LEGAL INFORMATION
Privacy Policy
Last updated: 19 July 2026
1. Data controller
- Controller: Eco Tuk Experience & City Tours SL
- Tax ID (NIF): B24974883
- Address: Calle Balbina Valverde, 27, Bajo B, 29014 Málaga, Spain
- Phone / WhatsApp: +34 672 37 90 27
2. What data do we process and for what purpose?
| Situation | Data processed | Purpose |
|---|---|---|
| Booking via WhatsApp | Name, phone number, date and time of the chosen tour | Manage the booking and communicate with you about your tour |
| Browsing the website | Technical data (IP address, browser type) via third-party services | Correctly display the site's content (maps, typography) |
| Enquiries / contact | The data you voluntarily provide us with | Respond to your enquiry |
3. Legal basis
The legal basis for processing your data is:
- Performance of a contract or pre-contractual measures, when you book one of our tours.
- The data subject's consent, when you contact us voluntarily.
- The controller's legitimate interest in the proper technical functioning of the website.
4. Who do we share your data with?
We do not disclose your data to third parties except where legally required. We use the following providers as data processors or for the provision of the service:
- WhatsApp / Meta Platforms Ireland Ltd.: managing communication and bookings.
- Google (Fonts, Maps): displaying typography and the location map.
- OpenStreetMap / CARTO: displaying the interactive route map.
Some of these providers may be located outside the European Economic Area; in such cases, the transfer is covered by the safeguards provided for under the GDPR (standard contractual clauses or other appropriate safeguards).
5. Retention period
We will retain your data for as long as necessary to manage your booking and, subsequently, for the periods legally required to address potential liabilities (generally up to 5 years under Spanish commercial and tax regulations).
6. Your rights
You may exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate data.
- Erasure: request that we delete your data.
- Objection: object to a specific processing activity.
- Restriction: request that we restrict processing.
- Portability: receive your data in a structured format.
To exercise them, write to us via WhatsApp at +34 672 37 90 27, enclosing a copy of your ID document. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe we have not properly handled your request.
7. Source of the data
The data we process comes directly from the data subject, through the WhatsApp conversation started when booking a tour or contacting us.
8. Cookies
This website uses technical and third-party cookies. You can find the details in our Cookie Policy.