Privacy Policy
Last updated: March 2026
Who We Are
Tenerife Experiences is a digital platform dedicated to promoting tourist experiences, activities, and services on the island of Tenerife, Canary Islands, Spain. Our mission is to connect visitors with the best experiences the island has to offer.
Data Controller
The personal data we collect is processed by:
- Name: Making Dreams Invest, S.L.
- Tax ID (NIF): B42856906
- Address: C/ Aragón 3, 38660 Adeje, Santa Cruz de Tenerife, Spain
- Email: info@tenerifeexperiences.com
What Data We Collect
- Email address: when you subscribe to our newsletter.
- Browsing data: information about how you interact with our website, including pages visited, time spent, and device used.
- Cookies: we use essential, analytics, and preference cookies to improve your experience.
- Analytics data: we collect anonymized data about site usage through analytics tools.
- Contact form data: when you contact us directly.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Newsletter: Explicit consent (Art. 6.1.a GDPR).
- Analytics and analytical cookies: Consent (Art. 6.1.a GDPR).
- Contact forms: Legitimate interest (Art. 6.1.f GDPR) - to respond to your inquiries.
- Affiliate links and booking systems: Legitimate interest (Art. 6.1.f GDPR) - to facilitate your purchases and bookings.
How We Use Your Data
- Improve our services and user experience.
- Send our newsletter with updates and recommendations (only if you have subscribed).
- Analyze website traffic to understand how users interact with our platform.
- Personalize the content we show you.
- Respond to your inquiries and requests through contact forms.
Third Parties
We share data with the following third-party services, all of which have their own privacy policies:
- Google Analytics: for web traffic analysis and user behavior.
- Supabase: as our database and authentication provider.
- Vercel: as our web hosting provider.
- Civitatis: affiliate links for experience bookings (generates tracking cookies).
- Stripe: payment processor for digital product purchases (only if you purchase products).
- Email delivery service (self-hosted n8n on a Hostinger VPS + SMTP server): to send the newsletter, confirmations and notices; it processes your email address.
- OpenAI: AI-assisted blog article generation; it does not receive users' personal data.
International Data Transfers
Some of our data processors are located outside the European Union. We use the following secure transfer mechanisms:
- Google LLC (Analytics): Standard Contractual Clauses (SCC) + Data Processing Amendment.
- Supabase Inc: Standard Contractual Clauses (SCC).
- Vercel Inc: Standard Contractual Clauses (SCC).
- Stripe Inc (payment processing): Standard Contractual Clauses (SCC) + PCI DSS Level 1 Certification.
Data Retention Periods
Personal data is retained for the following periods:
- Newsletter emails: until subscription cancellation.
- Analytics data: maximum 14 months, then anonymized.
- Contact form data: 12 months from last interaction.
- Page view data: 13 months, then anonymized.
Cookie Policy
We use cookies for site functionality. Cookies are classified as follows: essential (functionality), analytics (usage analysis), and preferences (personalization). You can disable cookies in your browser settings, although this may affect site functionality. For more details, see our dedicated cookie policy page.
Affiliate Links
Our website contains affiliate links to Civitatis. When you click an affiliate link:
- A cookie is generated on the civitatis.com domain with a 30-day duration.
- If you make a purchase during that period, we receive a commission.
- We do not share your personal data with Civitatis.
- Civitatis' privacy terms apply when you visit their site.
Payment Processing
If you purchase digital guides or other digital products on our site:
- Payments are processed through Stripe Inc.
- We do NOT store credit card data on our servers.
- Stripe is PCI DSS Level 1 compliant (the highest payment security standard).
- Your payment information is protected by Stripe's security standards.
- See Stripe's privacy policy for more information.
Minors
Tenerife Experiences does not knowingly collect personal data from individuals under 14 years of age. If we become aware that we have collected data from a minor under 14 without parental consent, we will delete that data immediately. If you are under 14 and have provided data, please contact us.
Your Rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: you can request a copy of your personal data.
- Right to rectification: you can request correction of inaccurate data.
- Right to erasure: you can request deletion of your personal data.
- Right to restrict processing: you can request that we limit the processing of your data.
- Right to data portability: you can request your data in a structured format.
- Right to object: you can object to the processing of your data.
- Right to withdraw consent: you can withdraw your consent at any time.
Rights to Lodge a Complaint
If you believe your data protection rights are not being respected, you have the right to lodge a complaint with the competent supervisory authority:
- Spanish Data Protection Authority (AEPD)
- Address: C/ Jorge Juan, 6 - 28001 Madrid
- Website: www.aepd.es
- You can file a complaint online through the AEPD website.
Updates to This Policy
We reserve the right to update this privacy policy at any time. Significant changes will be communicated through our website or email to subscribed users. Continued use of the site after such changes constitutes acceptance of the updated privacy policy. The date of last update is shown at the top of this page.
Contact
To exercise any of these rights, if you have questions about our privacy policy, or if you wish to report a concern about the processing of your data, you can contact us at: