Privacy Policy
Last updated: 10 October 2026
Welcome to Inbal Cabiri.
Your privacy matters. This Privacy Policy explains how personal information is collected, used, stored and protected when you visit inbalcabiri.com, subscribe to our newsletter, purchase a digital product, book a service or otherwise interact with us.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable Spanish and European legislation.
1. Who is responsible for your data?
The data controller responsible for this website is:
Name: Inbal Cabiri
Business location: Barcelona, Spain
Registered business address: [INSERT BUSINESS ADDRESS]
Tax identification number: [INSERT NIF/NIE, OR REFER TO LEGAL NOTICE]
Email: inbal.cabiri@gmail.com
Website: https://inbalcabiri.com
For questions concerning your personal data or this policy, please contact us using the email address above.
2. What personal information do we collect?
Depending on how you use this website, we may process the following categories of information:
Information you provide directly
Name, email address and contact information when you subscribe to our newsletter or contact us.
Information included in messages, enquiries, comments or correspondence.
Billing and transaction information when purchasing digital products or booking services.
Information you voluntarily provide when requesting travel planning, photography or other professional services.
Information collected through website use
IP address, device information, browser type and operating system.
Pages visited, referring websites, approximate geographic location and website interactions.
Cookie identifiers and analytics information, subject to applicable consent requirements.
Technical and security logs needed to maintain the website.
Information received from service providers
We may receive limited transaction confirmations, booking information, referral reports or aggregated performance data from payment processors, affiliate partners and other providers.
We do not intentionally request special categories of personal data. Please avoid including sensitive information in contact forms or public comments unless necessary.
3. Why do we process personal data?
We process personal information for the following purposes and legal bases:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and service requests | Legitimate interests or steps taken before entering into a contract |
| Providing purchased products and booked services | Performance of a contract |
| Managing payments, invoices and accounting | Contractual necessity and legal obligations |
| Sending newsletters and promotional emails | Consent, or another applicable legal basis where permitted |
| Measuring website traffic through non-essential analytics | Consent where required |
| Operating affiliate tracking and marketing technologies | Consent where required |
| Maintaining website security and preventing misuse | Legitimate interests and applicable legal obligations |
| Managing blog comments and responding to feedback | Legitimate interests |
| Complying with tax, accounting and legal requirements | Legal obligation |
Where processing relies on legitimate interests, we assess those interests against the rights and freedoms of the individuals concerned.
Where consent is required, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Newsletter and email communications
If you subscribe to our newsletter, we collect your email address and any additional information you choose to provide.
Our newsletters may include travel stories, destination recommendations, editorial updates, new guides, professional services, affiliate recommendations and occasional commercial offers.
We use Mailchimp to manage email subscriptions and communications.
Mailchimp may process subscriber information, subscription preferences and email engagement data on our behalf, subject to its applicable contractual and privacy safeguards.
You can unsubscribe at any time using the link included in our marketing emails or by contacting us directly.
We do not sell newsletter subscriber lists.
5. Purchases, payments and professional services
Our website may offer digital travel guides, downloadable resources, consultations, photography services and other professional products.
When you make a purchase or request a paid service, we may process your name, contact details, billing information, order history and information necessary to fulfil your request.
Payments may be processed by third-party payment providers, including those enabled through our website’s checkout system.
Payment card information is handled by the relevant payment processor according to its own privacy and security arrangements. We do not intentionally store full payment card numbers on our website.
Transaction records may be retained where required for tax, accounting, consumer protection or legal purposes.
6. Affiliate links and commercial partnerships
Some pages on this website contain affiliate links, booking widgets or commercially partnered content.
We may receive a commission when visitors make eligible purchases or bookings through these links, at no additional cost to the visitor.
Our affiliate relationships may include:
Stay22
GetYourGuide
Amazon Associates
Travelpayouts
Rakuten Advertising
Other travel, accommodation and commercial partners disclosed where relevant
Affiliate partners may use referral identifiers, cookies or similar technologies to attribute eligible transactions, subject to applicable consent requirements.
When you follow an affiliate link, the destination website may independently collect and process personal information under its own privacy policy.
Editorial recommendations and commercial partnerships are disclosed where applicable.
7. Cookies and similar technologies
Our website uses cookies and similar technologies for website functionality, security, user preferences, analytics and, where applicable, affiliate attribution.
These technologies may include:
Strictly necessary cookies: Required for essential website operations, security, shopping cart functionality and remembering privacy choices.
Analytics cookies: Help us understand website usage and improve content and performance.
Marketing and affiliate cookies: May help identify referrals, attribute purchases or measure the effectiveness of commercial partnerships.
Functional cookies: Support optional website features and user preferences.
