1. Data Controller
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Spanish data protection laws, the data controller responsible for processing personal data on this website is:
EXPLORA MÁLAGA, S.L.
Full corporate and contact details are available in the Legal Notice section of this website.
For any privacy-related inquiries, you may contact us at: info@exploramalaga.com
Malaga Signature Tours operates as a commercial brand of EXPLORA MÁLAGA, S.L.
2. Purpose of Data Processing
Personal data provided through contact forms, email communications, or booking requests will be processed for the following purposes:
● Responding to inquiries and information requests
● Managing and confirming bookings
● Organizing private tours and day trips
Securing monument or ticket reservations when required
● Handling payments and administrative processes
● Complying with legal, tax, and accounting obligations
We do not use personal data for marketing communications unless explicit consent has been provided.
3. Legal Basis for Processing
Personal data is processed based on:
● The data subject’s consent
● The execution of a contract or pre-contractual measures
● Compliance with legal obligations applicable to EXPLORA MÁLAGA, S.L.
4. Categories of Data Collected
We may collect the following personal data:
● Full name
● Email address
● Telephone number
● Country of residence
● Travel dates and preferences
● Identification details required by monument authorities (when applicable)
Only data strictly necessary for the provision of services is collected.
5. Data Sharing
Personal data may be shared only when necessary with:
● Official monument authorities (for ticket reservations)
● Licensed transportation providers
● Payment service providers
● Public authorities where legally required
Personal data is never sold, rented, or transferred for commercial purposes.
6. International Data Transfers
Where service providers (such as payment processors or technical platforms) operate outside the European Economic Area (EEA), appropriate safeguards are applied in accordance with GDPR requirements.
7. Data Retention
Personal data will be retained:
● For the duration necessary to provide contracted services
● For legally established accounting and tax retention periods
● Until deletion is requested, where legally permissible
After these periods, data will be securely deleted or anonymized.
8. User Rights
Under GDPR, you have the right to:
● Access your personal data
● Request rectification of inaccurate data
● Request erasure of personal data
● Restrict processing
● Object to processing
● Request data portability
To exercise these rights, please contact:
info@exploramalaga.com
You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD)..
9. Data Security
EXPLORA MÁLAGA, S.L. implements appropriate technical and organizational measures to ensure the security and confidentiality of personal data.
10. Cookies
This website uses cookies to enhance user experience and analyze website traffic.
For more information, please consult our Cookie Policy..
11. Updates
This Privacy Policy may be updated to reflect legal or operational changes. The latest version will always be available on this website.