Ebike Experiences Lanzarote ← Back to home

PRIVACY POLICY

Last updated: August 4, 2026

1. Introduction and data controller

This Privacy Policy describes how Ignacio Andrés Herrero Ortiz, trading as Ebike Experiences Lanzarote, processes the personal data of people who visit the website ebiketourlanzarote.com (hereinafter, the "Website"), contact us through it, or book one of our guided electric bicycle routes, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD).

Data controller details:
Controller: Ignacio Andrés Herrero Ortiz (Ebike Experiences Lanzarote)
NIF: 16.051.552-J
Address: C/ Quiroga, núm. 1, Piso 4º Puerta D, 35500 Arrecife de Lanzarote (Las Palmas), España
Active Tourism Register of the Government of the Canary Islands: no. GC001932
Email: info@ebiketourlanzarote.com
Phone: +34 686 700 302

Given the nature, scope and volume of the data processing carried out by Ebike Experiences Lanzarote, the appointment of a Data Protection Officer is not required under Article 37 of the GDPR. Any questions relating to data protection may be directed to the contact details above.

2. What personal data we collect

We collect only the data that is necessary depending on the channel through which the User interacts with us:

  • Website contact form or chat: name, email address, telephone number (optional) and the content of the message sent.
  • Route booking process, whether through the FareHarbor widget or through the integrated direct Stripe payment system: full name of each participant, email address, telephone number, number of people, and, where applicable, the age of participants who are minors. Payment card data is entered directly by the User in the secure environments of FareHarbor or Stripe; Ebike Experiences Lanzarote never accesses or stores the full card number or the security code (CVV).
  • Data generated during the provision of the service: issues reported by the client, correspondence relating to changes to or cancellations of the booking, and photographs or videos taken during the activity on the terms described in the Booking Terms & Conditions.
  • Browsing data: through the technical cookies described in our Cookie Policy, minimal operational data is collected (selected language, booking process status). The Website does not, as of the date of this update, use its own analytics or advertising cookies.

We do not collect special categories of data (health, ethnic origin, religious beliefs, etc.) unless the User voluntarily chooses to disclose such information when informing us of a medical condition relevant to safety during the activity, in which case such data is processed solely for the purpose of ensuring their safety and that of the rest of the group during the route, and is not retained beyond what is strictly necessary for that purpose.

3. Data relating to minors

Our routes may include the participation of minors between 12 and 17 years of age, always accompanied by a responsible adult, on the terms set out in our Booking Terms & Conditions. In these cases, the minor's personal data (name and age) is provided by the adult who makes the booking and who acts as the person responsible for the minor, who warrants that they hold the necessary authorisation to do so. This data is processed solely for the purpose of safely managing the minor's participation in the contracted activity, and is not used for any other purpose, nor disclosed to third parties except as indicated in section 6 of this Policy.

Ebike Experiences Lanzarote does not direct the Website at minors nor does it collect data from minors acting on their own behalf through the contact form or the booking process, in accordance with Article 7 of the LOPD-GDD.

The promotional use of a minor's image is a purpose distinct and independent from the management of their participation in the route, and requires the express, prior consent of the minor's parent or legal guardian, obtained via WhatsApp or email before the activity, on the terms described in section 15 of the Booking Terms & Conditions.

4. Purpose and legal basis of processing

We process Users' personal data for the following purposes, each with its corresponding legal basis under Article 6 of the GDPR:

  • Managing the booking, payment for and provision of the contracted guided route. Legal basis: performance of a contract to which the data subject is party (Art. 6(1)(b) GDPR).
  • Responding to pre-booking enquiries made through the Website's contact form or chat. Legal basis: taking steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
  • Communicating with the User before, during and after the route (confirmations, reminders, incidents, weather information relevant to the activity). Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legitimate interest in ensuring the proper provision of the service (Art. 6(1)(f) GDPR).
  • Complying with legal obligations applicable to our activity, including tax and accounting obligations and those arising from our status as an active tourism company registered under Decree 226/2017. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
  • Managing and resolving complaints, claims and incidents relating to the service provided. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and, where applicable, compliance with a legal obligation.
  • Using photographs or videos of the User taken during the activity for our own promotional purposes (Website, social media, printed material), in accordance with the authorisation set out in section 15 of the Booking Terms & Conditions. Legal basis: the controller's legitimate interest in promoting its activity (Art. 6(1)(f) GDPR), subject at all times to the User's right to object, which may be exercised by informing the guide on the day of the activity or by writing to info@ebiketourlanzarote.com.
  • Using photographs or videos of a participating minor for our own promotional purposes, only where the parent or legal guardian has given express, prior consent via WhatsApp or email, in accordance with section 15 of the Booking Terms & Conditions. Legal basis: consent of the legal representative (Art. 6(1)(a) GDPR), revocable at any time with effect on future uses of the material.

