PRIVACY POLICY

Privacy Policy 

España Discovery (Registered Office: P.O. Box 4045, 46006 Valencia, Spain; email: [email protected]) is the data controller under the GDPR (EU 2016/679) and Spain's LOPDGDD. Our appointed Data Protection Officer is España Discovery Travel ([email protected]). This notice applies to all customers of España Discovery. We take your privacy seriously and this policy explains what personal data we collect, why we use it, how long we keep it, and with whom we share it. Access to personal data is restricted to those employees of España Discovery who need it to perform their duties.

1. Categories of Personal Data Collected, Processed, Held and Shared

  • Identity & contact data: name, postal & email address, telephone number
  • Account & membership data: user IDs, membership start/end dates, payment records
  • Marketing & communications data: newsletter preferences, correspondence history
  • Technical & usage data: IP address, browser type, analytics cookies

2. Purposes of Processing

We use your data to:

  • Manage your membership (registration, authentication, account maintenance)
  • Provide products & services you request, including order fulfillment and billing
  • Send transactional communications (order confirmations, payment receipts)
  • Deliver marketing communications (newsletters, promotions) when you have consented
  • Improve our website & services via aggregated analytics

3. Lawful Bases for Processing

We rely on the following legal grounds (GDPR Art. 6):

  • (a) Consent: sending marketing emails and setting non-essential cookies (you may withdraw consent at any time)
  • (b) Performance of a contract: managing your membership, processing orders
  • (c) Legal obligation: retaining accounting records for tax and auditing purposes
  • (f) Legitimate interests: website security, fraud prevention, internal record-keeping, and improving user experience (balanced against your rights)

4. Collection of Your Data

Where the law requires, we will clearly indicate which data fields are mandatory and which are optional. We will obtain your explicit consent before processing any data that is not strictly necessary for contract performance or legal compliance.

5. Storage & Retention

  • Data security: All personal data is stored in encrypted databases with access controls and regular backups.
  • Retention periods:
    • Membership & account data: duration of active membership + 7 years (to comply with Spanish commercial law)
    • Marketing consents and preferences: until you withdraw consent
    • Cookies and analytics data: up to 24 months, depending on cookie category

6. Recipients of Your Data

We do not routinely share personal data with third parties except with your consent or as set out below. Our main processors are:

  • Shopify International Ltd (e-commerce platform) - under EU Standard Contractual Clauses for any transfers outside the EEA
  • PayPal, Inc. (payment processing) - under PayPal's EU Data Processing Addendum
  • Google Ireland Ltd (Google Analytics) - under Google's EU Data Processing Terms

7. Legal Disclosures

We will only disclose your personal data without your consent if required by law (e.g., court order, tax authorities) or to protect our legal rights. In the event of a personal data breach, we have procedures to notify the Spanish Data Protection Agency (AEPD) within 72 hours and to inform affected individuals when required by law.

8. Your Rights

Under the GDPR and LOPDGDD, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data ('right to be forgotten')
  • Restrict or object to our processing of your data
  • Data portability (receive your data in a structured, machine-readable format)
  • Withdraw consent at any time (marketing & cookies)
  • Lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es

To exercise any right, please contact us at [email protected] or write to España Discovery, P.O. Box 4045, 46006 Valencia, Spain. We will verify your identity (e.g., copy of ID and a recent utility bill) before fulfilling your request.

9. Further Information

If you have any questions about this privacy policy or our data processing practices, please email [email protected]. We may update this policy from time to time; the date of the latest revision will appear at the top.

Google Analytics
We use Google Analytics to analyze website usage via cookies. Google Ireland Ltd processes analytics data under its EU Data Processing Terms. For details, see https://policies.google.com/privacy.

Cookies
We use cookies to distinguish you from other users, improve your experience, and compile anonymous site-usage statistics. You can manage or withdraw your consent at any time via our cookie banner or by adjusting your browser settings. For a full list of cookies and their lifetimes, please see our Cookie Policy at [link].

España Discovery website is powered by Shopify International Ltd and uses Shopify Pay and PayPal, Inc. for payments. You can review their privacy policies here: