Last updated: October 7, 2026
This Privacy Policy explains how personal data is collected, used, stored and protected when you visit My Tenerife Experience at https://mytenerifeexperience.com (the “Site”), contact us, leave a comment, subscribe to updates or otherwise interact with the Site.
This policy is intended to provide transparent information in accordance with Regulation (EU) 2016/679 (the “GDPR”) and other data-protection and electronic-communications rules that may apply.
1. Data controller and contact details
Data controller: the publisher and operator of My Tenerife Experience.
Website: mytenerifeexperience.com
Privacy contact: mytenerifeexperience@gmail.com
For questions about this policy or to exercise data-protection rights, please use the email address above or the Contact page.
2. Scope of this Privacy Policy
This policy applies to personal data processed through the Site and its related functions. It does not govern the independent processing carried out by third-party websites, booking platforms, social networks, maps, transport providers, accommodation providers or other external services that you may reach through a link or embedded feature.
3. Categories of personal data we may process
The categories of information processed depend on how you use the Site and which features are active. They may include:
- Technical and connection data: IP address, date and time of access, requested URL, HTTP status, referrer, browser type and version, operating system, device type, language settings, approximate location derived from IP, server logs and security events.
- Contact data: name, email address and any other information you voluntarily include in a message or contact form.
- Comment data: name, email address, website if provided, comment content, IP address and browser user agent.
- Subscription data: email address, subscription status, confirmation information and preferences when you voluntarily subscribe to updates or comments.
- Analytics and usage data: pages viewed, referring pages, interaction information, general device/browser characteristics and aggregated traffic statistics where analytics functionality is enabled.
- Cookie and preference data: cookie identifiers, consent choices, preference settings and similar technical information where cookies or comparable technologies are used.
- Affiliate and outbound-link information: referral parameters contained in links and information generated when you choose to visit an external travel provider. Data collected after you leave this Site is normally processed by the external provider under its own privacy policy.
Please do not send special-category or highly sensitive personal data unless it is genuinely necessary for your request.
4. Sources of personal data
Personal data may be obtained:
- directly from you when you contact us, comment, subscribe or otherwise provide information;
- automatically from your browser, device or connection when you access the Site;
- from service providers used to operate, protect and measure the Site, where permitted by law;
- from publicly available or third-party sources where this is necessary and lawful.
5. Purposes of processing and legal bases
| Purpose | Typical data | Legal basis where GDPR applies |
|---|---|---|
| Delivering pages and core website functions | Technical and connection data | Legitimate interests in operating the Site and, where applicable, provision of a service requested by the user |
| Security, abuse prevention and troubleshooting | IP address, logs, user agent, security events | Legitimate interests in maintaining the security, integrity and availability of the Site; legal obligation where applicable |
| Responding to messages and enquiries | Name, email, message content | Steps taken at your request, legitimate interests in responding to communications, and consent where required |
| Managing comments | Comment data and technical metadata | Legitimate interests in operating and moderating interactive features and, where relevant, consent |
| Subscriptions and notifications | Email address and subscription preferences | Consent and/or the service expressly requested by you |
| Analytics and audience measurement | Usage, device and traffic information | Consent where required; otherwise legitimate interests only where the specific analytics configuration is lawfully exempt from prior consent |
| Affiliate referral measurement | Referral identifiers and click information | Legitimate interests in operating and funding the Site, subject to consent requirements for any non-essential tracking technology |
| Compliance with law and legal claims | Information relevant to the request or dispute | Legal obligation and/or legitimate interests in establishing, exercising or defending legal claims |
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Whether providing personal data is mandatory
Browsing most public pages does not require you to identify yourself. Information requested in a contact, comment or subscription form may be necessary to provide the specific feature. If required information is not provided, we may be unable to answer a message, publish a comment, process a subscription or provide the requested service.
7. Website hosting, server logs and security
The Site and its hosting infrastructure may automatically create server, access, error and security logs. These records are used to deliver the Site, diagnose technical problems, identify abuse, prevent attacks and protect the availability and integrity of the service. Hosting and infrastructure providers may process technical data on our behalf or under their own legal responsibilities, depending on the service.
8. WordPress
The Site is built with WordPress. WordPress may process information needed for website operation, user authentication, administrator preferences, comments and other functions. Logged-in administrator or registered-user sessions may involve authentication and settings cookies. Comment convenience cookies are set only when the relevant option is used.
