Privacy policy
This policy explains what personal data we collect when you use cavesmallorca.com, why we collect it, who we share it with and what rights you have. We collect only what we need to manage your booking and run the site.
1. Who is responsible for your data
The data controller for the personal data processed through this website is:
- Email: cavesmallorca@tour2b.com
- Website: cavesmallorca.com
For any question about your data, write to cavesmallorca@tour2b.com.
2. What data we collect and why
We process personal data in the following situations:
- Bookings. When you book a tour or ticket, the booking form collects the details needed to issue and manage your booking: name, email address, phone number, number of participants and, where applicable, your pick-up point. Payment is handled by a secure payment provider; we never see or store your full card details. Legal basis: performance of the contract you enter into with the booking (Art. 6.1.b GDPR).
- Contact. If you write to us by email or through the contact form, we use your name, email address and message to reply. Legal basis: your request and our legitimate interest in answering it (Art. 6.1.b and 6.1.f GDPR).
- Anonymous usage measurement. We measure how the site is used with our own system, without cookies and without storing your IP address. It records pages viewed, clicks on tours, completed bookings, the traffic source and the device type, linked to a random session identifier that is deleted when you close the browser tab. It cannot be used to identify you. Legal basis: our legitimate interest in improving the site (Art. 6.1.f GDPR).
- Technical logs. Our hosting provider temporarily processes connection data such as your IP address in order to deliver the website and keep it secure. Legal basis: legitimate interest (Art. 6.1.f GDPR).
3. Who we share your data with
We do not sell your data. We only share it when necessary:
- The operator of the activity you book (the cave, the boat or transport company), so that they can provide the service.
- Our booking platform (tour2b / hub2b) and the payment provider, which process the booking and the payment on our behalf.
- Our hosting provider (Netlify, Inc., USA). Any transfer outside the European Economic Area is covered by appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
- Public authorities, when we are legally required to do so.
4. How long we keep it
- Booking data: for as long as needed to provide the service and handle any claim, and afterwards for the periods required by law (for example, tax and accounting obligations).
- Contact messages: until your query is resolved, and for a maximum of one year afterwards.
- Usage measurement: it is anonymous, so it is not personal data.
5. Your rights
You can request access to your data, its rectification or erasure, the restriction of its processing, object to its processing and request its portability. Write to cavesmallorca@tour2b.com with the subject “Data protection”. We may ask you to verify your identity before answering.
If you think we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Cookies and local storage
This website does not use advertising cookies or third-party analytics cookies, which is why it shows no cookie banner. It only uses what is strictly necessary for it to work:
You can delete this data at any time from your browser settings.
- NEXT_LOCALE (cookie): remembers the language you chose.
- Session storage: the anonymous session identifier used for usage measurement, deleted when you close the tab.
- Booking widget: may store technical data strictly necessary to complete the booking and the payment.
7. Minors
Bookings must be made by adults. We do not knowingly collect data from children under 14.
8. Changes to this policy
We may update this policy when the site or the law changes. The date at the top shows the latest version. See also our legal notice.