1. Data Controller
MY CITY SCIENCE S.L.
Tax Identification Number: B26972737
Registered Office: Plaza Mayor, 30 – Penthouse, 28012 Madrid, Spain
Telephone: +34 647 879 041
Email: info@mycityscience.com
Website: www.mycityscience.com
Data Protection Officer (DPO): A Data Protection Officer is not required under the applicable legislation.
2. Purposes of Processing and Legal Basis
Personal data provided through this website will be processed for the following purposes:
a) Responding to Enquiries and Information Requests
Purpose. To manage enquiries and requests submitted through contact forms or other communication channels.
Legal Basis. The data subject's consent (Article 6(1)(a) GDPR).
b) Management of Bookings and Travel Services
Purpose. To arrange and administer bookings, issue travel tickets, organise accommodation, insurance and any other travel services necessary for the proper performance of the trip, and to communicate with travellers regarding their booking.
Legal Basis. Performance of a contract or taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR).
Special Categories of Personal Data. Where users voluntarily provide health-related information (such as reduced mobility requirements, allergies or requests for special assistance), such data will be processed on the basis of the user's explicit consent (Article 9(2)(a) GDPR).
c) Marketing Communications
Purpose. To send newsletters, marketing communications, offers and promotions relating to the travel services provided by MY CITY SCIENCE S.L.
Legal Basis. The data subject's consent (Article 6(1)(a) GDPR); or Our legitimate interests where there is a pre-existing contractual relationship, in accordance with Article 21.2 of the Spanish Law on Information Society Services and Electronic Commerce (LSSI-CE).
d) Compliance with Legal Obligations
Purpose. To comply with obligations arising under tax, accounting, aviation security, tourism and any other applicable legal requirements.
Legal Basis. Compliance with a legal obligation (Article 6(1)(c) GDPR).
3. Categories of Personal Data Processed
MY CITY SCIENCE S.L. may process the following categories of personal data:
- Identification data (name, surname and identity document details).
- Contact details (postal address, telephone number and email address).
- Financial information (bank details and payment information).
- Information necessary for the organisation of the trip (nationality, travel preferences and emergency contact details).
- Special categories of personal data, only where voluntarily provided by the user (such as health-related information).
4. Recipients of Personal Data
Personal data may be disclosed to:
- Travel service providers necessary for the performance of the trip, including airlines, hotels, transport companies, ferry operators, tour operators, local guides and travel insurance providers.
- Public authorities where disclosure is required by law.
- Data processors providing ancillary services (such as web hosting providers, CRM platforms and technology service providers), who process personal data under written agreements compliant with Article 28 GDPR.
- FormSubmit, used as the website's technical form-delivery service to transmit enquiry-form submissions to info@mycityscience.com.
International Transfers. Personal data will only be transferred outside the European Economic Area (EEA) where necessary for the provision of the contracted travel services or where suppliers are located outside the EEA. Where such transfers occur, appropriate safeguards will be implemented in accordance with the GDPR, and users will be informed where required by law.
5. Data Retention
Personal data will be retained:
- For as long as necessary to manage the contractual relationship or respond to the user's request.
- Thereafter, for the statutory limitation periods required by applicable legislation (for example, six years for commercial and accounting records).
- For marketing purposes, until the user withdraws their consent or unsubscribes from marketing communications.
6. Your Rights
Users have the right to:
- Access their personal data.
- Request the rectification of inaccurate or incomplete personal data.
- Request the erasure of their personal data where it is no longer necessary or where consent has been withdrawn.
- Request the restriction of processing in certain circumstances.
- Receive their personal data in a portable format.
- Object to the processing of their personal data, including for direct marketing purposes.
- Withdraw their consent at any time, where processing is based on consent.
To exercise any of these rights, please send a written request to:
Email: info@mycityscience.com
Your request should be accompanied by a copy of a document proving your identity where necessary.
If you believe that your data protection rights have been infringed, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD):
7. Security Measures
MY CITY SCIENCE S.L. implements appropriate technical and organisational measures to ensure the security, integrity and confidentiality of the personal data processed, in accordance with Article 32 of the General Data Protection Regulation (GDPR).
8. Children's Personal Data
We do not knowingly collect personal data relating to children under the age of 14 without the express consent of their parents or legal guardians.
If we become aware that such information has been collected without the required consent, it will be deleted without undue delay.
9. Changes to this Privacy Policy
MY CITY SCIENCE S.L. reserves the right to amend this Privacy Policy at any time in order to reflect legislative developments or changes to the way personal data is processed.
Users are encouraged to review this Privacy Policy periodically to remain informed of any updates.