1. Data Controller
In compliance with Regulation (EU) 2016/679 (RGPD) and Organic Law 3/2018 (LOPDGDD), we inform you that the personal data collected through this website are processed by:
Responsible: Association of Companies “Experiencia Turismo España Diversa”, led by Queer Destinations S.L.U.
CIF: B06960132
Registered office: Calle Eloy Gonzalo, 27 – 28010, Madrid (Spain)
Contact email: success@queerdestinations.com
Phone number: +34 91 005 45 05
Website: https://www.spainlgbti.com
The Spain LGBTI website is part of the project “Guide to LGTBI Tourism Experiences in Spain”, Funded by the European Union – Next Generation EU, within the Recovery, Transformation and Resilience Plan (Component 14, Investment 4 – Experience Program Tourism Spain).
2. Purposes of Processing
The personal data provided through the website will be processed for the following purposes:
- Manage requests for information, contact, or inquiries sent by the user.
- Manage the sending of newsletters or informational communications, when the user has expressly authorized it.
- Facilitate access to exclusive content or restricted areas (for example, training platforms or experience registration).
- Managing services or relationships derived from the project “LGTBI Tourism Spain Experience Guide”.
- Comply with applicable legal and safety obligations.
- Analyze the use of the website and improve its functionality through technical navigation data (cookies, IP, device identifiers).
The data will not be used for any other purpose without the user's prior consent.
3. Legal Basis for Processing
The legal basis for the processing of personal data is:
- The user's consent when filling out forms or voluntarily subscribing.
- The execution of contractual or pre-contractual relationships related to the services offered.
- Compliance with legal obligations.
- The legitimate interest of the Controller, consisting in ensuring the security of the website, preventing fraud and maintaining the quality of the service.
4. Data Retention
The data will be kept:
- As long as they are necessary for the purpose for which they were collected.
- Until the user revokes their consent or requests the deletion.
- During the deadlines necessary to comply with legal obligations or administrative filing derived from European funds.
Once the purposes have been fulfilled, the data will be blocked and securely deleted.
5. Data Recipients
In general, personal data will not be transferred to third parties, except when required by law or when necessary for the provision of the service, such as:
- Technology service providers (hosting, email, CRM, etc.).
- Payment or appointment management platforms (e.g., Stripe, PayPal, Calendly).
- Public authorities and agencies when required by law.
All third parties with access to personal data will sign processing contracts in accordance with Article 28 of the GDPR.
6. International Transfers
In case of international data transfers outside the European Economic Area (EEA), they will be guaranteed by:
- European Commission adequacy decisions.
- Standard contractual clauses approved by the European Commission.
- Binding corporate standards or equivalent mechanisms.
7. Rights of Users
Users will be able to exercise their rights at any time regarding:
- Access: to know what data we process.
- Correction: correct inaccurate or incomplete data.
- Elimination: request the deletion of the data.
- Opposition: objecting to specific treatments (for example, commercial shipments).
- Limitations: restrict treatment in certain cases.
- Portability: request the transmission of your data to another responsible party.
To exercise these rights, send an email to success@queerdestinations.com, By attaching a copy of your identity document.
The maximum response time will be one (1) month from the receipt of the request.
Furthermore, the user may file a claim with the Spanish Data Protection Agency (AEPD) if you believe that your rights have been violated: https://www.aepd.es.
8. Security Measures
The Agrupación applies appropriate technical and organizational measures to ensure the security, confidentiality and integrity of personal data, including:
- Encrypted communications (SSL/TLS).
- Access control and secure passwords.
- Periodic backups.
- Registration of treatment activities and protocol for security incidents.
9. Minors
This Web Site is not directed to minors under the age of 14. SPAIN LGBTI does not knowingly collect data from minors. If we detect that we have collected data from a minor without authorization, we will delete it immediately.
10. Changes in the Privacy Policy
The Responsible Party reserves the right to modify this Privacy Policy to adapt it to legislative changes or new internal practices.
The modifications will be published on this same page with the date of their last update.
Date of last update: May 12, 2025