Effective date: 04.01. 2026
Who we are
Controller: [NAME / Experience Spain], address: [ADDRESS], VAT/ID: [ID], e-mail: [E-MAIL].
Data we process
- Contact details (name, email, phone) from forms and enquiries.
- Booking/order data (date, party size, selected services).
- Technical data from cookies and logs (IP, browser, page). Optional analytics.
Purpose & legal basis
- Replying to enquiries and performing a contract – Art. 6(1)(b) GDPR.
- Legal obligations (invoicing/accounting) – Art. 6(1)(c) GDPR.
- Legitimate interests (security, basic statistics) – Art. 6(1)(f) GDPR.
- Marketing/analytics only with your consent – Art. 6(1)(a) GDPR.
Cookies
We use essential cookies to run the site. Analytics/marketing cookies are stored only with your consent. You can change preferences in the cookie banner or browser.
Processors / sharing
We do not sell data. Typical processors: hosting [WEDOS], email/CRM [NAME], payment gateway [Stripe/PayPal], analytics [Google Analytics].
Retention
Forms/enquiries up to 12 months, contractual and accounting records as required by law (5–10 years), technical logs up to 3 months, or as per consent.
Your rights
Access, rectification, erasure, restriction, objection, portability. You may withdraw consent at any time. Supervisory authority: your local Data Protection Authority.
Contact
Questions: [E-MAIL], postal address: [ADDRESS].
Changes
We may update this Policy; the current version is always available on this page.