At Permiso Pico del Teide, we take the privacy and protection of our users’ and customers’ personal data very seriously. In accordance with General Data Protection Regulation (EU) 2016/679 (GDPR) and the Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), we provide you with clear and transparent information regarding the processing of your personal data below.

1. Data Controller

• Entity / Owner: Permiso Pico del Teide
• Postal Address: Calle Teobaldo Power 17, 38400, Puerto de la Cruz, Santa Cruz de Tenerife, Spain
• Contact Email:
info@permisopicodelteide.com
• Website: www.permisopicodelteide.com

2. Purposes of Data Processing

Depending on how you interact with our website, we process your personal data for the following purposes:

• Handling Inquiries and Requests: managing requests for information, questions, or contact submitted through website forms or by email.
• Service Provision and Management: processing the contracting of our services, bookings, or the management of permits related to Pico del Teide, as well as administrative, billing, and payment processing.
• Commercial Communications: sending you news, updates, or promotional communications regarding our services, provided you have given your explicit consent or where a prior contractual relationship exists regarding similar products or services.
• Website Security and Maintenance: ensuring platform security, preventing fraud, and analyzing browsing behavior (only if you have accepted the use of analytical cookies).

3. Legal Basis for Processing

The legal basis that authorizes us to process your personal data depends on the specific purpose:

• Handling Requests and Inquiries: The user’s consent provided when submitting a request through contact forms or communication channels.
• Service Provision / Contracting: The performance of a contract or pre-contractual measures requested by the data subject.
• Commercial Communications: Explicit consent provided or legitimate interest in the case of pre-existing customers.
• Compliance with Legal Obligations: Meeting applicable tax, accounting, or administrative regulatory requirements.

4. Data Retention

Personal data provided will be retained for as long as strictly necessary to fulfill the purposes for which it was collected:

• Inquiries and Information Requests: Until the inquiry is resolved or for the duration needed to respond to the request.
• Clients and Service Provision: For the duration of the service provided and, subsequently, for the statutory periods required to meet potential legal, tax, or administrative liabilities.
• Commercial Communications: Until the user withdraws consent or requests to unsubscribe from receiving such communications.

5. Data Recipients

Your personal data will not be disclosed to third parties, except where required by a legal obligation (such as Public Administrations, Law Enforcement Agencies, or Tax Authorities) or when strictly necessary for service delivery.

To provide certain technical or management services (web hosting, email services, payment gateways, etc.), we collaborate with Data Processors, who handle data confidentially and under our strict instructions and security standards.

6. User Rights

Under current data protection regulations, you have the right to exercise the following rights regarding your personal data with the Data Controller:

• Access: The right to know whether we are processing your personal data and to obtain a copy of it.
• Rectification: The right to request the correction of inaccurate or incomplete data.
• Erasure (“Right to be forgotten”): The right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Objection: The right to object to the processing of your data based on reasons related to your particular situation.
• Restriction of Processing: The right to request the temporary suspension of data processing under certain conditions.
• Data Portability: The right to receive your data in a structured, commonly used format, or to request its transfer to another controller.
• Withdrawal of Consent: The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

To exercise any of these rights, you may submit a written request accompanied by a copy of your ID card, passport, or equivalent official identification document to:

Postal Address: Calle Teobaldo Power 17, 38400, Puerto de la Cruz, Santa Cruz de Tenerife, Spain.
Email:
info@permisopicodelteide.com

If you feel that your privacy rights have not been adequately addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Accuracy and Truthfulness of Data

The user guarantees that the personal data provided through the website is true, accurate, complete, and up to date, and assumes sole responsibility for any direct or indirect damage or harm caused as a result of failing to fulfill this obligation.

8. Security Measures

Permiso Pico del Teide has implemented the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, or unauthorized processing or access, taking into account the state of technology, the nature of the stored data, and the risks involved.

9. Changes to the Privacy Policy

We reserve the right to modify this Privacy Policy to adapt it to new legislation, case law, or changes in operational practices. In all cases, the version published on this website shall be the one currently in effect.

Last updated: October 2026