A TOUR & FRIENDS, operated by DMC PENINSULAR EVENTS S.L., we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable regulations.

By using this website or our services, you accept the practices described in this policy. If you do not agree, please do not use the website or provide personal information.

1. Information on the Data Controller

The entity responsible for the processing of your personal data is:

• Company name: DMC PENINSULAR EVENTS S.L.

• Trading name: TOUR & FRIENDS

• NINO: B56683329

• Registered office: 13 Calle Calesas, Madrid, 28026, Spain

• Email: info@tourandfriends.com

• Contact telephone number: +34 651 850 845

2. Data We Collect

We collect and process the following types of personal data:

2.1 Information You Provide Directly:

• Full name

• Contact details (email address and phone number)

• Payment details (for bookings and payments)

• Information relating to the activities or services you request (for example, preferences, allergies or special needs)

2.2 Automatically Collected Information:

When you visit our website, we may collect technical information such as:

• IP address

• Browser type and version

• Device information (such as operating system and screen resolution)

• Website usage data (e.g. pages visited, time spent on the website and clicks)

2.3 Sensitive Data:

We do not collect particularly sensitive personal data (for example, information relating to health, race or religion), unless you explicitly provide it for the purpose of organising certain services (for example, dietary requirements).

3. How We Use Your Data

We process personal data for the following purposes:

3.1 Provision of Services:

• Manage reservations and provide the requested activities or services.

• Communicating with you regarding your bookings, including confirmations, cancellations or modifications.

3.2 Marketing and Communications:

• Sending promotional offers or newsletters, provided that you have given your explicit consent.

• You can withdraw your consent at any time by contacting us or by using the “unsubscribe” link included in our emails.

3.3 Website Optimisation:

• Improve the performance and usability of our website through the analysis of technical data and user behaviour.

3.4 Compliance with Legal Obligations:

• Comply with applicable laws, regulations and administrative obligations.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

• Execution of a contract: When necessary to provide the services you have requested.

• Consent: For the sending of commercial and promotional communications.

• Legal obligation: To comply with applicable laws and regulations.

• Legitimate interest: To improve our services and the operation of our website.

5. Data Transfer

We only share your personal data in the following circumstances:

5.1 External Service Providers:

• For activities provided by third-party operators (for example, flamenco shows or Hop-On Hop-Off tours), we may share your contact and booking details with the relevant providers.

5.2 Legal Compliance:

• When required by law, by court orders, or by government authorities.

5.3 Business Operations:

• In the event of a merger, acquisition or asset sale, your data may be transferred to the new entity.

We do not sell or rent your personal data to third parties.

6. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with our legal obligations.

• Booking and transaction data: They will be kept for six years, in accordance with applicable tax and financial regulations.

• Data used for marketing: They will be kept until you withdraw your consent or ask to stop receiving communications.

7. Your Rights

As a data subject, you have the following rights under the GDPR:

• Right of access: Request a copy of your personal data.

• Right of rectification: Request the correction of inaccurate or incomplete data.

• Right to erasure: Requesting the deletion of your data, subject to legal retention obligations.

• Right to restriction of processing: Request that we limit how we use your data.

• Right to data portability: Request a copy of your data in a structured, commonly used and machine-readable format.

• Right to object: Object to the processing of your data for marketing purposes or based on legitimate interests.

• Right to withdraw consent: Withdraw at any time the consent given for the sending of commercial communications.

To exercise these rights, you can contact us via:

• Email: info@tourandfriends.com

• Telephone: +34 651 850 845

If you consider that your rights have been infringed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction.

Despite these measures, no method of transmitting information over the internet and no electronic storage system is completely secure. Therefore, we cannot guarantee the absolute security of your data.

9. Cookies and Tracking Technologies

Our website uses cookies to improve your browsing experience. For detailed information about the cookies we use and how you can manage them, please see our Cookie Policy.

10. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements or other circumstances. The updated version will be published on our website with its corresponding effective date.

11. Contact Information

For any questions, queries or requests relating to this Privacy Policy or the processing of your personal data, you may contact us:

• Email: info@tourandfriends.com

• Telephone: +34 651 850 845