Your Data Rights & Cookie Preferences

Cookie Preferences

Choose which categories of cookies you allow espanago.com to use. Your choice is saved immediately in your browser and respected on all subsequent visits. You can update it at any time.

Your choice is stored in your browser's local storage (cookieChoice). Clearing your browser data will reset it and the consent banner will reappear. For full details, see our Cookie Policy.

Your Rights Under GDPR

Under GDPR Articles 15–22 (and UK GDPR), you have the following rights regarding personal data that EspanaGo holds about you:

• Right of access (Art. 15): Request confirmation of whether we hold personal data about you and obtain a copy of it, along with information about how it is processed.
• Right to rectification (Art. 16): Ask us to correct personal data that is inaccurate or incomplete.
• Right to erasure / "right to be forgotten" (Art. 17): Ask us to delete your personal data where there is no longer a lawful basis for processing it (for example, after you withdraw consent and no other legal basis applies).
• Right to restriction of processing (Art. 18): Ask us to pause processing — for example, while disputing the accuracy of data or pending a decision on an objection.
• Right to data portability (Art. 20): Where processing is based on consent or contract and is carried out by automated means, receive your data in a structured, commonly used, machine-readable format (such as CSV or JSON).
• Right to object (Art. 21): Object to processing based on legitimate interests — including direct marketing and profiling — at any time. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent (Art. 7(3)): Where processing is based on consent (for example, analytics cookies or marketing messages), withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We do not carry out solely automated decision-making or profiling that produces legal or similarly significant effects (GDPR Art. 22).

How to Exercise Your Rights

To exercise any of the rights listed above, please send us a written request — email is sufficient:

We will acknowledge your request promptly and respond within one calendar month of receipt (GDPR Art. 12(3)). This period may be extended by up to two further months for complex or numerous requests — we will notify you in advance if this applies. We will not charge a fee for reasonable requests. We may need to verify your identity before proceeding.

Right to Lodge a Complaint

If you believe your personal data is being processed in a way that violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority. We would appreciate the opportunity to address any concern directly first — please contact us before approaching a regulator.

For details on all data we process and the legal bases we rely on, see the Privacy Policy.