9. Jetpack and Automattic
The Site currently uses Jetpack, a service provided by Automattic. The active Jetpack configuration in the Site database includes features such as Stats, Protect, contact forms and subscriptions. Depending on the feature used, Automattic may process technical, security, analytics, contact-form or subscription information.
Jetpack Protect may process information related to login attempts and suspicious activity to help protect the Site. Jetpack contact forms may process information submitted through a form. Jetpack subscriptions may process email addresses and subscription status. Jetpack Stats may process traffic and usage information to produce audience statistics.
Automattic publishes additional information about Jetpack privacy and cookies. You can consult the Jetpack Privacy Center and Jetpack cookie documentation.
10. Akismet anti-spam protection
The Site currently uses Akismet for spam detection. When a comment or compatible form submission is checked, Akismet may receive information associated with that submission, including IP address, user agent, referrer, name, email address, website and submitted content, as applicable. This processing is used to detect spam and protect the Site from abuse.
Akismet is operated by Automattic. Additional information is available in the Akismet Privacy Policy.
11. Comments and Gravatar
If comments are enabled and you submit a comment, the information entered in the comment form and related technical metadata may be stored for moderation, publication, security and spam prevention.
An anonymized string created from your email address (sometimes called a hash) may be provided to the Gravatar service to check whether you use it. If a comment is approved, a Gravatar profile image may be publicly visible next to the comment. Gravatar is an Automattic service and may process information under its own privacy documentation.
12. Contact forms and email correspondence
If you contact us by email or through a Site form, we process the information you choose to provide in order to read, manage and respond to the request. Messages may pass through the Site’s hosting infrastructure, Jetpack/Automattic where a Jetpack form is used, anti-spam systems such as Akismet and the email provider used for the Site mailbox.
13. Subscriptions and email notifications
If you voluntarily subscribe to Site updates, comments or other notifications, your email address and subscription preferences may be processed to provide that service, manage confirmations, prevent abuse and allow you to unsubscribe. You can normally unsubscribe using the link provided in the relevant message or by contacting us.
14. Analytics and audience measurement
The Site currently has Jetpack Stats enabled. Analytics can help us understand aggregate traffic, popular content, referral sources and technical performance. Depending on the configuration, data may include page views, referrers, IP-derived location, device and browser information and other technical events.
Where applicable law requires prior consent for an analytics technology, such technology should be activated only on the basis of a valid consent choice unless it qualifies for a lawful exemption. See the Cookie Policy for more information.
15. Affiliate links and external travel providers
The Site contains affiliate links, including links to Booking.com. Affiliate links may contain a referral identifier so that a visit or qualifying transaction can be attributed to this Site. A standard outbound affiliate link does not necessarily mean that the external provider has placed a cookie on this Site. Once you click through to the external provider, that provider may collect information and use cookies under its own privacy and cookie policies.
For further information about commercial relationships, see the Affiliate Disclosure.
16. External links and embedded third-party content
Articles may link to, or in some cases embed, content from third parties. Embedded content can behave as if you visited the third-party website directly. A third party may collect device or usage information, set cookies or use other tracking technologies according to its own policies. Where consent is legally required before loading non-essential third-party content, the content should be blocked until the required choice is made.
17. Cookies and similar technologies
The Site may use cookies, local storage, pixels and comparable technologies for technical operation, security, preferences, analytics and third-party functionality. Some technologies are necessary for the service requested by the user, while others may require prior consent. Detailed information is provided in the Cookie Policy.
18. Recipients and categories of service providers
Personal data may be accessible, to the extent necessary for their function, to:
- hosting, infrastructure and technical-support providers;
- Automattic/Jetpack for enabled Jetpack services;
- Akismet for spam detection;
- email and communications providers;
- analytics or measurement providers where lawfully enabled;
- professional advisers, accountants, insurers or legal advisers where necessary;
- competent authorities, regulators, courts or law-enforcement bodies where disclosure is required by law;
- other parties where necessary to establish, exercise or defend legal claims or protect the Site, its users or third parties.
External booking and travel platforms that you choose to visit generally process the information they receive from you as independent controllers under their own policies.
