Privacy Policy
This privacy policy provides information about the processing of personal data that may be collected through the Tossa Like a Local website.
1. Data controller
Controller: Núria Gascons Cuatrecasas
Trade name / brand: Tossa Like a Local
Tax ID No.: 41649528R
Postal address: Carrer Nou, 30, Tossa de Mar
Email address: tossalikealocal@gmail.com
Phone / WhatsApp: +34 610 80 15 87
Website: tossalikealocal.com
2. Purpose of processing
The personal data that users may provide through the contact channels linked from this website will be processed for the following purposes:
- To respond to queries or requests for information.
- To manage booking requests or enquiries related to guided tours and private tours.
- To maintain communications related to the request made.
- To provide the contracted service, if a booking is ultimately formalised.
- To comply with applicable legal obligations.
3. Data that may be processed
The data processed will generally be the data voluntarily provided by the user when contacting, such as:
- First name and surname.
- Phone number.
- Email address.
- Content of the message or enquiry.
- Data related to the booking or request for information.
4. Channels through which data may be collected
Personal data may be collected through the following channels:
- Email.
- Phone.
- WhatsApp.
This website may also include a link to Instagram. The use of this social network is governed by its own terms of use and privacy policy.
5. Legal basis for processing
The legal basis for processing the data is as follows:
- The consent of the data subject, when they contact voluntarily.
- The application of pre-contractual measures, when the enquiry is related to a possible booking or contracting of a service.
- The performance of the contractual relationship, if a booking or service is ultimately formalised.
- Compliance with applicable legal obligations.
6. Data retention
Personal data will be kept for the time necessary to respond to the enquiry, manage the request or provide the requested service.
Subsequently, the data may be retained, duly blocked where necessary, for the period established by applicable regulations in order to comply with legal obligations or address any possible liabilities arising from the processing.
7. Recipients of the data
As a general rule, personal data will not be disclosed to third parties, except in the following cases:
- When necessary to comply with a legal obligation.
- When necessary for the provision of the requested service.
- When providers are involved in supplying services necessary for the operation of the website or communications, acting as data processors where applicable.
8. International data transfers
As a general rule, no international data transfers outside the European Economic Area are expected.
However, some third-party services used for communications or for the technical operation of the website may involve international data transfers. In such cases, appropriate safeguards will be adopted in accordance with current regulations.
9. Rights of data subjects
Any person has the right to obtain confirmation as to whether personal data concerning them is being processed.
They may also exercise the following rights:
- Right of access.
- Right to rectification.
- Right to erasure.
- Right to object.
- Right to restriction of processing.
- Right to data portability, where applicable.
- Right to withdraw consent at any time, when processing is based on such consent.
- Right to lodge a complaint with the Spanish Data Protection Agency if they consider that the processing of their data does not comply with current regulations.
To exercise these rights, a request may be sent to:
Email address: tossalikealocal@gmail.com
Postal address: Carrer Nou, 30, Tossa de Mar
The request must clearly indicate which right the person wishes to exercise and it may be necessary to prove the identity of the applicant.
10. Source of the data
Personal data generally comes from the data subject themselves, when they voluntarily contact via email, phone or WhatsApp.
11. Social networks and third-party services
This website may include links to external services, such as Instagram or WhatsApp. Access to and use of these services are governed by the terms, policies and privacy criteria of their respective owners.
Tossa Like a Local is not responsible for the data processing that these third parties may carry out outside this website.
12. Data security
Appropriate technical and organisational measures are applied to protect personal data and prevent its loss, misuse, unauthorised access or alteration, taking into account the nature of the data and the risks of processing.
13. Changes to the privacy policy
This privacy policy may be updated to adapt it to legal, technical or website operation changes.
It is recommended to review it periodically.
Last updated: 9 June 2026