Legal

Privacy Policy.

Last updated · June 2026

This Privacy Policy explains how Galicia Atlantic Groups ("we", "us") collects, processes and stores personal data when you visit our website galiciaatlanticgroups.com or interact with us through the contact form. We are based in the European Union and process all personal data in accordance with the EU General Data Protection Regulation (GDPR · Regulation 2016/679).

1. Who is the data controller

The data controller for any personal data processed via this website is:

Galicia Atlantic Groups
Sanxenxo, Rías Baixas · Galicia · Spain
Email: info@galiciaatlanticgroups.com

2. What data we collect

We only collect the data you voluntarily submit through the Request a quotation form:

• Your name
• Your company / organisation
• Your professional email address
• Optionally: phone number, source market, programme of interest, approximate group size, travel dates, free-text message

We do not collect any browsing data, behavioural tracking, advertising identifiers or device fingerprints. This site does not use cookies for tracking, profiling or analytics.

3. Why we use it · legal basis

We process your data exclusively to respond to your B2B quotation request and to maintain a commercial relationship if you decide to work with us.

Legal basis

• Your explicit consent (Art. 6.1.a GDPR), given by ticking the consent checkbox on the form.
• Pre-contractual measures (Art. 6.1.b GDPR), as the request is intended to lead to a commercial offer.

4. Who processes your data · third parties

We use the following third-party providers, all of which offer appropriate GDPR safeguards:

• Web3Forms (form delivery) · servers located in the European Union (Frankfurt, Germany). Data Processing Agreement available at web3forms.com/dpa.
• Cloudflare (website hosting and content delivery) · acts as data processor under standard contractual clauses. More info: cloudflare.com/privacypolicy.
• Email service provider · we use a standard mailbox at the domain galiciaatlanticgroups.com hosted on European infrastructure to receive form submissions.

We do not transfer your personal data outside the European Economic Area without appropriate safeguards in place.

5. How long we keep it

We keep your contact request data for up to 24 months from the date of submission, to be able to respond to follow-up enquiries or send a tailored proposal. After that period, the data is deleted unless we have a contractual relationship with you.

If a commercial relationship is established, the data necessary for billing and legal compliance is kept for the periods required by Spanish tax and commercial law.

6. Your rights

You have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Erase your data (right to be forgotten).
• Restrict or object to the processing.
• Data portability in a structured, machine-readable format.
• Withdraw your consent at any time.
• Lodge a complaint with the Spanish Data Protection Agency (aepd.es).

To exercise any of these rights, write to info@galiciaatlanticgroups.com. We will respond within one month.

7. Cookies & tracking

This website uses no cookies at all — none for analytics, advertising, profiling or any other purpose. The only data exchanged with your browser is what is technically necessary to display the website (HTML, CSS, fonts, images), all served from the same domain. No third-party tracking scripts are embedded.

Spam protection on our contact form is handled with a server-side honeypot technique that requires no cookies and processes no additional personal data.

8. Security

The site is served over HTTPS with valid TLS certificates. Personal data is transmitted encrypted. We use providers with industry-standard security measures and we limit access to personal data to authorised members of our team on a need-to-know basis.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when changes were last made. Material changes will be communicated by updating the date and, where appropriate, by notice on the homepage.

10. Contact

For any privacy-related question or to exercise your rights, contact us at info@galiciaatlanticgroups.com.

← Back to homepage