Privacy Policy

1. Data controllers

We Love Spain Excursions and Sevilla Intercambio, Seville, Spain, act as joint controllers of the personal data collected through this website for the Social Fridays event.

2. What we collect

• Booking details: full name, nationality, email address, phone number with country code, chosen event date and number of guests.
• Payment data: processed entirely by Stripe. We receive only a confirmation, the amount and the last details Stripe shares with merchants (never your full card number).
• Technical data: basic server logs (IP address, browser type, pages visited) needed to run and secure the site.

3. Why we use it

• To process your booking and let you into the event (performance of a contract).
• To contact you about your booking — changes, cancellations, meeting-point reminders (performance of a contract).
• To understand the nationalities of our community and adapt the experience (legitimate interest, aggregated only).
• To send occasional news about future Social Fridays, only if you opt in (consent — you can withdraw any time).
• To comply with tax and accounting obligations (legal obligation).

4. Who we share it with

Stripe Payments Europe, Ltd. (payment processing), our hosting provider, and — on the night — the Party Leaders who check attendance. We never sell your data. Some providers may process data outside the EEA under Standard Contractual Clauses or adequacy decisions.

5. How long we keep it

Booking data is kept for the duration of the season and up to 12 months after, unless a longer period is required for tax records (typically 4–6 years for payment records in Spain). Marketing consents are kept until you withdraw them.

6. Your rights

You can access, correct, delete, restrict or port your data, and object to processing based on legitimate interest. To exercise these rights, contact the Social Fridays team at dalecandelasevilla@gmail.com. You may also complain to the Spanish Data Protection Authority (AEPD, www.aepd.es).

7. Cookies

This site does not use advertising or tracking cookies. Stripe's checkout page sets its own strictly necessary cookies for fraud prevention, governed by Stripe's privacy policy.

8. Security

All traffic is encrypted (HTTPS). Payments are handled by a PCI-DSS Level 1 certified provider. Access to booking data is limited to the organising team.

9. Changes

We may update this policy; the date at the top shows the latest version.