GDPR & your data rights

Costa Tasting Protocol, Edificio Ulla 1, San Pedro de Alcántara, Málaga, Spain. Requests can be sent by WhatsApp to +34 653 568 651 or by post to the address above.

• Access — get a copy of the data we hold about you.
• Rectification — correct inaccurate details, such as your display name.
• Erasure — ask us to delete your guest profile, ratings and reports.
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive your tasting data in a machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — at any time, without affecting past processing.

A share link publishes a snapshot of one tasting result. Send us the link and we will remove the snapshot, which makes the URL stop working.

We respond within one month. We may ask for details that confirm the request comes from you — for example the event code and display name used during the tasting.

Some of our providers process data outside the EEA. Where that happens, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.

If you believe we have mishandled your data, you can complain to the Spanish data protection authority (Agencia Española de Protección de Datos) or your local supervisory authority. We would appreciate the chance to resolve it first.