Privacy Policy
Controller: Tabarca Experience S.L.
Purpose: Manage bookings and communications.
Legal basis: User consent.
Recipients: Data will not be transferred to third parties except under legal obligation.
Rights: Access, rectification, erasure, objection, and data portability.
Contact: info@tabarcaexperience.com
Legal basis: EU Regulation 2016/679 and Organic Law 3/2018 (LOPDGDD)
1) Controller of your personal data.
The Controller of your personal data is the companyTabarca Experience SL
, registered for tax purposes withCIF B44792844 at address C/ San Fernando 21 pb – Santa Pola Alicante, Postal Code: 03130. The Data Processors are each of the companies we collaborate with and mentioned in the corresponding section of this notice. The Controller and Processors (collectively, "we" or "us") undertake to process passenger personal data ("your data") in accordance with the Law and as required in particular by the GDPR. To exercise your rights as a data subject under Articles 15-22 of the GDPR (for example, the right to access personal data or request the deletion of your personal data), send an email toinfo@tabarcaexperience.com. You will find more information about your rights below. For any questions regarding this document, you can: contact our privacy officer by email atinfo@tabarcaexperience.com .
2) Why, when, and how we collect data.
Our main goal is to provide you with an excellent experience across all services we offer, and for this purpose we collect personal data about you on different occasions (for example, when you browse www.tabarcaexperience.com or book a trip with us).
Below you will find the main reasons why we process your data:
a) Providing information about our experiences based on your requests(submitted through the corresponding website, our call center, or by email), pursuant to Article 6.1.(b) GDPR.
For this purpose, we need your identifying and contact details (name and surname, ID/tax number, postal address, telephone, email), as well as the content of your request. Without this data we cannot provide the requested information and will only use it to respond to your inquiry.
Furthermore, for the purposes of Article 6.1.(a) GDPR regarding lawfulness of processing, only when you indicate your express and specific consent, we will use your contact details to send newsletters and/or marketing communications via email or SMS about products and services that may interest you. You may withdraw your consent at any time by sending an email to the address in Section 1.
b) Completing and managing the booking of an experience,pursuant to Article 6.1.(b) GDPR.
To travel aboard our vessels, you must provide your name, contact information, and basic identification details during the booking phase. You must also provide payment information for ticket purchase.
c) Sending information about products and services similar to those you booked
When you provide your email upon booking one of our experiences, we will send information about similar or related products or services, unless you exercise your right to opt out of marketing communications at the time of booking.
This data processing is carried out pursuant to our legitimate interest in informing you about products and services we offer which, being similar or related to those expressly requested or booked by you, may improve your experience (Article 6.1(f) GDPR).
d) Handling inquiries, complaints, and feedback, pursuant to Articles 6.1.(b) and 6.1.(f) GDPR.
We track comments and complaints made on board to respond appropriately to your requests. You may submit an anonymous complaint or comment, but in such case we will not be able to track it adequately or provide the best assistance.
Additionally, we may use the content of your request, complaint, or feedback to improve our onboard services, minimizing the use of personally identifiable information as much as possible.
e) Ensuring service security
Pursuant to Article 6.1.(d) GDPR.
We track passengers booking with us to manage crisis situations and ensure safety. Therefore, we record your basic identifying data (first name, surname, and national identity document).
For this processing, the Data Controller is the company Tabarca Experience S.L.
3) Retention period.
In accordance with Article 5.1.(e) GDPR, personal data collected is retained in a form permitting identification of data subjects for no longer than necessary for the purposes for which data is processed, and in any event no longer than established by applicable laws.
We have established a corporate data retention policy that sets timeframes for processing, after which all copies of personal data are destroyed using appropriate techniques preventing identification.
4. Your rights
The GDPR strengthens your rights, and the Controller and/or Processors undertake to do everything necessary to safeguard your personal data.
Specifically, you have the following rights regarding your personal data:
a) Access your personal dataand obtain specific information on how we process it, pursuant to Article 15 GDPR. You may only exercise this right for your own data or data of a minor or vulnerable person if acting as legal guardian. Tabarca Experience S.L reserves the right to request proof of identity and refuse access if identity or legal representation cannot be established.
b) Rectify your personal data, pursuant to Article 16 GDPR, including by providing a supplementary statement.
c) Obtain erasure of personal dataconcerning you, pursuant to Article 17 GDPR, unless such data is:
necessary for exercising the right of freedom of expression and information; necessary for compliance with a legal obligation requiring processing under Union or Member State law to which Tabarca Experience S.L is subject, or for performing a task carried out in the public interest or official authority; for reasons of public interest in public health pursuant to Article 9.2(h)(i) and Article 9.3 GDPR; or for the establishment, exercise, or defense of legal claims.
d) Request restriction of processing of your personal data, pursuant to Article 18 GDPR. This right may be exercised in the following cases:
Temporary restriction where you contest accuracy. In this case, we will restrict processing while verifying accuracy and notify you before lifting the restriction; processing is unlawful and you oppose erasure, requesting restriction instead;The company Tabarca Experience S.Lthe company Tabarca Experience S.L no longer needs personal data for processing purposes, but you require them for legal claims; or you have objected to processing pursuant to Article 21.1 GDPR pending verification whether our legitimate grounds override yours.
e) Data portability. Pursuant to Article 20 GDPR, you may exercise this right where processing is based on consent or contract with Tabarca Experience S.L. or a group entity, and carried out by automated means.
f) Object at any time, to processing of personal data concerning you. Pursuant to Article 21 GDPR, you may exercise this right where processing is based on public interest or our legitimate interests.
g) Not be subject to a decision based solely on automated processing, including profiling, producing legal effects or significantly affecting you. Pursuant to Article 22 GDPR, you may exercise this right unless processing is necessary to enter or perform a contract with Tabarca Experience S.L, is authorized by Union or Member State law with suitable safeguards, or is based on explicit consent.
h) Lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of alleged infringement if you consider processing infringes this Regulation, pursuant to Article 77 GDPR.
At the following link you will find a list of all data protection supervisory authorities in Europe: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
To exercise your rights as a data subject, please send an email to info@tabarcaexperience.com.
We reserve the right to update or modify, add, or remove parts of this informational notice at any time. In such case, we will publish the revised notice on this page; the "Last updated" date below will be changed, and a banner will be displayed on our website.
Each version of the privacy notice takes effect upon publication on the website. Significant changes in processing will require your consent in accordance with applicable law.
You are responsible for reviewing this document periodically to ensure you are aware of the current version. To obtain a previous version, please contact us using the details in Section 1.
The company Tabarca Experience S.Lis fully committed to ensuring your privacy is respected at all times and that data processing complies with applicable data protection legislation.
If you have doubts or questions regarding data processing carried out by us or our group companies, please contact us using the details provided in Section 1 of this notice.
*Privacy notice pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (GDPR).