Where legally required, non-essential cookies and similar tracking technologies will only be activated after valid consent has been obtained.
You can accept, reject or manage optional cookies through our cookie consent interface.
Cookie settings: [INSERT LINK TO COOKIE PREFERENCE CENTRE]
For further information about individual cookies, their providers, purposes and retention periods, please consult our separate Cookie Policy:
Cookie Policy: [INSERT LINK]
8. Website analytics
We use, or may use, Google Analytics and related measurement technologies to understand how visitors discover and interact with our content.
Depending on the configuration, analytics information may include pages visited, session duration, referral sources, device characteristics and approximate location.
Where required by applicable law, analytics technologies are activated only after the visitor has given consent.
Further information about Google’s privacy practices is available at:
https://policies.google.com/privacy
9. Third-party services and embedded content
Our website is built using WordPress and may integrate third-party services for hosting, website management, email delivery, e-commerce, analytics, security and content presentation.
These may include:
WordPress and WooCommerce
Mailchimp
Google Analytics and Google Tag Manager
Payment processing providers
Affiliate networks and booking technology providers
Embedded social media, video or other external content providers
The exact services involved depend on the features you use and the website’s active configuration.
Where third-party providers act as data processors on our behalf, we seek appropriate contractual and security safeguards.
Some providers may act as independent data controllers and apply their own privacy policies.
Embedded content may involve the collection of personal information by external providers. Where consent is legally required for non-essential technologies, appropriate consent controls should apply before activation.
10. International data transfers
Some of our service providers may process personal information outside the European Economic Area (EEA), including in the United States.
Where international transfers occur, we rely on an applicable lawful transfer mechanism, such as:
An adequacy decision issued by the European Commission, where applicable.
The EU-US Data Privacy Framework for appropriately certified participating organisations, where applicable.
European Commission Standard Contractual Clauses, together with supplementary safeguards where necessary.
Another valid mechanism permitted under Chapter V of the GDPR.
Information about applicable safeguards may be requested using the contact details above.
11. How long do we keep personal information?
We retain personal information only for as long as necessary for the relevant purpose, taking into account applicable legal obligations.
In particular:
Newsletter information: Until you unsubscribe or withdraw consent, subject to limited retention of records necessary to demonstrate compliance.
Enquiries and correspondence: For the period reasonably necessary to respond and manage related matters, including any applicable legal claims.
Purchases and invoices: For the retention periods required under applicable Spanish tax, accounting and commercial legislation.
Website analytics: According to the retention settings of the relevant analytics platform and applicable consent requirements.
Cookie preferences: For the period necessary to administer and demonstrate your privacy choices.
Security records: For a limited period proportionate to security and fraud-prevention purposes, unless longer retention is legally justified.
Personal data will be deleted, anonymised or securely restricted when no longer required, subject to applicable legal obligations.
12. Your data protection rights
Under the GDPR, you may have the right to:
Access personal information held about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information.
Request restriction of certain processing activities.
Object to processing based on legitimate interests.
Request portability of eligible personal information.
Withdraw consent at any time.
Not be subject to certain solely automated decisions producing legal or similarly significant effects.
These rights are subject to the conditions and exceptions established by applicable law.
To exercise your rights, please email:
We will respond within the period required by applicable data protection law, normally within one month of receiving a valid request, subject to permitted extensions.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):
13. Data security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration and unlawful disclosure.
These measures may include secure website connections, access controls, software maintenance, backups and the use of established service providers.
However, no internet-based system can guarantee absolute security.
14. Children’s privacy
Our website provides general travel, food, photography and lifestyle content and is not specifically directed at children.
We do not knowingly collect personal information from children in circumstances requiring parental or guardian authorisation without the appropriate legal basis or authorisation.
Under Spanish data protection law, consent-based processing involving children under 14 generally requires consent from a parent or legal guardian, subject to applicable exceptions.
If you believe that a child has provided personal information inappropriately, please contact us so that we can review the situation.
15. External websites
Our website contains links to external websites, including travel providers, accommodation booking platforms, publishers, affiliate partners and social media services.
These websites operate independently and may have their own privacy policies.
We encourage visitors to review the relevant privacy information before providing personal details or completing transactions on third-party websites.
16. Changes to this policy
We may update this Privacy Policy to reflect changes in our services, technology, legal obligations or data processing practices.
The latest version will be published on this page with an updated revision date.
Where required by law, we will provide additional notice or request renewed consent.
17. Contact
For questions about this Privacy Policy, personal data processing or your privacy rights, please contact:
Inbal Cabiri
Barcelona, Spain
Email: inbal.cabiri@gmail.com
Website: https://inbalcabiri.com
We value your trust and aim to handle your personal information transparently, responsibly and respectfully.