Privacy policy
Last updated: 5 October 2026
1. Who is responsible
Hotel Experiences is a brand of Touradvisor DMC, S.L., tax ID B16565715, registered at Ctra. de Valldemossa, km 7,4, Parc Bit, edificio Disset, planta 2, puerta C11, 07120 Palma de Mallorca (Spain).
For any matter related to your data, write to reservas@tour2b.com with «Privacy» in the subject line, or to the postal address above.
This policy applies to the hotels' experience websites (the ones you open with the QR code or with the link your hotel sends you), to hotelexperiences.travel and to the panel used by hotels.
2. What data we process and why
If you book an experience
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, mobile number and number of people | Managing your booking, sending your voucher and confirmation, and telling you about any change | Performance of the booking contract |
| The notes you write when booking | So the activity provider can take them into account | Performance of the contract |
| Payment details | Charging the booking. Your card details are handled directly by the payment provider; we neither see nor store them | Performance of the contract |
| The hotel you book from | Assigning the booking to that hotel and paying its commission | Legitimate interest in fulfilling our agreement with the hotel |
| Billing details, if you request an invoice | Issuing the invoice | Legal obligation |
If the front desk books on your behalf, it processes the same data for you, and the payment link is sent to you.
If you are a hotel or work at one
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, mobile, role and hotel of each person with panel access | Granting and managing access, and attributing sales to whoever makes them | Performance of the contract with the hotel |
| Company name, tax ID, address and bank account of the hotel | Paying commissions and complying with invoicing rules | Performance of the contract and legal obligation |
| Panel access log (date, result, reason for a failed attempt and only the email domain) | Panel security and helping anyone who cannot log in | Legitimate interest in security |
| Acceptance of the contract (version, date and time) | Being able to prove the accepted terms | Performance of the contract |
| Activation request from the demo: name, work email, mobile, role (if given) and hotel, with the destination, the channel you came through and the date | Replying to your request and activating your hotel's website | Pre-contractual steps taken at your request |
If you are a hotel we have contacted
If we send you a link to a demo of your hotel's website, that link is yours alone: we record whether it is opened, when, through which channel it arrived (email or WhatsApp), whether it was opened on a phone or a computer, whether the page was scrolled past halfway, whether it was still open after 15 seconds, how long it stayed open, whether you click the «Activar para mi hotel» button, whether you send the request or the sending fails, and whether you click any link that leaves the demo. We do not record which experiences you look at or anything you type, except what you send us in the request form. We use this to know whether you are interested and to stop following up if you are not. The legal basis is our legitimate interest in presenting the service to hotels. We keep it for 12 months and you can object at any time by writing to reservas@tour2b.com.
If you only visit the website
We store the language you choose and the technical data needed for the website to work (see Cookies). To understand how the website is used we count visits with an anonymous session identifier that is deleted when you close the tab: we do not use cookies for this, we do not store your IP address or browser, and we do not use third-party analytics tools. As with any website, the hosting provider keeps standard technical server logs.
We do not use your data for automated decisions that affect you, and we do not send you advertising without your consent.
4. How long we keep it
| Data | Period |
|---|---|
| Bookings and invoicing | For the duration of the relationship and then the legal periods (accounting and tax: 6 years) |
| Panel users | While they have access; when removed they are blocked and deleted once no longer needed |
| Panel access log | 12 months |
| Opens of the demo sent to a hotel | 12 months |
| Activation requests | 12 months from the request |
| Website preferences (language) | Up to 1 year |
5. Transfers outside the European Economic Area
Some service providers may process data outside the EEA. In that case they do so with the safeguards required by the GDPR: a European Commission adequacy decision or standard contractual clauses.
7. Your rights
You can request access to your data, its rectification or erasure, object to or restrict its processing, or request its portability. Write to reservas@tour2b.com with «Privacy» in the subject line, stating which right you are exercising. If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Changes
If we change this policy, we will publish the new version here with its date. Last updated: 5 October 2026.