Privacy Policy

1. Data controller

Island-Tenerife (referred to as "we", "us") is the controller of your personal data. For any data-related enquiries, contact us at: privacy@island-tenerife.com.

2. What data we collect

We collect the following categories of data:

• Account data — name, email address, profile picture (on registration or via Google OAuth sign-in).
• Activity data — posts, comments, likes and check-ins you publish on the portal.
• Technical data — IP address, browser type, device information, pages visited.
• Cookies — session cookies (required for the service to function) and preference cookies (remembering your language and display settings).

3. How we use your data

• Managing your user account and authentication.
• Personalising content — showing recommendations tailored to your preferences.
• Sending the newsletter (only with your explicit consent).
• Analysing site statistics to improve the service.
• Handling support requests and communicating with users.

4. Legal basis for processing

We process your data on the basis of: contract performance (Art. 6(1)(b) GDPR), your consent (Art. 6(1)(a) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR).

5. Cookies

We use the following types of cookies:

• Essential — required for the service to operate (login session, CSRF protection).
• Preference — remember your chosen language and view settings.
• Analytics — anonymous visit statistics (can be disabled in your browser settings).

6. Third-party services

We use the following third-party services:

• Google OAuth — sign-in via Google account. Google's Privacy Policy applies.
• Cloudinary — hosting and optimisation of user-uploaded images.
• AI services — generating personalised trip plans. Query data may be sent to the AI provider; it contains no identifying information.

7. Your rights

You have the following rights:

• Access — the right to obtain a copy of your data.
• Rectification — the right to correct inaccurate data.
• Erasure — the right to request deletion of your data ("right to be forgotten").
• Portability — the right to receive your data in a structured format.
• Objection — the right to object to processing based on legitimate interests.
• Complaint — the right to lodge a complaint with your national data protection authority.

To exercise your rights, contact us at: privacy@island-tenerife.com.

8. Retention periods

Account data is retained for the lifetime of the account. Upon deletion, data is anonymised or erased within 30 days unless legal obligations require longer retention.

9. Policy changes

We may update this policy. We will notify you of material changes by email or by an in-service notice.