19. Processors and data-processing arrangements
Where a supplier processes personal data solely on our behalf and qualifies as a processor under the GDPR, the relationship should be governed by an appropriate data-processing arrangement meeting Article 28 GDPR requirements. Some providers may instead act as independent or joint controllers for particular processing operations.
20. International data transfers
Some service providers may process personal data outside the European Economic Area (“EEA”). Where GDPR transfer restrictions apply, an international transfer should rely on a valid mechanism such as an adequacy decision, the European Commission’s Standard Contractual Clauses together with any supplementary measures required by the circumstances, or another mechanism permitted by Chapter V GDPR.
You may contact us for information about the safeguards relevant to a particular transfer where the GDPR gives you that right.
21. Data retention
Personal data is kept only for as long as reasonably necessary for the relevant purpose and to meet legal, security and operational requirements. Different categories can have different retention periods:
| Category | General retention approach |
|---|---|
| Server and security logs | For the period reasonably necessary for security, troubleshooting, abuse prevention and hosting operations, subject to the provider’s configuration and legal requirements |
| Contact messages | For the time needed to handle the request and for a reasonable period afterward for continuity, dispute handling and legal obligations |
| Comments | Normally for as long as the comment remains published or otherwise needed for moderation, security and legal purposes |
| Subscription data | Until you unsubscribe, the subscription service is discontinued, or retention is otherwise no longer necessary, subject to limited suppression or proof-of-consent records where appropriate |
| Analytics information | According to the settings and retention rules of the analytics service and only for as long as necessary for measurement purposes |
| Consent records | For as long as reasonably necessary to demonstrate the consent choice and comply with accountability obligations |
Data may be retained longer where required by law, a legal hold, an ongoing dispute, fraud prevention or the establishment, exercise or defence of legal claims.
22. Your GDPR rights
Where the GDPR applies, and subject to the conditions and exceptions in the law, you may have the right to:
- obtain confirmation as to whether personal data concerning you is being processed and request access to it;
- request correction of inaccurate or incomplete personal data;
- request erasure of personal data;
- request restriction of processing;
- receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller;
- object to processing based on legitimate interests, including profiling related to those interests;
- object at any time to processing for direct marketing, if such processing is carried out;
- withdraw consent at any time where processing is based on consent;
- not be subject, where the GDPR provides this right, to a decision based solely on automated processing that produces legal effects or similarly significantly affects you.
These rights are not absolute and may be limited by applicable law. We may need to verify your identity before completing a request.
23. How to exercise your rights
To submit a privacy request, email mytenerifeexperience@gmail.com. Please describe the request clearly and provide only the information reasonably necessary to identify the relevant data. Requests will be handled within the time limits required by applicable law.
24. Right to lodge a complaint
If you believe that personal data has been processed unlawfully, you may have the right to lodge a complaint with the supervisory authority in the EU/EEA country of your habitual residence, place of work or place of the alleged infringement. Where Italian data-protection law is applicable, the supervisory authority is the Garante per la protezione dei dati personali.
25. Security
Reasonable technical and organizational measures are used to protect the Site and personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. Measures may include access controls, software updates, security monitoring, anti-spam and anti-abuse systems, backups and secure connections where appropriate. No internet transmission or storage system can be guaranteed to be completely secure.
26. Personal-data breaches
If a personal-data breach occurs, it will be assessed and handled in accordance with applicable data-protection law. Where required, the competent supervisory authority and/or affected individuals will be notified within the legally applicable time limits.
27. Children’s privacy
The Site provides general travel information and is not directed at children for the purpose of collecting their personal data. We do not knowingly seek to collect personal data from children beyond what is necessary for a feature lawfully used with appropriate authorization. If you believe that a child has provided personal data inappropriately, please contact us so that the situation can be reviewed.
28. Automated decision-making
The Site does not intentionally use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on ordinary visitors. Automated systems may, however, classify traffic, login attempts, comments or form submissions for security and anti-spam purposes.
29. Changes of purpose
If personal data is to be used for a materially different purpose from the one for which it was collected, additional information will be provided where required before the new processing begins.
30. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes in the Site, service providers, technologies or legal requirements. The “Last updated” date at the top identifies the latest revision. Material changes may also be highlighted on the Site where appropriate.
31. Contact
For privacy questions or requests, contact mytenerifeexperience@gmail.com or use the Contact page.