Your data on Tenerife Nights

The controller is Tenerife Nights, VAT MT32283622. What you send through the forms on these pages is stored in the group's central database, run by the same company, while the assistant runs on nightsevents.com. Data questions go through the contact page or to +356 7759 0493 on WhatsApp.

For alerts about Tenerife: the email address you type, an optional first name, the language of the page, the arrival and departure days and the size of your group if you give them and, only when you opt in, a mobile number for WhatsApp. They are used to tell you about new nights, ticket releases and offers on the island, on the basis of the consent box you tick.

For an alert about a single night: that night and the email address. The box you tick is the list's own, so the alert counts as a list sign-up too.

Each submission is saved with your email, this website, the kind of form (list, dates, single night or contact), the language and the date and time. For list sign-ups, the version of the consent wording you accepted and the page you accepted it on are kept as proof.

For a message to the team: the name, email, optional mobile and the text, used only for the reply.

A few anti-spam checks run on every submission: a hidden field, the time the form took to fill in and a limit on repeated requests. Your IP address is not stored with a valid submission; it is held in memory for a moment, only to apply that limit.

Questions typed into "Ask the host" are passed to an AI provider to compose the answer. We do not keep the conversation text; it lives in the open browser tab and goes when the tab does. What gets recorded is technical usage data without your words (website, language, outcome and timings), which the hosting provider's server logs hold for a short time. Keep personal details out of it.

List data stays while the subscription lasts; the dates form and single-night alerts follow the same rule. Unsubscribing stops the emails at once, and seven days later your name, mobile, message, dates, group size and interests are erased. Only the email, the website, the language, where you signed up and the unsubscribe mark remain, so that nobody adds you again by mistake.

A single-night alert still waiting to go out is kept until that night, or the one replacing it, goes on sale, and for one year at most; once sent, it is erased when the night has passed. Unsubscribing cancels the pending alerts of Tenerife Nights straight away, and the next daily clean-up erases them.

Messages to the team without list consent are erased two years after the last exchange. Technical security records last up to 90 days. Of every email sent, a copy and its delivery status (sent, delivered, bounced or a complaint) are kept for one year; opens and clicks are not tracked.

Nobody buys it: no venue, promoter or advertiser receives it. Processors work on our instructions only: Supabase for the database, Resend for sending email (through an account of these websites in its EU region), Groq for the assistant's AI model and Netlify for hosting. Some of them work from outside the EEA, for example from the United States; those transfers rely on the Commission's standard contractual clauses or another GDPR safeguard.

Ticket purchases happen on the seller's website under that seller's privacy terms, and no card data reaches Tenerife Nights.

You may see what we hold on you, have it corrected or erased, limit or oppose its use, or receive it in a file you can take elsewhere; an erasure request is dealt with within one month. Changed your mind about the emails? The unsubscribe link at the foot of each one withdraws your consent at once. Complaints can go to the Maltese supervisory authority, the IDPC (idpc.org.mt).

Papagayo and Monkey Beach Club only let in over-18s, and this website follows the same line: if you are under 18, leave the forms empty. This notice falls under the GDPR and the law of Malta.