The Hat tours
Privacy Policy
Last updated: 12-08-2026
At The Hat tours, I respect your privacy and am committed to protecting your personal information.
This Privacy Policy explains how I collect, use, store, and protect your personal information when you visit my website, contact me, subscribe to my newsletter, or use my travel planning services.
1. Who I Am
Data Controller:
Name: Gema Fernández
Business name: The Hat tours
Business status: Self-employed / Sole Trader
Email: thehattours@gmail.com
Website: thehattours.com
For any questions regarding your personal data or this Privacy Policy, you can contact me at thehattours@gmail.com.
2. What Personal Information I Collect
Depending on how you interact with my website and services, I may collect the following information:
Your name
Email address
Phone number, if you choose to provide it
Travel dates and destination
Information about your travel preferences
Information about your interests, accommodation preferences, activities, dining preferences, and other details relevant to planning your trip
Information you provide when contacting me through my website
Information you provide when subscribing to my newsletter
Payment and transaction information necessary to process my travel planning fee
I only request information that is reasonably necessary for the relevant purpose.
3. How I Use Your Information
I may use your personal information for the following purposes:
To Respond to Your Enquiries
If you contact me through my website, I use the information you provide to respond to your questions and discuss your travel plans.
To Provide My Travel Planning Services
If you become a client, I use the information you provide to understand your preferences and create and manage your personalised travel plans.
To Process Payments
My travel planning fees are processed through Tern. Where necessary, relevant information is shared with Tern to process and manage payments.
Payment provider: Tern
Tern may process your personal information in accordance with its own privacy policy and terms.
To Communicate With You
I may use your contact information to communicate with you about your enquiry, your travel planning service, your itinerary, or other matters relating to your relationship with me.
To Send My Newsletter
If you voluntarily subscribe to my newsletter, I may use your email address to send you travel inspiration, Spain travel guides, recommendations, news, and other content related to my services.
My newsletter is managed through MailerLite.
Email marketing provider: MailerLite
You can unsubscribe from the newsletter at any time by clicking the "unsubscribe" link included in my emails.
4. Legal Basis for Processing
Depending on the purpose, I process your personal data on one or more of the following legal bases:
Your consent, where you have voluntarily provided it, such as when subscribing to my newsletter or consenting to non-essential cookies.
Taking steps at your request prior to entering into a contract, for example when you contact me to enquire about my travel planning services.
Performance of a contract, where processing is necessary to provide my services.
Compliance with legal obligations, where applicable.
Legitimate interests, where applicable and where those interests do not override your fundamental rights and freedoms.
Where consent is the legal basis for processing, you may withdraw your consent at any time.
5. Newsletter
If you subscribe to my newsletter, your email address will be stored and processed by MailerLite, my email marketing provider.
MailerLite is used to manage my subscriber list and send newsletters and other communications you have requested.
You can unsubscribe at any time using the unsubscribe link included in each email.
6. Service Providers and Third Parties
I use trusted third-party service providers to operate my website, process payments, manage my newsletter, analyse website usage, and provide my travel planning services.
These may include:
Squarespace – website hosting and website management
MailerLite – newsletter and email marketing
Google Analytics – website analytics
Tern – payment processing for travel planning fees
Hotels, tour operators, activity providers, restaurants, transportation companies, and other travel suppliers, where necessary to provide travel planning services
Other service providers necessary to provide my services
Where necessary, these providers may process personal information on my behalf or as independent data controllers, depending on the service they provide.
I do not sell your personal information.
7. Travel Providers and Reservations
As part of my travel planning services, I may recommend or arrange reservations with hotels, restaurants, activity providers, transportation companies, and other travel suppliers.
Depending on the arrangement, I may either:
Make a reservation on your behalf; or
Provide you with a direct booking link so that you can make the reservation yourself.
Where I make a reservation on your behalf, I may need to provide the relevant supplier with personal information necessary to complete that reservation.
Where you make a reservation directly through a third-party website, your information will be subject to that provider's own privacy policy and terms.
8. Affiliate Links
Some links on my website may be affiliate or partner links.
This means that if you click on a link and make a booking or purchase, I may receive a commission from the relevant partner, at no additional cost to you.
I aim to recommend experiences, services, and travel products that I genuinely believe may be useful or appropriate for travellers visiting Spain.
9. Cookies and Similar Technologies
My website may use cookies and similar technologies to ensure that the website functions properly, understand how visitors use the website, and improve your browsing experience.
Some cookies may be placed by third-party services, including Google Analytics.
Where required by applicable law, I will ask for your consent before placing non-essential cookies on your device.
You can also manage certain cookie preferences through your browser settings.
10. How Long I Keep Your Information
I retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide my services, maintain business records, comply with legal obligations, and resolve potential disputes.
The exact retention period may vary depending on the type of information and the purpose for which it was collected.
When personal information is no longer necessary, it will be deleted or securely disposed of where reasonably possible.
11. International Data Transfers
Some of the third-party services I use may process personal information outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, I will take appropriate measures to ensure that the transfer is carried out in accordance with applicable data protection law.
12. Your Data Protection Rights
Depending on the circumstances and applicable law, you may have the right to:
Request access to the personal information I hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information.
Request restriction of the processing of your information.
Object to certain processing of your personal information.
Request the portability of your personal information where applicable.
Withdraw your consent where processing is based on consent.
To exercise any of these rights, please contact me at:
thehattours@gmail.com
You also have the right to lodge a complaint with the relevant data protection authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD).
13. Data Security
I take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
However, no method of transmission or storage over the internet can be guaranteed to be completely secure.
14. Children's Privacy
This website and my services are not specifically directed at children.
I do not knowingly collect personal information from children through my website.
15. Links to Other Websites
My website may contain links to third-party websites, including hotels, tour operators, activity providers, booking platforms, and other travel-related services.
These websites operate independently from me and have their own privacy policies and terms.
I am not responsible for the privacy practices, content, or security of third-party websites.
16. Changes to This Privacy Policy
I may update this Privacy Policy from time to time to reflect changes to my services, website, technology, or applicable legal requirements.
The updated version will be published on this page with a revised "Last updated" date.
17. Contact
If you have any questions about this Privacy Policy or how I handle your personal information, please contact me at:
The Hat tours
Email: thehattours@gmail.com