Privacy policy

1. Data controller

360malaga · info@360malaga.com · +34 698 28 64 21 · Málaga (Spain).

Data controller: Rubén Mendes Ruiz · Tax ID 53366421G · Calle Constancia 11, 3ºA · Málaga (Spain) · info@360malaga.com · +34 698 28 64 21.

2. What data we collect and why

· Contact form and quote requests: name, email, subject, message, date and the page you wrote from. Purpose: to answer your query and prepare a quote. Legal basis: your consent and the implementation of pre-contractual measures.

· Newsletter and downloadable guide: email address and originating page. Purpose: to send you the guide and communications about Málaga and our services. Legal basis: your consent, which you can withdraw at any time.

· Pack bookings and payments: booking and order details. Payment is processed by the payment gateway; we do not store your full card details. Legal basis: performance of the contract and tax obligations.

· User account (if you register): email and profile data. Legal basis: performance of the requested service.

· Site usage: technical browsing data and clicks on affiliate links, only if you accept analytics cookies. Legal basis: your consent.

3. How long we keep your data

· Enquiries and quotes: up to 2 years from the last contact.

· Newsletter: until you unsubscribe.

· Invoicing and bookings: the legal tax and commercial retention periods (up to 6 years).

· Analytics data: a maximum of 24 months.

4. Recipients and processors

To provide the service we work with providers who act as data processors: web hosting and database on Lovable Cloud (Supabase) infrastructure, a payment gateway (Stripe), and an email provider for notifications. All of them process data following our instructions and with the safeguards required by the GDPR, including standard contractual clauses where there are international transfers. We do not sell or share your data with third parties for advertising purposes.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@360malaga.com stating the right you wish to exercise. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you feel your request has not been handled properly.

6. Security and minors

We apply reasonable technical and organisational measures (encryption in transit, access control on the database and data minimisation). The site is not aimed at children under 14; we do not knowingly collect data from minors without guardian authorisation.

7. Cookies

The use of cookies is explained in detail in the Cookie Policy, where you can also change your decision about analytics cookies.