Sun2Fun Tours Privacy, Cookies & Legal Information Last updated: 6 August 2026 Privacy Policy 1. Data Controller This website is operated by MB Sun2Fun Tours ("Sun2Fun Tours", "we", "our", or "us"), the Data Controller responsible for processing your personal data. Legal Entity: MB Sun2Fun Tours Legal Entity Code: 308091791 Registered Office:
Šiaulių r. sav., Kuršėnų kaimiškoji sen.,
Paringuvio k.,
Ringuvos g. 7A-3,
LT-81107,
Republic of Lithuania Email: Sun2FunTours@icloud.com Phone: +34 691 380 144 Sun2Fun Tours operates the following destination-specific brands: * Sun2Spain * Sun2Italy * Sun2Greece * Sun2Egypt Unless expressly stated otherwise, all references to Sun2Fun Tours, Sun2Spain, Sun2Italy, Sun2Greece, Sun2Egypt, "we", "our", or "us" refer to MB Sun2Fun Tours. 2. Personal Data We Process Depending on your interaction with us, we may collect and process the following categories of personal data: * Contact details (name, email address, telephone number) * Identification information provided during enquiries or bookings * Booking information, including selected tours, dates, participants, and preferences * Payment-related information (payment card details are processed securely by our payment providers and are never stored by Sun2Fun Tours) * Communications exchanged with us by email, contact forms, messaging applications, or telephone * Technical information, including IP address, browser type, operating system, referring pages, cookies, and website usage information * Marketing preferences where you have chosen to receive promotional communications We collect only the information necessary for the purposes described in this Privacy Policy. 3. Purpose of Processing & Legal Bases We process your personal data for the following purposes and legal grounds under the General Data Protection Regulation (GDPR): Booking Administration To process reservations, manage bookings, communicate regarding your reservation, provide customer support, and deliver our services. Legal basis: Performance of a contract (Article 6(1)(b) GDPR) Payment Processing To receive payments, issue invoices, prevent fraud, comply with accounting obligations, and process refunds where applicable. Legal basis: * Performance of a contract * Compliance with legal obligations (Article 6(1)(c) GDPR) Customer Communication To respond to enquiries before or after a booking and provide requested information. Legal basis: * Performance of a contract * Legitimate interests (Article 6(1)(f) GDPR) Marketing Communications To send newsletters, promotional offers, and travel information where you have expressly consented. You may withdraw your consent at any time. Legal basis: Consent (Article 6(1)(a) GDPR) Website Analytics To understand how visitors use our websites and improve their functionality, content, security, and user experience. Legal basis: Legitimate interests or consent, where required by applicable law. 4. Data Sharing We share personal data only where necessary and only with trusted service providers that assist us in operating our business. These may include: * Payment providers (such as Stripe and PayPal) * Website hosting providers * Booking and reservation platforms * IT support providers * Email service providers * Analytics providers * Marketing providers where consent has been given * Public authorities where disclosure is required by law We never sell your personal data. Where service providers process personal data on our behalf, appropriate data processing agreements are in place as required by the GDPR. 5. International Data Transfers Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are implemented in accordance with Chapter V of the GDPR, including where applicable: * European Commission Adequacy Decisions; * Standard Contractual Clauses (SCCs); or * other legally recognised transfer mechanisms. 6. Data Retention We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations. Typical retention periods include: * Booking and accounting records: up to 10 years where required by applicable accounting or tax legislation. * Customer enquiries: up to 3 years. * Marketing data: until consent is withdrawn. * Website analytics: according to the retention periods established by the relevant analytics provider. * Cookies: according to their individual expiration periods described in the Cookie Policy. After the applicable retention period expires, personal data is securely deleted or anonymised. 7. Your Rights Under GDPR You have the right to: * Access your personal data. * Request correction of inaccurate information. * Request deletion of your data ("Right to be Forgotten"). * Restrict processing. * Object to processing. * Request data portability. * Withdraw consent at any time where processing is based on consent. * Lodge a complaint with the competent supervisory authority. Requests may be submitted using the contact details provided in this Privacy Policy. We aim to respond within one month in accordance with the GDPR. 8. Supervisory Authority If you believe that your personal data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority. As MB Sun2Fun Tours is established in the Republic of Lithuania, the lead supervisory authority is: State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija – VDAI) You may also contact your local data protection authority if you reside in another European Union Member State. Cookie Policy 1. What Cookies Are Cookies are small text files stored on your computer, tablet, or mobile device when you visit a website. They help websites function properly, improve security, remember user preferences, and provide information about how visitors use the website. Cookies do not normally identify you directly but may be linked to information that can