Legal Advice and Privacy Policy

DATA CONTROLLER

Owner: www.ExcursionsGranCanaria.com is a site operated by Pavel Kusnir – Tourist Intermediary. I am an independent operator, self-employed and a one-person company registered in Canary Islands/Spain.

ID/Tax Number: X8222874Y
Directory of Tourism Concession Number: I-0002476.1
Contact Email: info(at)excursionsgrancanaria.com

APLICABLE REGULATIONS

This website adapts its data processing to comply with:

GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data.
LOPDGDD: Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (Spanish national data law).
LSSI-CE: Ley 34/2002 de Servicios de la Sociedad de la Información y Comercio Electrónico Information (Society Services and Electronic Commerce).

TYPES OF DATA COLLECTED

We collect booking and payment data, you will find complete details in THIRD-PARTY BOOKING ENGINE AND PAYMENT PROCESSING section below. We also collect personal information from received emails, you will find more details in WEBSITE AND EMAIL HOSTING section below. We collect technical information and email communications, you will find more details in WEBSITE AND EMAIL HOSTING section below. We collect referral data, tracking data and non-identifiable booking data as a part of our affiliate program, you will find more details in THIRD-PARTY AFFILIATE PROGRAM section below. We also collect analytical information about how you interact with our website, you will find more details in USE OF GOOGLE ANALYTICS FOR WEB ANALYSIS section below.

PURPOSE AND LEGAL BASIS FOR PROCESSING

There are multiple purposes and legal bases for processing, depending on the type of processed data and the data processors involved. These legal bases include consent, contractual necessity, legitimate interests, payment processing, and legal obligations. They also include our legitimate business interest in monetizing our content, providing personalized recommendations, and delivering the information that we consider necessary to run our business. You will find complete details about the purposes and legal bases in the following sections covering our DATA PROCESSORS.

DATA RETENTION PERIOD

Your booking and payment data, emails, and any other received personal data will be securely stored for a maximum period of 6 years. This timeframe is maintained to comply with Spanish legal, fiscal, and commercial obligations (such as tax records and liability claims).Once per calendar year, a system audit is performed to permanently delete or anonymize all booking records that have exceeded this 6-year threshold. Anonymized data contains no identifying elements and is kept exclusively for statistical analysis. Data collected via Google Analytics that is associated with cookies, user identifiers, or advertising identifiers is automatically deleted or anonymized after 14 months. You will find complete details about the data retention period for each type of data in the DATA PROCESSORS section below, which also includes links to read more about third-party data retention.

DATA SHARING AND THIRD PARTIES

We never sell, rent, or share your personal data with third parties for marketing purposes. However, to operate our service, your data is processed through trusted platforms that fully comply with GDPR regulations. You will find all details in following DATA PROCESSORS section.

LEGAL AND SECURITY DISCLOSURES

We reserve the right to transfer user data in satisfaction of any legal, administrative, or judicial mandates. Furthermore, data may be disseminated to safeguard the rights and security of the owner or associated clients, which encompasses information exchanges with third-party organizations dedicated to fraud mitigation and credit risk reduction.

YOUR RIGHTS

You have the right to access, rectify, restrict, or request the deletion of your personal data at any time. To exercise these rights, simply email us at info(at)excursionsgrancanaria.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you feel your rights have been violated.

DATA PROCESSORS

Website and email hosting
Third-party booking engine and payment processing
Third-party affiliate program
Use of Google Analytics for web analysis
Links to third-party websites

1. WEBSITE AND EMAIL HOSTING

DATA PROCESSOR

Provider: Webempresa Europa S.L.
Services: Web hosting and email infrastructure.
Location: Spain / European Union.
Data Protection: Webempresa complies with the GDPR and maintains strict security measures.

TYPES OF DATA COLLECTED

Depending on how you interact with this website, we collect:

Technical Information (WordPress): IP addresses, access logs, and technical cookie footprints to ensure site stability and prevent malicious activity.
Email Communications: Sender name, email address, message body, and metadata for every communication received. This data is processed solely to manage inquiries, provide technical or commercial customer support, and maintain professional relationships.

PURPOSE AND LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

Consent: When you willingly initiate contact via email or consent to essential technical tracking.
Contractual Necessity: To execute services or respond to inquiries you initiate.
Legitimate Interest: To maintain website security, prevent fraud, and optimize performance.

WHERE IS YOUR DATA LOCATED AND STORED

Your data is securely stored within the European Union.

