis for Processing Personal Data
We process personal data according to the following legal bases:
- Art. 6(1)(a) GDPR – Consent of the data subject
- Art. 6(1)(b) GDPR – Processing for contractual fulfillment or pre-contractual measures
- Art. 6(1)(c) GDPR – Processing to fulfill a legal obligation
- Art. 6(1)(f) GDPR – Processing to protect legitimate interests
3. Storage Duration and Data Deletion
Personal data is deleted or restricted as soon as the purpose of storage ceases or statutory retention periods have expired.
III. Website Provision and Log Files
Each time our website is accessed, the following data is collected automatically:
- Browser type and version
- IP address (anonymized)
- Date and time of access
- Visited pages
- Operating system
Purpose of Processing: The storage of this data ensures the functionality of the website and helps to analyze and prevent security threats. This data is not combined with other data sources.
Legal Basis: Art. 6(1)(f) GDPR (legitimate interest in security and website functionality).
Storage Duration: 7 days, then deleted.
IV. Use of Cookies
We use cookies to optimize the user experience:
- Essential Cookies: Necessary for basic website functions.
- Analytics Cookies: Collect anonymized data for website improvement.
- Marketing Cookies: Track user behavior for personalized advertising.
On the first visit to our website, consent for non-essential cookies is requested via a cookie banner. Consent can be revoked at any time.
Legal Basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR (legitimate interest for essential cookies).
V. Use of Google Analytics
This website uses Google Analytics 4 with IP anonymization. Google Analytics collects data on website usage and generates reports to improve our offerings.
- Data Processing: Google stores anonymized IP addresses, browser details, and visit behavior.
- Legal Basis: Art. 6(1)(a) GDPR (consent).
- Opt-Out: Users can disable tracking via a browser add-on (Google Opt-Out).
VI. Social Media Plugins
We integrate social media plugins from Facebook, Instagram, and Twitter. No personal data is transmitted to these providers unless the user actively clicks on a plugin. Only then is a connection established to the respective platform servers.
Legal Basis: Consent under Art. 6(1)(a) GDPR.
VII. Contact and Booking Form
When using our contact or booking form, personal data (e.g., name, email, inquiry details) is stored for the purpose of processing the request.
Legal Basis:
- Art. 6(1)(b) GDPR (contract fulfillment) for booking inquiries
- Art. 6(1)(f) GDPR (legitimate interest) for general inquiries
Storage Duration: Up to 12 months after communication ends.
VIII. Rights of Data Subjects
You have the following rights concerning your personal data:
- Right to Access (Art. 15 GDPR)
- Right to Rectification (Art. 16 GDPR)
- Right to Erasure (Art. 17 GDPR)
- Right to Restriction of Processing (Art. 18 GDPR)
- Right to Data Portability (Art. 20 GDPR)
- Right to Object (Art. 21 GDPR)
- Right to Lodge a Complaint with a supervisory authority (Art. 77 GDPR)
IX. Updates to this Privacy Policy
This privacy policy is regularly updated to comply with legal requirements. Last update: February 2024.
