PRIVACY POLICY

Privacy Policy 

España Discovery (Registered Office: P.O. Box 4045, 46006 Valencia, Spain; email: info@espana-discovery.es) is the data controller under the GDPR (EU 2016/679) and Spain’s LOPDGDD. Our appointed Data Protection Officer is España Discovery Travel (info@espana-discovery.es). This notice applies to all customers of España Discovery. We take your privacy seriously, and this policy explains what personal data we collect, why we use it, how long we keep it, and with whom we share it. Access to personal data is restricted to those employees of España Discovery who need it to perform their duties.

1. Categories of Personal Data Collected, Processed, Stored, and Shared

  • Identity and contact information: name, mailing and email addresses, phone number
  • Account and membership data: user IDs, membership start and end dates, payment records
  • Marketing & communications data: newsletter preferences, correspondence history
  • Technical and usage data: IP address, browser type, analytics cookies

2. Purposes of Processing

We use your data to:

  • Manage your membership (registration, authentication, account maintenance)
  • Provide the products and services you request, including order fulfillment and billing
  • Send transactional communications (order confirmations, payment receipts)
  • Send marketing communications (newsletters, promotions) once you have given your consent
  • Help us improve our website and services through aggregated analytics

3. Legal Bases for Processing

We rely on the following legal grounds (GDPR Art. 6):

  • (a) Consent: sending marketing emails and setting non-essential cookies (you may withdraw your consent at any time)
  • (b) Performance of a contract: managing your membership, processing orders
  • (c) Legal obligation: retaining accounting records for tax and auditing purposes
  • (f) Legitimate interests: website security, fraud prevention, internal record-keeping, and improving the user experience (weighed against your rights)

4. Collection of Your Data

Where required by law, we will clearly indicate which data fields are mandatory and which are optional. We will obtain your explicit consent before processing any data that is not strictly necessary for the performance of a contract or legal compliance.

5. Storage & Retention

  • Data security: All personal data is stored in encrypted databases with access controls and regular backups.
  • Retention periods:
    • Membership and account data: duration of active membership + 7 years (to comply with Spanish commercial law)
    • Marketing consents and preferences: until you withdraw your consent
    • Cookies and analytics data: up to 24 months, depending on the cookie category

6. Recipients of Your Data

We do not routinely share personal data with third parties except with your consent or as described below. Our main data processors are:

  • Shopify International Ltd (e-commerce platform) – under the EU Standard Contractual Clauses for any transfers outside the EEA
  • PayPal, Inc. (payment processing) – under PayPal’s EU Data Processing Addendum
  • Google Ireland Ltd (Google Analytics) – under Google’s EU Data Processing Terms

7. Legal Disclosures

We will only disclose your personal data without your consent if required by law (e.g., a court order or a request from tax authorities) or to protect our legal rights. In the event of a personal data breach, we have procedures in place to notify the Spanish Data Protection Agency (AEPD) within 72 hours and to inform affected individuals when required by law.

8. Your Rights

Under the GDPR and LOPDGDD, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data (“right to be forgotten”)
  • Restrict or object to our processing of your data
  • Data portability (receive your data in a structured, machine-readable format)
  • Withdraw consent at any time (marketing & cookies)
  • File a complaint with the Spanish Data Protection Agency: https://www.aepd.es

To exercise any right, please contact us at info@espana-discovery.es or write to España Discovery, P.O. Box 4045, 46006 Valencia, Spain. We will verify your identity (e.g., a copy of your ID and a recent utility bill) before fulfilling your request.

9. Further Information

If you have any questions about this privacy policy or our data processing practices, please email info@espana-discovery.es. We may update this policy from time to time; the date of the latest revision will appear at the top.

Google Analytics
We use Google Analytics to analyze website usage via cookies. Google Ireland Ltd processes analytics data in accordance with its EU Data Processing Terms. For details, see https://policies.google.com/privacy.

Cookies
We use cookies to distinguish you from other users, improve your experience, and compile anonymous site-usage statistics. You can manage or withdraw your consent at any time via our cookie banner or by adjusting your browser settings. For a complete list of cookies and their lifetimes, please see our Cookie Policy at [link].

España Discovery This website is powered by Shopify International Ltd. and uses Shopify Pay and PayPal, Inc. for payments. You can review their privacy policies here: