Privacy Policy
This Privacy Policy regulates the processing of personal data carried out by Mara Tago through the website maratago.com.
1. Data controller
- Responsible: Mara Tago
- Tax ID Number: 30253569J
- Address: Urbanización Torrelaguna Carmona, Seville 41410
- Privacy email: laura.rr@maratago.com
2. Personal data we process
Depending on your interaction with the site, Mara Tago may process:
- Identification and contact details: name and email address.
- Appointment-related data: reason selected for the reservation and the content you include in the "additional details" field (free text).
- Technical data: IP, server logs, and technical identifiers; and, where applicable, cookies (see Cookie Policy).
Important: Mara Tago does not request sensitive data (e.g., health data). We ask that you do not include particularly private information in open fields. If necessary due to the nature of the service, Mara Tago will indicate an appropriate channel.
3. Purposes of processing
Mara Tago processes your data for the following purposes:
- Manage appointment bookings (processing requests, confirmations, changes, and reminders).
- Respond to inquiries made through contact forms (if any).
- Website operational management and security: fraud/abuse prevention, maintenance, backups, and technical administration.
- (Only if applicable) Sending commercial communications (newsletters, news, content, or promotions), when there is valid consent or an applicable legal basis.
4. Legal basis for processing
- Reservation management and related communications: pre-contractual measures at the request of the interested party and/or execution of the service provision relationship, as applicable.
- Security, maintenance, and prevention of abuse: legitimate interest of Mara Tago.
- Non-essential cookies (analytics/marketing): consent.
- Marketing communications (if sent): consent and compliance with applicable regulations.
5. Recipients and suppliers (processors)
Your data may be accessible to providers who provide services necessary for the operation of the site, acting as data processors, for example:
- Hosting/server provider: Dreamhost
- Reservation system: Hydra Booking (on the site itself and, where applicable, associated services).
- Calendar (synchronization): Google Calendar (Google) for internal schedule management.
Mara Tago does not sell personal data to third parties.
6. International transfers
Some providers may be located or host data outside the European Economic Area. In such cases, Mara Tago will apply the safeguards required by law (e.g., standard contractual clauses or other recognized measures).
7. Retention periods
Mara Tago will retain the data for as long as necessary to fulfill the purpose:
- Reservations: during the appointment management process and a reasonable period thereafter for follow-up and administrative management: 12 months from the date of the appointment, unless otherwise required by law.
- Inquiries: until the request is resolved and for 12 months from the resolution/closure of the inquiry.
- Security and logs: for 12 months according to technical and legal criteria.
- Backups: according to the backup retention cycle, for 180 days.
8. Rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability by sending a request to:
- Email: laura.rr@maratago.com
- Subject: "Data protection – Exercising rights"
Mara Tago may request additional information to verify your identity.
You may also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe that your rights have not been adequately addressed.
9. Security
Mara Tago implements reasonable technical and organizational measures to protect data against loss, misuse, unauthorized access, disclosure, or alteration.
10. Policy changes
Mara Tago may update this Privacy Policy to adapt it to legal or technical changes. The current version will always be available on the website.