No automated decisions are taken, nor is any profiling carried out that produces legal effects on Users.

5. Data retention period

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the limitation periods applicable to any legal actions that may arise from the processing, as well as for the periods required by applicable tax and accounting legislation, which generally establishes a minimum of 5 years for supporting documentation of economic transactions (Article 30 of the Commercial Code). Data relating to enquiries that do not result in a booking will be retained for a maximum of 12 months from the last contact, unless the User requests its deletion earlier.

6. Recipients of the data

Ebike Experiences Lanzarote does not sell or disclose Users' personal data to third parties for commercial or advertising purposes. Data is disclosed, to the extent strictly necessary, to the following data processors, each subject to its own privacy policy and to a data processing agreement where required by the GDPR:

  • FareHarbor Inc., a tourism activity booking management platform used to process and confirm route bookings.
  • Stripe, the provider of the payment gateway used to securely process payments made through the Website's direct booking system.
  • Repuso, a tool used to display customer reviews voluntarily left by clients on the Website.
  • The web hosting provider that stores the technical data necessary for the operation of the Website.
  • Public authorities, where there is a legal obligation to disclose data (for example, for tax purposes or in the context of an inspection of the active tourism activity).
  • Partner suppliers strictly necessary for the provision of the contracted service (for example, transfer or accommodation services), and only where the User has requested such coordination, in which case only the data essential for that purpose is disclosed.

7. International data transfers

Some of the providers mentioned in the previous section, in particular Stripe, may process personal data on servers located outside the European Economic Area. In such cases, Ebike Experiences Lanzarote ensures that the international transfer is subject to an appropriate safeguard recognised by the GDPR, such as the Standard Contractual Clauses approved by the European Commission or an adequacy decision; the User may request further information in this regard through the contact details indicated in section 1.

8. Rights of data subjects

The User may exercise, at any time and free of charge, the following rights recognised by the GDPR and the LOPD-GDD:

  • Right of access, to find out what personal data of theirs is being processed.
  • Right of rectification, to correct inaccurate or incomplete data.
  • Right of erasure ("right to be forgotten"), to request the deletion of their data when it is no longer necessary for the purposes for which it was collected.
  • Right to restriction of processing, in the cases provided for in Article 18 of the GDPR.
  • Right to object, in particular to processing based on legitimate interest.
  • Right to data portability, where the processing is based on consent or on a contract and is carried out by automated means.
  • Right to withdraw consent given at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

These rights may be exercised by writing to info@ebiketourlanzarote.com, attaching a copy of a valid identity document or other means of proving the identity of the requester, and clearly indicating the right they wish to exercise. Ebike Experiences Lanzarote will respond to the request within a maximum period of one month, extendable by a further two months in cases of particular complexity, in which case the User will be informed of the reason for the extension.

If the User considers that the processing of their personal data does not comply with applicable law, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), through its electronic office at www.aepd.es, without prejudice to any other administrative or judicial remedy available to them.

9. Security measures

Ebike Experiences Lanzarote applies technical and organisational measures that are reasonable and proportionate to the nature of the data processed, in order to guarantee its confidentiality, integrity and availability, and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed. It also requires the data processors it works with to comply with equivalent security safeguards.

10. Links to social media

The Website includes links to Ebike Experiences Lanzarote's profiles on social networks such as Facebook, Instagram and TikTok. The processing of personal data that the User provides when interacting with such profiles is governed by the privacy policies of each social network, which are independent of Ebike Experiences Lanzarote and which the User must review separately.

11. Changes to this Privacy Policy

Ebike Experiences Lanzarote reserves the right to amend this Privacy Policy in order to adapt it to legislative or case-law developments, or to changes in the way services are provided through the Website. The version in force at any given time will always be the one published on this page, indicating the date of its last update. Users are advised to review this page periodically.

12. Contact

For any query relating to this Privacy Policy or to the processing of your personal data, you may contact Ebike Experiences Lanzarote by email at info@ebiketourlanzarote.com or by phone at +34 686 700 302.

Language: ESENFRDEIT中文