Legal
Privacy Policy
What we ask you, why we need it, and how long we keep it. In plain language, because you should not need a lawyer to read this.
Who is responsible for your data
The company responsible for processing your personal data is:
- Company
- Marina Alta Experiences S.L.
- NIF
- B93801058
- Registered office
-
C/ Los Patios 4, Urb. Monte Pego
03780 Pego, Alicante, Spain - Commercial register
-
Registro Mercantil de Alicante
Hoja A-207736 · Inscripción 1 · IRUS 1000478327062 - Phone
- +34 610 394 356
- Website
- marinaaltaexperience.com
For any question about your data, one email is enough.
What we ask, and why
When you book an Experience we ask for your name, your email address, a phone number, the date, which Experience you want to ride, and how many scooters and passengers. We use this to hold your scooters, to reserve the table for lunch, to reach you on the day itself and to send you your confirmation.
Afterwards, in your confirmation email, we ask for helmet sizes and for any allergy or dietary wish. Allergies and dietary wishes we pass on to the location where we eat, that is the only reason we ask.
When you use the contact form we ask for your name, your email address and your message, so that we can answer you.
With every booking we also record which version of our terms and conditions you agreed to, and the moment you agreed. We do that because the terms themselves require it, and because it protects both of us if there is ever a question about what was agreed.
Our server keeps a short technical log to keep the forms usable and to stop automated abuse. Your IP address is never stored as such: it is converted into an unreadable code that we cannot turn back into an address.
On what basis we process it
- To perform the agreement: everything we need to arrange and carry out your Experience.
- To comply with a legal obligation: our bookkeeping and tax records.
- Our legitimate interest: keeping the website and the forms secure and usable, and counting how often each page is opened so we know whether the site is doing its job.
- Your consent: for recognisable use of photographs or video for promotion, which you are always free to refuse.
How long we keep it
- Bookings and invoices: for as long as the statutory retention period for our accounts requires, which in Spain is six years.
- Messages through the contact form: up to two years, so we can pick up an earlier conversation.
- Technical and security logs: up to twelve months.
- Visit counts: the detailed records for ninety days. The daily totals stay, because no one can be recognised in them.
After that we delete them.
Who else sees it
We do not sell your details and we do not share them for advertising. Your data are handled by the parties we need in order to run the day:
- our hosting provider, which keeps the website and the database running;
- our email provider, which delivers your confirmation;
- the restaurant or location where we eat, which receives only what it needs: the number of people and any allergies or dietary wishes.
As soon as online payment is available, the payment provider will be added to this list, together with what it receives. Your card details never reach us.
The route map and the video
The map on an Experience page uses map tiles from OpenStreetMap. When the map comes into view, your browser requests those tiles directly, which means OpenStreetMap can see your IP address and browser. Everything else on the site, images, fonts, the page itself, is served from our own server.
The film on the home page is hosted on YouTube. Nothing is loaded from YouTube until you press play, no player, no image, no cookie. Once you do press play, YouTube receives your IP address and browser and may set cookies of its own, under Google’s privacy policy. We use the no-cookie version of the player, which limits that as far as YouTube allows.
How we count visits
We keep a count of how often each page is opened, so we can see which Experiences draw attention. That counting happens on our own server, while the page is being put together. No cookie is placed, no script runs in your browser, and nothing is sent to Google or to any other outside party.
To tell one visitor from another within a single day, we make an unreadable code out of your IP address, your browser and that day’s date. Because the date is part of it, the code is different tomorrow, so your visits on two different days cannot be linked. We cannot turn the code back into an address, and it is never joined to your booking or your message.
The detailed records are deleted after ninety days. What remains is the daily total per page and per language: figures in which no one can be recognised. We do this on the basis of our legitimate interest in knowing whether the website works, and we have deliberately kept it to the least that serves that purpose.
Cookies
We use the cookies that are needed to make the site work and, only if you agree to it, the cookies of Google Analytics. You are asked once, at the bottom of the page, and refusing costs you nothing: the whole site works either way. The cookie policy lists every cookie there is.
Your rights
You may ask us what we hold about you, have it corrected, have it deleted, restrict or object to its use, or receive a copy in a common file format. Send us an email and we will answer within one month.
If you think we are not handling your data properly, you are entitled to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
Changes
If the website changes in a way that affects this policy, we update the text and the date below it.
Google Analytics
If you accept, we use Google Analytics to see how the site is used: which pages people open, how they got here, and whether everything works on a phone. Google places cookies for that and receives your IP address, your browser and the pages you look at.
For visitors in Europe the provider is Google Ireland Limited. Your data may be processed on servers outside the European Union; Google relies for that on the European Commission’s standard contractual clauses and on the EU–US Data Privacy Framework. We have switched the advertising features off, so nothing here is used to build an advertising profile of you.
The legal basis is your consent, and nothing else. You can withdraw it whenever you like by deleting this site’s cookies in your browser; the question then comes back on your next visit. Refusing changes nothing about what you can do here.
Our own visitor count, described above, keeps running either way. That one places no cookies and needs no permission, which is why those figures are complete and the Analytics figures are not.