Who is responsible for your data

• Controller: Arteysur Las Barrancas, S.L. (trading as Only Spain Tours)
• Tax identification number (CIF): B16977167
• Address: Avenida del Brillante 160A, 14012 Córdoba, Spain
• Telephone: +1 (949) 433-7793 / +34 695 497 007
• Email: info@onlyspaintours.com

We are established in Spain, so this policy follows the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on data protection and digital rights.

What we collect, and when

We only collect personal data that you give us yourself, through the enquiry form on the "Book Now" page or by writing to us directly. The form asks for:

• First name and last name (required)
• Email address (required)
• Telephone number (optional)
• State or city (optional)
• Whether you are a traveller or a travel professional (required)
• The name of your travel advisor or agency (optional)
• Number of travellers (optional)
• Anything else you choose to tell us in the free-text field

We do not ask for payment details, identity documents or any special category of data. Please do not send us that kind of information through this form.

Browsing this website does not require you to identify yourself, and we do not collect analytics or behavioural data about visitors. See our Cookie Policy for details.

Why we use it, and on what legal basis

• To answer your enquiry and send you the day-by-day itinerary, what is included and the price — Your consent, given by ticking the acceptance box on the form
• To put you in touch with a travel agency that sells this tour, where you have asked us to — Your consent
• To keep a record of the enquiry and our reply — Our legitimate interest in being able to evidence what was asked and answered

We do not use your data to build profiles, and no decision affecting you is taken by automated means.

Who else sees it

Your data is handled by the people at Only Spain Tours who deal with enquiries. Beyond that, it may be shared with:

• Our hosting provider, Raiola Networks, S.L. (Spain), which stores this website and its email on servers in the European Union, acting as our processor under a data processing agreement.
• Travel agencies in the United States, where you have asked us to put you in touch with one. This is an international transfer of your data outside the European Economic Area, made on the basis of your explicit consent under Article 49.1.a) GDPR. The United States does not offer a level of data protection equivalent to that of the European Union, and you may not have the same rights or remedies there.

We do not sell your data and we do not pass it to anyone else, unless we are legally obliged to do so.

How long we keep it

We keep enquiry data for as long as it takes to deal with your request and, after that, for a maximum of two years, so that we can pick the conversation up again if you come back to us. After that period it is deleted. Where a booking is made through an agency, the agency keeps its own records under its own policy.

Your rights

You can ask us at any time to:

• tell you what data we hold about you and give you a copy of it;
• correct it if it is wrong or incomplete;
• delete it;
• restrict how we use it, or object to our using it;
• send it to you, or to someone else, in a portable format;
• withdraw your consent, which does not affect anything we did before you withdrew it.

Write to info@onlyspaintours.com or to the postal address above, saying what you want and enclosing something that shows who you are. We will reply within one month.

If you think we have handled your data badly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

Security

This website is served over an encrypted connection (HTTPS). We apply reasonable technical and organisational measures to protect your data, and we limit access to it to the people who need it to answer you.

Changes to this policy

If we change how we handle personal data — for example by adding analytics or a booking system — we will update this policy and change the date below before the change takes effect.

Last updated

This privacy policy was last updated in September 2026.