Privacy policy
Last updated: 26 October 2026
This policy explains what personal data guestreservas collects through this website, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and Spain's data protection law (LOPDGDD, Organic Law 3/2018).
1. Who is responsible for your data
- Trading name
- guestreservas
- Company
- [Registered company name — add in config.php]
- NIF / CIF
- [Tax ID (NIF/CIF) — add in config.php]
- Registered office
- Calle de Alcalá, 42, 28014 Madrid, Madrid, España
- Commercial registry
- [Registro Mercantil details — add in config.php]
- Travel agency licence
- [Comunidad de Madrid travel agency licence number — add in config.php]
- contacto@guestreservas.org
- Phone
- +34 960 102 554
For any question about your data, email contacto@guestreservas.org.
2. What we collect and why
| When | Data | Why we use it | Legal basis |
|---|---|---|---|
| Booking request | Name, email, phone, tour, dates, number of travellers, notes | To check availability, send you a quote and arrange your trip | Steps you asked for before a contract (GDPR art. 6.1.b) |
| Group / custom trip enquiry | Name, email, phone, group size, dates, message | To design and quote a custom trip | Steps before a contract (art. 6.1.b) |
| Call-back request | Name, phone, preferred time, short note | To call you back | Your consent (art. 6.1.a) |
| Contact message | Name, email, phone, topic, booking reference, message | To answer you or handle a complaint | Your consent (art. 6.1.a) and steps before or under a contract (art. 6.1.b) |
| Confirmed booking | The above, plus details needed by hotels and transport providers | To provide the trip and meet tax and consumer-law duties | Contract (art. 6.1.b) and legal obligation (art. 6.1.c) |
| Any form | IP address and time sent | To stop spam and abuse | Legitimate interest in keeping the site secure (art. 6.1.f) |
We don't sell your data and we don't use it for automated decisions or profiling. We only send you marketing if you ask for it separately.
If you send us details about other travellers in your group, please make sure they know you are sharing them with us.
3. Who we share it with
- Our website hosting and email providers, who store data for us under a data processing agreement.
- Hotels, guides and transport companies for your trip, only once a booking is confirmed and only what they need.
- Public authorities when the law requires it (for example, Spanish rules on registering hotel guests).
The website loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google. If any provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
4. How long we keep it
- Requests and messages that don't become a booking: deleted after 24 months.
- Call-back requests: deleted after 12 months.
- Confirmed bookings: kept for as long as Spanish tax, accounting and consumer law requires (generally up to 6 years).
- Spam-protection data (IP addresses): kept with the request it came with.
5. Your rights
You can ask us to:
- give you a copy of your data (access);
- correct it (rectification);
- delete it (erasure);
- limit how we use it (restriction);
- send it to you or another company in a common format (portability);
- stop using it, where we rely on legitimate interest (objection).
Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email contacto@guestreservas.org. We may ask you to confirm your identity. We reply within one month.
If you're not satisfied with our answer, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
6. Security
The website uses encrypted connections (HTTPS). Requests are stored in a password-protected database that only our staff can access.
7. Children
Our forms are for adults. In Spain, people under 14 can't consent to the use of their data, so a parent or guardian must make bookings and enquiries for them.
8. Changes
If we change this policy, we'll update the date at the top of this page.