Privacy Policy

1. Data controller

Controller: IBZ MEHARI TOURS SL (trading as Retro Rides Ibiza)

Tax ID (NIF): B22910178

Address: Calle de Polls 10, Sant Jordi, 07817 Sant Josep de sa Talaia, Illes Balears, España

Email: info@retroridesibiza.es

Phone: +34 666 940 437

2. Purposes and legal basis

We process your personal data for the following purposes:

• Managing bookings and contracting tourist services (performance of contract — Art. 6(1)(b) GDPR).
• Handling enquiries received by email, phone or WhatsApp (legitimate interest / pre-contractual measures — Art. 6(1)(b) and 6(1)(f) GDPR).
• Sending commercial communications about our services, only if you have given explicit consent (Art. 6(1)(a) GDPR).
• Compliance with legal obligations in tax, accounting and tourism matters (Art. 6(1)(c) GDPR).
• Statistical analysis of the website via cookies, subject to consent (Art. 6(1)(a) GDPR). See cookie policy.

3. Categories of data

The data we may process includes:

• Identification data: name, surname, ID/passport, nationality.
• Contact data: email, phone, address.
• Booking data: date, time, product booked, number of participants.
• Payment data: processed directly by the payment gateway (Stripe/Turbookings); we do not store full card numbers.
• Technical data: IP address, browser type, pages visited (via analytics cookies, with consent).

4. Recipients

Your data may be disclosed to the following types of recipients:

Data will not be transferred to third parties for commercial purposes without your explicit consent.

• Online booking and payment service providers (Turbookings/Turvok, Stripe).
• Web hosting and technical service providers (Vercel).
• Web analytics providers (Google Analytics via Google Tag Manager, with consent).
• Public authorities when required by law.

5. International transfers

Some providers (Google LLC, Stripe Inc.) may process data outside the European Economic Area. Such transfers are carried out with appropriate safeguards under the GDPR (standard contractual clauses, adequacy decisions or other recognised measures).

6. Retention period

Data is retained as follows:

• Booking data: for the duration of the contractual relationship and thereafter for legal limitation and tax periods (generally 6 years).
• Marketing data: until you withdraw your consent.
• Enquiry data: as long as necessary to handle your request, up to a maximum of 12 months.
• Cookies: as indicated in the cookie policy.

7. Your rights

You may exercise the following rights by contacting us at info@retroridesibiza.es:

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with applicable law.

• Access: know what data we process about you.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your data where applicable.
• Restriction of processing.
• Data portability.
• Objection to processing based on legitimate interest.
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

8. Security measures

IBZ MEHARI TOURS SL has adopted the technical and organisational measures necessary to ensure the security of personal data and prevent alteration, loss, unauthorised processing or access, taking into account the state of technology and the nature of the data.

9. Minors

Services are intended for persons aged 18 and over. Minors must have authorisation from their parents or legal guardians to contract services or provide personal data.

10. Social media

We have profiles on social networks (Instagram, TripAdvisor, Google). Data processing on these platforms is governed by each network's privacy policies. We recommend reviewing them before interacting with our profiles.

11. Policy updates

This privacy policy may be updated to reflect legislative changes or changes to our practices. The current version will always be published on this page.