Privacy Policy

This Privacy Policy explains what personal information we hold about you, how we obtain or receive it, and how we use and may share information about you. It relates to any personal information we collect from you, you provide to us, or is provided to us from other sources. This policy should be read together with our Terms & Conditions and Cancellation Policy.

Our website may contain links to websites owned and controlled by third parties. We do not control those third-party websites and are not responsible for their compliance with data protection laws.

Who we are

When you visit our website, use our services or products, or interact with us via our social media pages, EspaisRoca SL trading as Tasting Palma is the data controller, based at Casa Roca, Calle Hostals 27, 07002 Palma, Mallorca. We are regulated under the EU General Data Protection Regulation and applicable Spanish law.

Information we collect about you

We may collect personal information from you via:

• our website tastingpalma.com and any other websites owned and operated by EspaisRoca SL
• our social media pages under the name Tasting Palma
• our experiences and services

Information received directly from you

We receive information from you when you:

• book an experience online or buy a product on our website or by telephone
• purchase a gift card or gift voucher on our website or by telephone
• attend a Tasting Palma experience
• provide feedback or complete a survey
• contact us via the contact form, social media, phone, email or by letter
• sign up to receive our newsletter
• submit content to us, such as tagging us on social media

Information received from other sources

We also obtain information about you from other sources when you:

• book or purchase a voucher: from our payment provider, our website host, and our booking engine providers
• complete surveys: from TripAdvisor, Viator, GetYourGuide and other review or quality-metric providers

Information we collect automatically

When you access and browse our website or use our services we collect information about your usage, location and activity using cookies and similar technologies. Depending on your browser settings, third-party providers may also place, view, edit or set their own cookies.

Why and how we use your personal information

The reasons we use your personal information and the legal bases for collection and use include:

• to fulfil and enforce our Terms & Conditions and any other contract we have with you
• where you have consented to our use of your personal information (for example for newsletters and marketing, which you may revoke any time by clicking unsubscribe; requests may take up to 14 days)
• as necessary for our legitimate interests, including providing safe and effective websites, products and services, fraud detection, personalising your experience, understanding customer usage, keeping our offerings relevant, maintaining and improving services and infrastructure, and developing our business and marketing, but only if these are not overridden by your interests, rights or freedoms

Who we share your personal information with

With other Espais Roca companies

We routinely share infrastructure, resources and technology with members of our group, subsidiaries, or companies under common ownership. Personal information may be shared with these companies to provide a relevant and consistent experience.

With third parties

We work with vendors and suppliers who help support our business and provide or improve our products and services, including technical infrastructure, marketing and newsletter assistance, usage analysis, customer service, payment facilitation, surveys and fraud detection. Personal information will usually be anonymised, but this may not always be possible. We may be required to share personal information to comply with the law.

How long your personal information will be kept

We will keep your personal information while we provide services to you, including marketing or newsletter services. Thereafter we will keep it only as long as necessary to respond to questions, complaints or claims, to show that we treated you fairly, and to keep records required by law.

Transfer of your information outside the EEA

To deliver our website and services we sometimes share your personal information outside the European Economic Area. Transfers are subject to GDPR safeguards including standard contractual clauses approved by the European Commission.

Your rights

You have the right to access your personal information, require that we rectify any errors and request that we erase your personal information subject to certain limitations. In some circumstances you can also require that we restrict how we process your personal information, object to our processing, or request a copy for transmission elsewhere. To exercise any of these rights, email experience@tastingpalma.com.

Keeping your personal information secure

We have appropriate security measures in place to prevent personal information from being lost, used or accessed in an unauthorised way. We limit access to those with a genuine business need. Our website uses HTTPS encryption for all data transferred from your browser to our servers.

Changes to this Privacy Policy

This Privacy Policy was last updated on 30 June 2026. We may vary this Privacy Policy from time to time. Where changes are significant we will inform customers or subscribers by email.

If you have any questions about this Privacy Policy, contact us at experience@tastingpalma.com.