1. Data controller

The data controller responsible for the processing of personal data through this website is:

Business / legal name	TEAM FRUIT S.L.
Website	https://toursfrommalaga.com/
Email	toursfrommalaga@gmail.com

2. Personal data we may collect

Depending on how you use the website, we may collect the following types of personal data:

• Contact details, such as name, email address, phone number or WhatsApp number.
• Information you voluntarily send when asking about a tour, date, number of travellers or special requests.
• Technical information, such as IP address, browser type, device information and website usage data.
• Booking-related information when you interact with external booking platforms linked from this website.

3. Purposes of processing

We may process personal data for the following purposes:

• To answer enquiries sent through email, forms, WhatsApp or other contact channels.
• To help users choose and book tours or experiences from Malaga.
• To manage customer support related to tour availability, meeting points or booking questions.
• To improve the website, its content, usability and performance.
• To comply with applicable legal obligations.
• To track affiliate or sponsored booking links when users click on external booking platforms.

4. Legal basis for processing

The legal basis for processing personal data may include:

• Consent: when you voluntarily contact us, accept cookies or send information through a form or messaging channel.
• Pre-contractual or contractual measures: when processing is necessary to answer a booking request or provide information before booking.
• Legal obligation: when processing is required to comply with applicable laws.
• Legitimate interest: to maintain website security, respond to user requests and improve the website experience.

5. External booking platforms and affiliate links

This website may include links to third-party booking platforms, tour operators or affiliate systems. When you click those links, you may be redirected to an external website where the booking, payment and data processing are managed by that third party.

We are not responsible for the privacy practices of external websites. Before completing a booking, please review the privacy policy and terms of the external provider.

Some links may be affiliate or sponsored links. This means we may receive a commission if you book through those links, at no extra cost to you.

6. WhatsApp, email and contact channels

If you contact us by WhatsApp, email or another messaging channel, we will process the information you provide in order to respond to your request. Do not send sensitive personal data unless it is strictly necessary for your enquiry.

7. Cookies and analytics

This website may use technical, analytics or third-party cookies to improve functionality, measure traffic and understand how users interact with the site.

If analytics, advertising pixels or tracking tools are used, users should be informed through a cookie notice or cookie policy where required.

8. Data retention

Personal data will be kept only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Contact enquiries may be retained for the time necessary to respond and manage the relationship with the user. Booking-related information may be retained according to legal, tax or administrative obligations where applicable.

9. Data sharing

We may share personal data with:

• Technology providers needed to operate the website, email, hosting, forms or analytics tools.
• Booking platforms or tour providers when necessary to manage a request or redirect a booking.
• Public authorities when required by law.

We do not sell personal data to third parties.

10. International transfers

Some technology providers, communication tools or external platforms may process data outside the European Economic Area. Where applicable, such transfers should be based on appropriate safeguards under data protection law.

11. Your rights

Under applicable data protection law, you may have the right to:

• Access your personal data.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to certain processing activities.
• Request restriction of processing.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at: toursfrommalaga@gmail.com.

12. Right to lodge a complaint

If you believe your data protection rights have been violated, you may lodge a complaint with the Spanish Data Protection Agency: Agencia Española de Protección de Datos.

13. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. However, no website or online transmission system can be guaranteed to be completely secure.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the website, services, legal requirements or data processing practices.

The latest version will always be published on this page.