DATA RETENTION PERIOD

We implement strict clean-up mechanics to protect your privacy:

Retention Metric: Email conversations, contact data, and associated interaction history are securely stored for a maximum period of 6 years.
Purge Schedule: Once per calendar year, a systematic review is conducted. All data that has exceeded the 6-year threshold is either permanently deleted or irreversibly anonymized.

DATA RECIPIENTS AND TRANSFERS

Third-party sharing: Your personal data will not be sold, leased, or shared with external third parties for marketing purposes.
Legal exceptions: Data will only be disclosed to judicial authorities or state security forces if required by active Spanish or European laws.

FOR MORE INFORMATION

Webempresa´s Privacy Policy Commitment.

YOUR RIGHTS

You have the right to access, rectify, restrict, or request the deletion of your personal data at any time. To exercise these rights, simply email us at info(at)excursionsgrancanaria.com.

2. THIRD-PARTY BOOKING ENGINE AND PAYMENT PROCESSING

HOW BOOKINGS AND PAYMENTS ARE PROCESSED (EXTERNAL REDIRECTION)

We do not collect or process your booking and payment information directly on our website. When you click to make a reservation, you are redirected via an external link to our official booking profile hosted by our third-party provider, Rezgo (rezgo.com).

DATA PROCESSORS

BOOKING DATA PROCESSOR: When you click to make a reservation, you are redirected via an external link to our official booking profile hosted by Sentias Software Corp. (DBA Rezgo) on their platform (rezgo.com). By using the booking system to secure our services, your personal details are collected and processed by Rezgo as our data processor, acting on our instructions and in compliance with GDPR requirements.
PAYMENT DATA PROCESSOR: All financial transactions and checkout payments are completed securely via Stripe Payments Europe, Limited (based in Ireland), which is natively incorporated into the Rezgo booking platform. Stripe handles payment verification, fraud prevention, and compliance.

TYPES OF DATA COLLECTED

BOOKING DATA: Through Rezgo, we collect the necessary information to fulfill your booking, which may include: full name, phone number, billing address and specific booking preferences or requirements.
PAYMENT DATA: Through Stripe, we collect the necessary transaction details (date, time, amount, and masked payment tokens – your full card number is encrypted and never visible to us). We never see, store, or have access to your full credit card credentials. Your payment data is encrypted and handled exclusively by Stripe in accordance with PCI-DSS standards.

PURPOSE AND LEGAL BASIS FOR PROCESSING

Performance of a Contract: Processing the customer’s name, contact details, and excursion date selection is necessary to fulfill the booking contract and provide the excursion service (Article 6.1.b GDPR)
Payment Processing: Processing financial and payment data via the third-party booking system is required to execute the transaction and comply with financial and tax record-keeping laws applicable in Spain, such as the Spanish General Tax Law (Article 6.1.b and 6.1.c GDPR).
Legal Obligations: Retaining specific billing and transaction records is mandatory to meet Spanish commercial and tax accounting laws (Article 6.1.c GDPR).

WHERE IS YOUR DATA LOCATED AND STORED

Because we use international cloud service providers, your data is stored in the following locations:

BOOKING DATA STORAGE: Your data is securely stored on Rezgo’s servers. Rezgo utilizes highly secure infrastructure provided by Amazon Web Services (AWS), with primary server infrastructure located in Canada and the United States. Appropriate safeguards, data processing agreements, and standard contractual clauses are utilized to ensure your data remains protected under international data protection laws (such as GDPR).
PAYMENT DATA STORAGE: Data processed by Stripe Payments Europe, Limited is primarily routed and hosted on secure cloud infrastructure located within the European Union (Ireland) and the United States. International data transfers to Stripe in the US are fully protected under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

DATA RETENTION PERIOD

We retain your personal booking records and historical data for a period of 6 years from the date of the booking completion or cancelation. This timeframe is maintained to comply with Spanish legal, fiscal, and commercial obligations (such as tax records and liability claims).

Purge Schedule: Once per calendar year, a system audit is performed to permanently delete or anonymize all booking records that have exceeded this 6-year threshold. Anonymized data contains no identifying elements and is kept exclusively for statistical analysis.

Your payment details and personal transactional data are stored by Stripe generally for 5 to 10 years to comply with legal, tax, anti-money laundering (AML), and know-your-customer (KYC) regulations. After 5 years we (excursionsgrancanaria.com) can only see your full name and no other personal details. Your full card number is always encrypted and never visible to us (from day one).

