Saltar al contenido
Experiences

Privacy Policy

Last updated: August 2026

Who We Are

Tenerife Experiences is a digital platform dedicated to promoting tourist experiences, activities, and services on the island of Tenerife, Canary Islands, Spain. Our mission is to connect visitors with the best experiences the island has to offer.

Data Controller

The personal data we collect is processed by:

  • Name: Making Dreams Invest, S.L.
  • Tax ID (NIF): B42856906
  • Address: C/ Aragón 3, 38660 Adeje, Santa Cruz de Tenerife, Spain
  • Email: info@tenerifeexperiences.com

What Data We Collect

  • Reviews and opinions: if you leave a review, we collect the name you provide and your comment; they are published publicly on the listing after moderation.
  • First-party analytics data: only with your consent, we record in our own database the pages visited, clicks and actions (bookings, favourites, etc.), device type, language and a pseudonymous session identifier.
  • Email address: when you subscribe to our newsletter.
  • Browsing data: information about how you interact with our website, including pages visited, time spent, and device used.
  • Cookies: we use essential, analytics, and preference cookies to improve your experience.
  • Analytics data: we collect anonymized data about site usage through analytics tools.
  • Contact form and notification data: when you write to us through the contact form or ask to be notified about a guide, we store the details you provide (name, email and message) and, for security and abuse-prevention purposes, your IP address and browser identifier (user-agent).
  • Business contact data: if you create or confirm the listing of a business or a winery, we store the contact email, the name of the person who replies, the phone number provided and, for security, the IP address and browser identifier.
  • Admin panel access: for people with an account we store the username, the role, the login date, the IP address, the browser identifier and a log of the changes they make.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Reviews and opinions: Consent (Art. 6.1.a GDPR) - when you submit them for publication.
  • Newsletter: Explicit consent (Art. 6.1.a GDPR).
  • Analytics and analytical cookies: Consent (Art. 6.1.a GDPR).
  • Contact forms: Legitimate interest (Art. 6.1.f GDPR) - to respond to your inquiries.
  • Affiliate links and booking systems: Legitimate interest (Art. 6.1.f GDPR) - to facilitate your purchases and bookings.
  • Business and winery listings: performance of a contract or pre-contractual measures (Art. 6.1.b GDPR) with the advertised business, and legitimate interest (Art. 6.1.f GDPR) to offer tourism businesses a place in the guide and to verify at source the data we publish.
  • Admin panel access and activity log: legitimate interest (Art. 6.1.f GDPR), for system security and traceability of changes.

How We Use Your Data

  • Improve our services and user experience.
  • Send our newsletter with updates and recommendations (only if you have subscribed).
  • Analyze website traffic to understand how users interact with our platform.
  • Personalize the content we show you.
  • Respond to your inquiries and requests through contact forms.

Third Parties

We share data with the following third-party services, all of which have their own privacy policies:

  • Google Analytics: for web traffic analysis and user behavior.
  • Supabase: as our database and authentication provider.
  • Vercel: as our web hosting provider.
  • GetYourGuide: bookable-activity widget embedded in articles and listings. When it loads it receives your IP address and the address of the page you are viewing. It only loads if you accept cookies.
  • Stripe: payment processor for digital product purchases (only if you purchase products).
  • Our own automation server (self-hosted n8n on a Hostinger VPS, in the European Union): receives internal alerts when a business signs up or a change is made in the admin panel. It is not used to send you emails: the site does not currently send any email to visitors.
  • OpenStreetMap: draws the maps on the site. When it loads it receives your IP address and the map area you are viewing. It only loads if you accept cookies.
  • Unsplash: hosts some of the photographs on the site. When one of those photos loads it receives your IP address.
  • OpenAI: translation and AI-assisted text generation. It does not receive visitors' personal data; it does receive the text a business writes in its own listing, in order to translate it.

International Data Transfers

Some of our data processors are located outside the European Union. We use the following secure transfer mechanisms:

  • Google LLC (Analytics): Standard Contractual Clauses (SCC) + Data Processing Amendment.
  • Supabase Pte. Ltd. (database): the database is hosted in Ireland, inside the European Union. Standard Contractual Clauses (SCC).
  • Vercel Inc (hosting): Standard Contractual Clauses (SCC). Its servers run the site's code in the United States, so the data you send through a form is processed there.
  • Stripe Inc (payment processing): Standard Contractual Clauses (SCC) + PCI DSS Level 1 Certification.
  • OpenAI (translation and text generation, United States): it does not receive visitors' personal data.

Data Retention Periods

Personal data is retained for the following periods:

  • Reviews and opinions: while they remain published or until you request removal.
  • Newsletter emails: until subscription cancellation.
  • Interaction data (clicks, reading depth) and business listing statistics: 14 months, then deleted.
  • Contact form data: 12 months from last interaction, then deleted.
  • Page view data: 13 months, then deleted.
  • Guide launch notifications: 24 months, then deleted.
  • Admin panel access and change log: 24 months, then deleted.
  • Data confirmations sent by wineries: for as long as the data remains published in the guide, because they are the proof of where it came from.
  • Guide purchases: 6 years, due to accounting and tax obligations.
  • These periods are applied by an automated process that runs once a month.

Cookie Policy

We use cookies for site functionality. Cookies are classified as follows: essential (functionality), analytics (usage analysis), and preferences (personalization). You can disable cookies in your browser settings, although this may affect site functionality. For more details, see our dedicated cookie policy page.

Affiliate Links

Our website embeds the GetYourGuide widget. If you book through it, we are paid a commission and it costs you no more. When the widget loads or you click on it:

  • GetYourGuide may set its own cookies on its domain; their duration is set by GetYourGuide, not by us.
  • If you make a purchase during that period, we receive a commission.
  • We do not share your personal data with GetYourGuide.
  • GetYourGuide' privacy terms apply when you visit their site.

Payment Processing

If you purchase digital guides or other digital products on our site:

  • Payments are processed through Stripe Inc.
  • We do NOT store credit card data on our servers.
  • Stripe is PCI DSS Level 1 compliant (the highest payment security standard).
  • Your payment information is protected by Stripe's security standards.
  • See Stripe's privacy policy for more information.

Minors

Tenerife Experiences does not knowingly collect personal data from individuals under 14 years of age. If we become aware that we have collected data from a minor under 14 without parental consent, we will delete that data immediately. If you are under 14 and have provided data, please contact us.

Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: you can request a copy of your personal data.
  • Right to rectification: you can request correction of inaccurate data.
  • Right to erasure: you can request deletion of your personal data.
  • Right to restrict processing: you can request that we limit the processing of your data.
  • Right to data portability: you can request your data in a structured format.
  • Right to object: you can object to the processing of your data.
  • Right to withdraw consent: you can withdraw your consent at any time.

Rights to Lodge a Complaint

If you believe your data protection rights are not being respected, you have the right to lodge a complaint with the competent supervisory authority:

  • Spanish Data Protection Authority (AEPD)
  • Address: C/ Jorge Juan, 6 - 28001 Madrid
  • Website: www.aepd.es
  • You can file a complaint online through the AEPD website.

Updates to This Policy

We reserve the right to update this privacy policy at any time. Significant changes will be communicated through our website or email to subscribed users. Continued use of the site after such changes constitutes acceptance of the updated privacy policy. The date of last update is shown at the top of this page.

Contact

To exercise any of these rights, if you have questions about our privacy policy, or if you wish to report a concern about the processing of your data, you can contact us at:

info@tenerifeexperiences.com