Privacy Policy

What we do with the details you send us, who helps us do it, and how you can ask us to stop. Written in plain English on purpose.

Who is responsible

The controller of the personal data collected through the forms on this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), is:

  • Owner: Eduardo Ballesteros Santa María
  • Tax identification number (NIF): 53276223N
  • Address: Avenida de la República Argentina 25, 9th floor, 41011 Sevilla, Spain
  • Email: [email protected]

The personal and payment details you enter in the booking system of an activity are not processed by Welcome to Seville. The controller of that data is the company that operates the activity, which identifies itself during the booking process and in your confirmation. We do not see it, do not store it and cannot act on it.

What we collect, and what for

Contact form. Your name, your email address and your message. We use them only to answer you.

Travel guide form. Your name, your email address, your booking number, the date you are arriving in Seville and the language of the website you are browsing. We use them to check the format of your booking number, to send you the guide and, as you accept when requesting it, to send you occasional emails with travel tips and offers about Seville. Every email includes a link to unsubscribe at once, free of charge, and you can also ask us by email.

Buying the guide. If you buy the guide without a booking, the purchase is handled by Payhip (Payhip Ltd, United Kingdom), which processes your name, email and payment details as an independent controller under its own privacy policy. We receive only what we need to deliver the guide.

Browsing statistics. Only if you accept them in the cookie banner, Google Analytics tells us which pages are visited, from which country and on which kind of device, so we can improve the content. It does not tell us who you are. See the cookie policy.

On what legal basis

  • Forms and emails: your consent, given when you tick the box and send the form (Article 6.1.a GDPR). You can withdraw it at any time, which does not affect what was done before.
  • Browsing statistics: your consent in the cookie banner (Article 6.1.a GDPR).
  • Protection of the forms against spam and abuse: our legitimate interest in keeping the website secure (Article 6.1.f GDPR).

How long we keep it

Messages and their replies are kept for as long as needed to deal with them and for any period required by law. Guide requests and email subscriptions are kept until you unsubscribe or ask us to delete them. Browsing statistics are kept by Google Analytics for the retention period set in our account.

Who else is involved

To run this website we rely on the following providers, who only process data on our behalf and under contract:

  • Hosting: Webempresa (Spain). The website and its database run on servers located in the European Union.
  • Security and speed: Cloudflare, which delivers the pages and protects the website against attacks. It processes technical data such as your IP address.
  • Emails: Brevo (Sendinblue SAS, France), which stores the guide subscribers and sends the emails, on servers in the European Union.
  • Translation: Weglot (France), which translates the content of the website into Spanish, French and Italian.
  • Spam protection: Google reCAPTCHA, loaded only on the pages with a form (contact and travel guide).
  • Statistics: Google Analytics (Google Ireland Ltd), only with your consent.
  • Reviews widget: Trustindex, which displays public Google reviews. It does not receive the data you send us.
  • Booking calendar: loaded on activity pages from the booking platform used by the operator. What you type in it goes to the operator, not to us.

Some of these providers (Google and Cloudflare) are part of groups based in the United States, so your data may be transferred there. Those transfers are covered by the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission. Your data is not sold, and it is not shared with anyone for any purpose other than those described here.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, to stop processing it, or to send it to you in a portable format. Write to [email protected] saying what you want and we will do it.

For data you entered in a booking system, the request has to go to the operator, whose details are in your confirmation. For a guide bought on Payhip, it can go to Payhip or to us.

If you think we have not dealt with you properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

Security

The website runs over an encrypted connection and we apply reasonable technical and organisational measures to protect what you send us. No system is perfect, and we do not pretend otherwise.

Changes to this policy

This policy may be updated to reflect changes in the law or in how the website works. The version in force is always the one published on this page.

See also: Legal notice · Terms and conditions · Cancellations and refunds · Cookie policy