COOKIES AND TRACKING NOTICE DURING THE EXTERNAL THIRD-PARTY BOOKING PROCESS

Our website utilizes cookies to ensure its core operations, analyze traffic patterns, and deliver a smooth user experience (more details as follows).

BUT because bookings are processed externally, our website does not deploy or store checkout or payment cookies on your device.

When you follow the link to our booking profile on rezgo.com, you exit our domain. Once on Rezgo’s domain, their platform and Stripe Payments Europe, Limited will install necessary cookies on your browser. These cookies are strictly required to protect against fraud, secure financial transactions, and remember your reservation selection while you check out. You can review their respective tracking rules via the Stripe Cookies Policy and the Rezgo Privacy Center.

Essential Cookies: Rezgo drops necessary session cookies to keep track of the items in your shopping cart, remember your booking dates, and ensure secure data transmission while you check out.
Third-Party Payment Cookies: Stripe may drop security and fraud-prevention cookies during the checkout process to verify identity and prevent unauthorized transactions.
Managing Cookies: You can block or delete these cookies through your browser settings, but doing so will prevent you from successfully completing a booking.

FOR MORE INFORMATION

YOUR RIGHTS

You have the right to access, rectify, restrict, or request the deletion of your personal data at any time. To exercise these rights, simply email us at info(at)excursionsgrancanaria.com.

3. THIRD-PARTY AFFILIATE PROGRAM

Our website contains affiliate links and embedded widgets from the travel booking platform GetYourGuide (operated by GetYourGuide GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany)

DATA CONTROLLER: When you click on a GetYourGuide link or booking widget, you leave our site. Once redirected, you then interact directly with GetYourGuide, which acts as an independent data controller for any data collected during your visit or booking process on their platform. For more details on how they process your personal data and how to exercise your rights with them, please consult the GetYourGuide Privacy Policy.

DATA SHARED: We do not collect or store your personal booking data, payment details, or personal information when you book an excursion. However, when you interact with these affiliate links, GetYourGuide may track your referral origin (using cookies or unique IDs) and share non-identifiable aggregated referral data, tracking data and non-identifiable booking data with us to properly attribute affiliate commissions to us.

LEGAL BASIS: Our inclusion of these links is based on our legitimate interest in monetizing our content and providing relevant recommendations to our users (Article 6.1.f GDPR).

THIRD-PARTY PRIVACY: We do not control and are not responsible for how GetYourGuide processes your personal data. We encourage you to review the GetYourGuide Privacy Policy to understand how they process your personal data.

COOKIES AND TRACKING NOTICE DURING THE EXTERNAL AFFILIATE REDIRECTION

Once you click on the affiliate widget, you will be redirected to the GetYourGuide website, where you can accept or reject their cookie policy. Find out more about GetYourGuide cookie and tracking policy.

4. USE OF GOOGLE ANALYTICS FOR WEB ANALYSIS

DESCRIPTION OF PROCESSING
Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Google Analytics uses cookies and similar identifiers to collect information about how you interact with our website. This includes your pseudonymized IP address, browser type, device information, operating system, referral URLs, and pages visited. We use this data strictly to analyze website traffic, evaluate performance, and improve the user experience.

LEGAL BASIS FOR PROCESSING
The legal basis for processing this data is your explicit, prior consent (Article 6.1.a GDPR). You can grant or withdraw your consent at any time via our Cookie Settings banner.

INTERNATIONAL DATA TRANSFERS
The information generated by the cookies about your use of the website may be transmitted to and stored on Google servers located in the United States. Because your data may be processed outside the European Economic Area (EEA), these international transfers are protected under the EU-U.S. Data Privacy Framework. For cases where data is transferred to sub-processors not certified under the framework, Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of protection.

DATA RETENTION PERIOD
Data collected via Google Analytics that is associated with cookies, user identifiers, or advertising identifiers is automatically deleted or anonymized after 14 months. .

HOW TO CONTROL OR DEACTIVATE TRACKING
You have multiple ways to prevent Google Analytics from tracking your activity:

Cookie Banner: You can refuse or withdraw consent at any time by accessing our website’s cookie configuration panel.
Browser Add-on: You can download and install the Google Analytics Opt-out Browser Add-on provided directly by Google.
Browser Settings: You can configure your internet browser to reject cookies entirely or alert you when a cookie is being sent.

