1. Who is responsible for your data?
The operator of Total Travel Guide is the controller for personal data collected directly through this website. Privacy questions and data-rights requests can be sent to hello at totaltravel.guide or through our contact form.
2. Information we process
Website use and analytics
The site uses Umami Cloud to measure page views and selected events, such as a successfully completed contact or newsletter form, a favourite being saved or removed, and the sharing method selected for a page. Umami runs as an essential cookieless measurement service and respects the browser’s Do Not Track signal. It provides aggregate information such as pages viewed, approximate location, referrer, browser and device type. Favourite events include the item title, identifier and type, but the full favourites list remains only in the browser. Share events include the page and selected method; they do not include a recipient or message contents.
Contact messages and image contributions
If you contact us, we process the name, email address, message, submitted files, consent confirmation, and technical information needed to receive and protect the submission. Basin processes the form and Cloudflare Turnstile helps prevent abuse. If you contribute images, we also retain the contribution and the licence confirmation shown on the form.
Newsletter subscriptions
If you subscribe, Brevo processes your email address to deliver the newsletter, manage your subscription and record unsubscribes. You can unsubscribe using the link in any newsletter.
Favourites and consent choices
With your Preferences consent, saved favourites are kept in your browser’s local storage. They are not sent to a Total Travel Guide account or database. The consent tool stores a first-party cookie recording the categories you accepted or rejected.
Server and security logs
The hosting provider may process IP address, request time, requested URL, browser details and security events in ordinary server logs to deliver and protect the site.
Browser-language suggestion
On English pages, the site checks the browser’s first preferred language on the visitor’s device. It offers the equivalent Spanish, German, French or Dutch page when that preference matches one of those languages, including regional variants such as es-ES, de-DE, fr-FR and nl-NL. This check happens entirely in the browser and sends no language or location request to another provider. A dismissal is remembered only for the current browser session.
Interactive maps
Interactive attraction maps use MapLibre with map tiles supplied by OpenFreeMap from OpenStreetMap data. Loading a map sends an ordinary network request, including the IP address and browser request information, to OpenFreeMap. OpenFreeMap states that its public service uses no accounts, API keys or cookies.
3. Why we use the information
- To provide the site and features you request.
- To answer messages, assess corrections and manage contributions.
- To send newsletters where you have subscribed.
- To understand aggregate site performance and improve content.
- To prevent spam, fraud, misuse and technical failures.
- To comply with legal obligations and establish or defend legal claims.
4. Legal bases
Depending on the activity, processing is based on your consent, steps taken at your request, our legitimate interests in operating, measuring and securing the guide and responding to correspondence, or compliance with legal obligations. You may withdraw consent at any time without affecting processing carried out before withdrawal.
5. Service providers and international transfers
We use providers including Umami Cloud, Basin, Cloudflare Turnstile, Brevo, OpenFreeMap and Viator. Viator supplies tours-and-activities data, and Tripadvisor-hosted product images load on pages where those cards appear. Viator or Tripadvisor may receive device and request information under their own policies. If you enable External Media, providers such as YouTube, Vimeo, Google Maps, weather services, Avionio and DiscoverCars may also process device and usage information. Some providers may process information outside the European Economic Area using an applicable legal transfer mechanism.
We do not sell your personal data. We may disclose information where required by law, to protect legal rights, or to a replacement operator if the guide is transferred, subject to appropriate safeguards.
6. Retention
We retain personal data only for as long as it is needed for the purpose collected, legal compliance and the handling of disputes. Contact correspondence is kept while it remains relevant; newsletter data is kept until you unsubscribe, subject to any suppression record needed to honour that choice; and image contributions may be retained while the contribution is used or the licence and related rights need to be documented. Browser favourites remain on your device until you withdraw Preferences consent, clear site data or remove them.
7. Your rights
Where the GDPR applies, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. Rights can be limited by law in some circumstances. Contact hello at totaltravel.guide to make a request. We may need information to verify your identity.
You may also complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
8. Children
This general travel guide is not directed at children and we do not knowingly ask children to submit personal data.
9. Changes to this policy
We may update this policy when the site or its providers change. The date at the top identifies the current version.