Privacy Policy

How we collect, use, and protect your personal information in compliance with GDPR.

1. Introduction

Euro Sports Tours (trading as Euro Sports Tours under Forrest & Stewart Ltd) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR).

2. Data Controller

Data Controller: Forrest & Stewart Ltd
Trading as: Euro Sports Tours
Contact: info@eurosportstours.co.uk
Address: Palma Nova, Majorca

3. Information We Collect

3.1 Personal Information

We may collect the following types of personal information:

  • Name and contact details (email, phone, address)
  • Date of birth and age
  • Payment information (processed securely by third-party providers)
  • Travel preferences and special requirements
  • Medical information relevant to sports participation
  • Emergency contact details

3.2 Technical Information

  • IP address and browser information
  • Website usage data and cookies
  • Device information and operating system
  • Pages visited and time spent on our website

4. How We Use Your Information

4.1 Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: To provide our tour services
  • Legitimate Interest: To improve our services and communicate with you
  • Consent: For marketing communications and cookies
  • Legal Obligation: To comply with legal requirements

4.2 Purposes of Processing

  • Processing and managing your bookings
  • Providing customer support and service
  • Communicating about your tour and services
  • Processing payments and refunds
  • Sending marketing communications (with consent)
  • Improving our website and services
  • Complying with legal obligations
  • Ensuring safety and security

5. Data Sharing and Third Parties

5.1 Service Providers

We may share your data with trusted third parties who help us provide our services:

  • Accommodation providers
  • Coaching and activity providers
  • Payment processors
  • Email service providers
  • Website hosting and analytics services

5.2 Legal Requirements

We may disclose your information if required by law or to protect our rights and safety.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Encryption of sensitive data
  • Secure servers and databases
  • Regular security updates and monitoring
  • Access controls and staff training
  • Secure data transmission protocols

7. Data Retention

We retain your personal data only for as long as necessary:

  • Booking Data: 7 years for legal and accounting purposes
  • Marketing Data: Until you withdraw consent or 3 years of inactivity
  • Website Data: 2 years for analytics purposes
  • Legal Requirements: As required by applicable law

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing communications

9. Cookies and Tracking

9.1 Types of Cookies

  • Essential Cookies: Required for website functionality
  • Analytics Cookies: Help us understand website usage
  • Marketing Cookies: Used for targeted advertising (with consent)

9.2 Cookie Management

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

10. International Data Transfers

Your data may be transferred to countries outside the EEA. We ensure appropriate safeguards are in place, including:

  • Adequacy decisions by the European Commission
  • Standard Contractual Clauses
  • Binding Corporate Rules
  • Certification schemes

11. Children's Privacy

We do not knowingly collect personal data from children under 16 without parental consent. If we become aware of such collection, we will delete the data immediately.

12. Data Breaches

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or website notice. Continued use of our services constitutes acceptance of the updated policy.

14. Contact and Complaints

14.1 Data Protection Officer

For any data protection queries, contact us at:

  • Email: privacy@eurosportstours.co.uk
  • Phone: +34 971 123 456
  • Address: Palma Nova, Majorca

14.2 Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly:

  • Website: ico.org.uk
  • Phone: 0303 123 1113

15. Consent

By using our services and providing your personal data, you consent to the collection, use, and processing of your information as described in this Privacy Policy.

Last updated: January 2025