5. LINKS TO THIRD-PARTY WEBSITES

Our website may contain links to external, third-party websites or resources that are not operated or controlled by us. These links are provided solely for your information and convenience to help you find more details on specific topics.

Please be aware that we have no control over, and assume no responsibility for, the content, privacy policies, functioning, security, or data processing practices of any third-party websites. Once you click on an external link and leave our website, the tracking cookies and data processing activities are governed entirely by that external site’s terms and privacy framework.

We strongly advise you to review the privacy policy and cookie settings of every external website you visit before providing them with any personal data.

COOKIE POLICY

At https://excursionsgrancanaria.com, operated by Pavel Kusnir, we use cookies and similar tracking technologies to improve your browsing experience, analyze site traffic, and deliver personalized content and advertisements.

This Cookie Policy explains what cookies are, how we use them, and your choices regarding their use. You can manage your preferences at any time via our Cookie Consent Banner or the preference settings detailed below.

1. What Are Cookies?

Cookies are small text files stored on your computer or mobile device when you visit a website. They enable the website to remember your actions and preferences (such as login details, language, and other display preferences) over a period of time, so you do not have to re-enter them whenever you return to the site or browse from one page to another.

2. How We Use Cookies
We categorize our cookies into four distinct types based on their purpose and technical function:

Strictly Necessary Cookies (Always Active)
These cookies are essential for the Website to function properly and cannot be switched off in our systems. They are usually set in response to actions made by you, such as setting your privacy preferences, logging in, or filling out booking forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not function as a result. These cookies do not store any personally identifiable information.

Performance & Analytics Cookies (Requires Consent)
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our site and will not be able to monitor its performance.

• Google Analytics: We use Google Analytics, a web analytics service provided by Google LLC (“Google”). Google Analytics uses cookies to help us analyze how users interact with the Website. The information generated by the cookie about your use of the website (including your masked IP address) will be transmitted to and stored by Google on servers in the United States. Google uses this information to evaluate your website activity, compile reports for website operators, and provide other services relating to website traffic and internet usage.

The data that I usually store are: your location (only country and city), time and date of your visit, names of the pages that you have visited, your initial and final page saw and how many times have you visited my website.

Targeting & Advertising Cookies (Requires Consent)
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other websites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

3. Detailed Cookie Breakdown

Cookie Name	Provider	Type / Category	Purpose	Expiration
`_ga`	Google Analytics	Performance / Analytics	Used to distinguish unique users by assigning a randomly generated number as a client identifier.	2 years
`_ga_*`	Google Analytics	Performance / Analytics	Used to maintain session state and track page views.	2 years
`cookieyes-consent`	CookieYes (or alternative CMP)	Strictly Necessary	Stores the user’s cookie consent preferences for this domain.	1 year
`_gcl_au`	Google AdSense / Ads	Targeting / Advertising	Used by Google AdSense for experimenting with advertisement efficiency across websites using their services.	3 months

4. Google Consent Mode v2 Compliance

In compliance with Google’s EU User Consent Policy and regional privacy regulations, our website utilizes Google Consent Mode v2. This framework communicates your explicit choices directly to Google tags.

If you choose to reject performance or advertising cookies via our consent banner, Google Analytics will operate in a restricted, cookieless manner. This ensures your structural privacy preferences regarding analytics_storage and ad_storage are dynamically respected without breaking aggregate data reporting metrics.

5. Managing and Controlling Cookies

You have the absolute right to decide whether to accept or reject non-essential cookies.

• Cookie Consent Banner: Upon your first visit, a pop-up banner will prompt you to accept, reject, or customize your cookie settings. Your preferences will be logged, and no performance or targeting tracking scripts will fire until you provide explicit opt-in consent.

• Revisiting Your Settings: You can modify your choices or withdraw consent at any time by clicking the floating “Cookie Settings” widget located in the bottom corner of our Website.

• Browser Configuration: Most web browsers allow you to control cookies through their configuration settings. You can set your browser to refuse cookies or delete specific cookies.

• Google Analytics Opt-out: To explicitly prevent your data from being collected or used by Google Analytics across all websites, you can download the Google Analytics Opt-out Browser Add-on.

6. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for other operational, legal, or regulatory reasons. Please re-visit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.

7. Contact Us

If you have questions regarding this statement, please contact the website operator:

Operator: Pavel Kušnír – Tourist Intermediary
Email Contact: info(at)ExcursionsGranCanaria.com