top of page

Data protection

Privacy Policy — Tapas Tour Madrid

Last updated: July 30, 2026

1. Data Controller

Tapas Tour Madrid C/ Pamplona 46, 4C 28039 Madrid, Spain Phone: +34 914 33 44 90 Email: info@tapastourmadrid.es Website: tapastourmadrid.es

Tapas Tour Madrid is the controller responsible for processing your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

If you have any questions about this policy or wish to exercise your rights, you can contact us at the address above.

2. What data we collect and why

PurposeData processedLegal basis (GDPR)

Managing bookings for tours and experiencesName, email, phone number, booking details, and where applicable payment dataArt. 6(1)(b) — performance of a contract

Responding to inquiries via the contact form or emailName, email, message contentArt. 6(1)(b) and/or (f) — legitimate interest in handling the inquiry

Sending marketing communications (only if you have opted in)Name, emailArt. 6(1)(a) — consent

Web analytics (Google Analytics 4)Cookie identifiers, truncated IP address, browsing behaviorArt. 6(1)(a) — consent (non-essential cookies)

Compliance with legal obligations (invoicing, tax)Identification and billing dataArt. 6(1)(c) — legal obligation

We do not use your data to build profiles or to make automated decisions that produce legal effects concerning you.

3. Cookies and consent

This website uses first-party and third-party cookies. Before installing any cookie that is not strictly necessary for the site to function, we display a consent banner that lets you:

  • Accept all cookies.

  • Reject non-essential cookies.

  • Set your preferences by category (technical, analytics, advertising).

You can withdraw your consent or change your preferences at any time from the cookie settings panel in the footer, or by deleting cookies through your browser settings. Please note that blocking certain cookies may affect the site's functionality.

​

Technical cookies

Necessary for the basic operation of the site (for example, remembering your selected language). These do not require consent.

​

Analytics cookies — Google Analytics 4

We use Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), with IP anonymization enabled. These cookies are only set if you have given your express consent through the cookie banner.

Data may be transferred to Google servers in the United States. This transfer relies on the Standard Contractual Clauses approved by the European Commission, which require Google to provide additional safeguards equivalent to GDPR protections. You can review Google's privacy policy at https://policies.google.com/privacy.

You can opt out of analytics by installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout, or simply by rejecting these cookies in the consent banner.

4. Data retention

We keep your data only for as long as necessary to fulfill the purpose for which it was collected:

  • Bookings and invoicing: for the duration of the contractual relationship and afterward for the periods required under Spanish commercial and tax law (generally 6 years from the last record; up to 4 additional years for tax purposes).

  • Inquiries via form/email: for as long as necessary to handle your request, and no more than 12 months after the last contact, unless a subsequent contractual relationship arises.

  • Marketing communications: until you withdraw your consent.

  • Analytics cookies: according to the configured duration, with a maximum of 14 months, in line with recommendations from the Spanish Data Protection Agency (AEPD).

5. Recipients of the data

We do not share your data with third parties except where legally required or necessary to provide the service you booked (for example, payment processors or providers of the booked activities), who act as data processors under contract in accordance with Art. 28 GDPR, or in the international transfer cases described in the cookies section.

6. Your rights

As a data subject, you have the right to:

  • Access: find out what data we hold about you.

  • Rectification: correct inaccurate data.

  • Erasure ("right to be forgotten"): request deletion of your data.

  • Restriction of processing.

  • Data portability: receive your data in a structured format.

  • Object, including objecting to the use of your data for direct marketing purposes.

  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

  • Not be subject to automated decision-making (we do not apply this type of processing).

You can exercise these rights by writing to info@tapastourmadrid.es, indicating the right you wish to exercise and attaching a copy of proof of identity.

If you believe your request has not been handled properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) — www.aepd.es.

7. Data security

We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration. However, no transmission over the Internet is completely secure; if you would prefer not to share data this way, you can contact us by phone.

8. Children's data

Our services are aimed at adults. We do not knowingly collect data from minors without the consent of their parents or legal guardians.

9. Changes to this policy

We may update this policy to reflect changes in the law or in our services. The date of the last update appears at the top of this document. We recommend reviewing it periodically.

10. Contact

For any questions regarding this privacy policy:

Tapas Tour Madrid C/ Pamplona 46, 4C, 28039 Madrid info@tapastourmadrid.es | +34 914 33 44 90

Botón
bottom of page