Privacy Policy
Last updated: 22 October 2026
This Privacy Policy explains how we process the personal data of the people who use tenerifebiketours.com, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (“LOPDGDD”) and Law 34/2002 on Information Society Services and Electronic Commerce (“LSSI”). A summary is available in our Personal Data Protection Policy.
1. Who is responsible for your data
Controller: CB TENERIFE BIKE TRAINING
Address: General Castaños 11, 38300 La Orotava, Santa Cruz de Tenerife, Spain
Email: info@tenerifebiketraining.com
Phone: +34 600 238 697
2. What data we collect
- Booking form: name and surname, email, phone, gender, age, country, how you heard about us, tour and dates, arrival and departure details (including flight number), cycling experience, room preferences, bike rental needs and any comments you add.
- Contact and feedback forms: name, email, subject and message.
- Email and phone: the data you include when you write or call us.
- Technical data: IP address and browser information, used to protect the forms against spam and abuse.
Please do not send us health data or other sensitive information through the forms. If you need us to know about a medical condition for your safety during a tour, we will only use it for that purpose and with your explicit consent.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing your booking request and organising the tour you book (accommodation, transfers, bike rental, guides). | Performance of a contract or pre-contractual steps at your request (Art. 6.1.b GDPR). |
| Answering your questions and messages. | Your request (Art. 6.1.b GDPR) and our legitimate interest in replying to you (Art. 6.1.f GDPR). |
| Sending you news and offers about our tours, if you tick the box in the feedback form or ask us to. | Your consent (Art. 6.1.a GDPR), which you can withdraw at any time. |
| Informing past customers about tours similar to the ones they booked. | Our legitimate interest (Art. 21.2 LSSI). You can object at any time, including in every message. |
| Keeping the website and forms secure and preventing spam. | Our legitimate interest (Art. 6.1.f GDPR). |
| Complying with our tax, accounting and other legal obligations. | Legal obligation (Art. 6.1.c GDPR). |
We do not make decisions based solely on automated processing, nor do we create profiles with legal or similarly significant effects.
4. How long we keep your data
- Booking and contact form submissions: for a maximum of two years from the date they are sent, after which they are securely deleted.
- Data of customers who book a tour: for as long as required by tax and accounting law (generally up to six years) and to handle possible claims.
- Mailing list: until you unsubscribe or withdraw your consent.
5. Who we share your data with
We do not sell your data. We only share it when necessary:
- Service providers that process data on our behalf, under a data processing agreement: website hosting (IONOS, servers in the European Union), our email provider and our mailing list provider (Mailchimp).
- Providers needed to deliver the tour you book, such as hotels, transfer companies, bike rental shops or local guides, only with the data they need.
- Public authorities, when we are legally required to.
6. International transfers
Mailchimp is provided by Intuit Inc. (United States). Transfers to this provider are covered by the EU–US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission. The video on our home page is embedded from YouTube (Google Ireland Ltd.) in privacy-enhanced mode; see our Cookie Policy.
7. Your rights
You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent you have given, without affecting the lawfulness of the processing carried out before you withdrew it.
To do so, write to info@tenerifebiketraining.com or to our postal address, indicating which right you wish to exercise. We may ask you for information to confirm your identity. We will reply within one month.
If you consider that we have not processed your data correctly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
8. Minors
Our services are aimed at adults. Children under 14 may not send us their personal data without the consent of their parents or legal guardians.
9. Security
We apply appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, disclosure or alteration, taking into account the state of the art and the nature of the data.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in the law or in how we process data. The current version will always be available on this page, with the date of the last update at the top.