Privacy and cookies
Last reviewed: 9 September 2026.
Who processes your data
HOGAR PREMIUM DESIGN SL
CIF: B87517884
Calle La Parada, 16, 35216 Valsequillo de Gran Canaria, Las Palmas
For anything on this page, including exercising your rights: diego@thingstodoincanaryislands.com
What data, and what for
Only what it takes for a trip to run and for you to see again what you booked.
| Data | What for | Legal basis | How long |
|---|---|---|---|
| First name, surname, email and phone | To issue the booking and so the operator knows who to collect. They are passed on to them, because they provide the service. | Performance of the contract | While it is an accounting record: 4 tax years and 6 under the Commercial Code |
| Accommodation and room number | So the bus calls where you are staying. Optional, and you can clear it from your area. | Performance of the contract | Cleared when you erase your data |
| Amount, currency and Stripe references | To charge and to refund. We store no card data at all: the payment form is Stripe's and never touches this site. | Performance of the contract and legal obligation | Same as the booking |
| Email, IP and browser when you request an access link | To open your session and to stop anyone requesting links in bulk. | Legitimate interest in security | The link expires in 15 minutes; the session, in 7 days |
| Your review and your first name | To publish it. It shows your first name and the initial of your surname, never the full one. | Performance of the contract and art. 20.4 TRLGDCU | While it stays published |
| Your email, if you agree to it | To send you news. Off by default, and switched off from your area. | Consent | Until you withdraw it |
Who else sees your data
We do not sell data and we do not share it for advertising. It reaches these parties, and only for their part:
- The operator of your trip. Their trading and registered names are on each tour listing. They need to know who to collect and where.
- Stripe, to charge and refund.
- The email service that sends the confirmation, the voucher and the access link.
- The server provider. It sits in the United Kingdom, which holds an adequacy decision from the European Commission, so the transfer is covered by it.
- Google Analytics, and only if you accept it. See the cookies section.
Your rights, and the ones you can exercise yourself
Four of them need no message to us: you get into your area with a link to your inbox and do it yourself.
- See what we hold about you.
- Correct it. Future bookings only: one already provided is an accounting record and is not rewritten.
- Take it with you as a JSON file (art. 20).
- Erase it. It asks you to type your email and states how many bookings and reviews it affects before doing anything. Bookings and payments are not deleted — they are accounting — they are left without your data.
Restriction and objection, and any question, by email. You can also complain to the Spanish Data Protection Agency.
Go to my area