Data protection and privacy policy

1.- Introduction and right to information

This website is owned by CIVITATIS TOURS S.L. (hereinafter, "CIVITATIS"), with N.I.F. B-86899440 and registered office at Calle Coloreros 2, 28013, Madrid.

CIVITATIS takes the protection of your privacy and personal data very seriously. Therefore, CIVITATIS fully complies with current legislation on the protection of personal data so that your personal information is securely stored.

This data protection policy hereby defines the use and access to the service through the mobile app and the website (hereinafter referring to both as the ''Website") that CIVITATIS, makes available to Users interested in the services offered by CIVITATIS.

If you wish to contact our Data Protection Officer, you may do so by emailing

2.- Information on the data that CIVITATIS collects through the Website

In order to ensure the correct performance of the Website, CIVITATIS may have access to the following data provided, if applicable, by the USER:

  1. Identification data: name and surname of the user.
  2. Contact data: email, telephone, and postal address.
  3. Location data: user's location.
3.- Why is CIVITATIS entitled to carry out the data processing?

CIVITATIS's grounds for legitimizing the processing of Users' data through this Website are the express or explicit consent of the Users to the processing of their personal data in each specific case.

In this regard, CIVITATIS handles the Users' personal data to allow the business relationship requested by the User, as well as to send commercial communications and/or Newsletters about its own products and/or services.

By accepting this Privacy Policy and checking the corresponding boxes in each case, the User consents to such data processing.

CIVITATIS takes the protection of your privacy and personal data very seriously. For this reason, your personal data is kept securely and treated with the utmost care in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "General Data Protection Regulation" or "Data Protection Regulation or GDPR").

This Privacy Policy regulates the access and use of the service that CIVITATIS makes available to the User interested in the services and contents hosted on the Website.

The Users may withdraw their consent at any time by sending a message to the following e-mail address: and it shall not prejudice the lawfulness of the processing based on the consent prior to its withdrawal.

4.- Personal data processing and its purposes

CIVITATIS may collect personal data from Users through registration forms on its website and through its mobile app. The personal data collected by CIVITATIS may be used for the following purposes:

  1. The provision of the services offered on the Website.
  2. Send commercial communications to Users by letter, telephone, e-mail, SMS/MMS, instant messaging or other equivalent means of communication related to CIVITATIS services, provided that the User has consented to this purpose of processing personal data.
  3. The User explicitly consents to the processing of his/her data for profiling and for the segmentation of his/her data. The aforementioned processing may be used for the purpose of analysis and statistics in order to know the traffic and use of the Website by the Users, as well as to determine their tastes and preferences in order to send them information according to their interests and location. Specifically, CIVITATIS will use the information about your location for 3 purposes: (i) to locate the user on the map when viewing activities in a particular destination, (ii) to show nearby activities based on your location, (iii) to send notifications about nearby activities.
5.- Compulsory or optional nature of the information provided by the User and data accuracy

The User hereby declares that the personal data provided is true and is responsible for notifying CIVITATIS of any change in such data. The User shall be held responsible for the accuracy of the data provided, and CIVITATIS reserves the right to suspend any User who has provided false data from the registered services, without prejudice to any other actions that may be applicable pursuant to the Law.

The User is advised to take the utmost care in Data Protection matters by using security tools . CIVITATIS cannot be held responsible for illicit thefts, modifications or data loss.

6.- Unauthorized practices and data retention

CIVITATIS will cancel the registration of Users who: (i) include or promote illicit, immoral, obscene or harmful material; (ii) promote any type of discrimination; (iii) send "bulk (mass mail), junk (junk mail), or spam e-mail (junk mail)" or "newsgroup communications" when not requested; (iv) breach any intellectual or industrial property rights of third parties. Furthermore, the User hereby agrees to refrain from using and collecting data from distribution lists that can be accessed through the information and services contained in the Website to carry out activities for promotional or advertising purposes, as well as to send commercial communications of any kind and through any medium not requested or previously consented to by CIVITATIS and/or the users of the Website.

The Users' personal data will be kept as long as their CIVITATIS account remains active for the purposes for which they have been stated herein, provided that the User has not revoked their consent, requesting the deletion of their account or the deletion of certain personal data from the Website.

Subsequently, if necessary, CIVITATIS will keep the information blocked for the legally established periods of time.  

CIVITATIS hereby agrees to comply with its confidentiality and privacy obligations regarding personal data in accordance with the provisions under applicable legislation.

7.- User's data-related rights

The Users have the right to (i) access their personal data, as well as (ii) request the correction of inaccurate data or, if applicable, (iii) request its deletion, (iv) request the limitation of their data processing, (v) object to the processing of their data, (vi) request its portability, (vii) not to be subject to decisions based solely on automated data processing.

The Users may exercise all these rights at the following email address, by indicating the reason for their request.

The Users may also send their request by ordinary mail to the following address:


Calle Coloreros 2

28013, Madrid.

Without prejudice to any other administrative remedy or judicial action, the User shall have the right to lodge a complaint with a Supervisory Authority, in particular in the Member State in which the User has their registered residence, place of work or place of the alleged infringement, in the event that they consider that the processing of their personal data is not in compliance with the regulations, as well as in the event that the exercise of their rights is not satisfied. The supervisory authority with which the complaint has been lodged will inform the complainant about the course and outcome of the complaint.

8.- Data Security

The protection of the privacy and personal data of its customers and visitors is very important to CIVITATIS. Therefore, CIVITATIS strives to do everything in its power to prevent your data from being used inappropriately. Your data is only accessible to authorized personnel.

CIVITATIS maintains the security levels of personal data protection in accordance with the applicable regulations and has implemented all the necessary technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the data provided by the User through the Websites, informing the User however that security measures on the Internet are not impregnable.

CIVITATIS is committed to complying with the duty of secrecy and confidentiality with respect to personal data in accordance with the applicable legislation, as well as to provide them with a secure treatment in international data transfers and assignments that, if applicable, may occur.

CIVITATIS shall not be liable for any damages that may arise from the User's failure to comply with this obligation.

10.- Queries

If you have any queries related to this privacy policy, please contact us at

11.- Acceptance and Consent

The User declares that he/she has been informed of the conditions regarding their data protection and accept and consent to their personal information being processed by CIVITATIS for the purposes already indicated in this Privacy Policy.