identify you. 2. Cookies Used on Our Websites Our websites, including those operated under the Sun2Fun Tours brands (such as Sun2Spain, Sun2Italy, Sun2Greece, and Sun2Egypt), may use the following categories of cookies: Essential Cookies These cookies are necessary for the operation of the website and cannot be disabled. They include functions such as: * Website security * User authentication * Booking functionality * Session management * Fraud prevention Analytics Cookies Analytics cookies help us understand how visitors interact with our websites. Information collected may include: * Pages visited * Time spent on pages * Device type * Browser type * General geographic location * Website performance These cookies help us improve our services. Marketing Cookies Marketing cookies may be used to: * Measure advertising performance * Deliver relevant advertisements * Prevent repeated advertising * Evaluate marketing campaigns These cookies are only placed where your consent has been obtained where required by law. 3. Examples of Cookies Examples of cookies that may be used include: CookieProviderPurposeDurationCategory _gaGoogle AnalyticsWebsite analytics2 yearsAnalytics ga*Google AnalyticsVisitor statistics2 yearsAnalytics _fbpMetaAdvertising & remarketing3 monthsMarketing XSRF-TOKENWebsite PlatformSecurity protectionSessionNecessary Session CookiesWebsite PlatformUser session managementSessionNecessary The exact cookies used may change over time as our website evolves. 4. Managing Cookies You may: * Accept or reject non-essential cookies using our cookie banner. * Modify your cookie preferences at any time. * Delete cookies through your browser settings. * Configure your browser to refuse cookies. Please note that disabling certain cookies may affect website functionality. Legal Notice Website Ownership This website, including Sun2Spain.com and any other websites operated under the Sun2Fun Tours brands, is owned and operated by: MB Sun2Fun Tours Legal Entity Code: 308091791 Registered Office: Šiaulių r. sav., Kuršėnų kaimiškoji sen.,
Paringuvio k.,
Ringuvos g. 7A-3,
LT-81107,
Republic of Lithuania Email: Sun2FunTours@icloud.com Telephone: +34 691 380 144 The Company operates the following trading brands: * Sun2Spain * Sun2Italy * Sun2Greece * Sun2Egypt References throughout this website to Sun2Spain, Sun2Italy, Sun2Greece, Sun2Egypt, Sun2Fun Tours, "we", "our", or "us" refer to MB Sun2Fun Tours unless expressly stated otherwise. Intellectual Property All content available on our websites—including but not limited to: * text; * photographs; * graphics; * logos; * videos; * downloadable guides; * itineraries; * maps; * branding; * trademarks; * icons; * software; and * website design— is owned by or licensed to MB Sun2Fun Tours and is protected under applicable copyright, trademark, and intellectual property laws. No material may be copied, reproduced, distributed, modified, published, transmitted, or commercially exploited without our prior written permission. Website Use Users agree to use our websites lawfully, responsibly, and in good faith. Users must not: * attempt to gain unauthorised access to our systems; * interfere with website security; * introduce malware or harmful software; * misuse booking systems; * copy website content without permission; * use the website for unlawful purposes. We reserve the right to restrict or terminate access where misuse is detected. Liability Disclaimer To the fullest extent permitted by applicable law, MB Sun2Fun Tours shall not be responsible for: * misuse of the website; * interruptions caused by maintenance or technical failures; * internet outages; * force majeure events; * temporary unavailability of services; * inaccuracies caused by third-party information providers; * external websites linked from our pages. Nothing in this disclaimer excludes liability where such exclusion is prohibited by law. Governing Law This Privacy Policy, Cookie Policy, and Legal Notice are governed by the laws of the Republic of Lithuania. Nothing contained herein limits any mandatory rights granted to consumers under European Union legislation or the laws of the consumer's country of residence. Compliance & Data Protection Statement MB Sun2Fun Tours is committed to protecting personal data and operates in accordance with applicable European Union and Lithuanian legislation, including but not limited to: * Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR); * applicable Lithuanian data protection legislation; * consumer protection legislation; and * other applicable legal requirements governing our activities. We regularly review our internal procedures to ensure continued compliance with applicable legal obligations. Scope of This Information This document explains: * how we collect and process personal data; * the legal bases for processing; * users' rights under applicable legislation; * our use of cookies; * conditions governing use of our websites; * legal notices and liability limitations. It should be read together with our Terms & Conditions. Booking Requests & Availability Submitting a booking through any of our websites or communication channels constitutes a booking request only. A booking becomes confirmed only after: * availability has been verified; * payment (where required) has been successfully received; and * written confirmation has been issued by MB Sun2Fun Tours. We reserve the right to decline booking requests, propose alternative dates, services, or itineraries where availability cannot be secured or where operational circumstances require changes. Third-Party Services Our websites may contain links to or integrate services provided by third parties, including but not limited to: * payment providers; * booking platforms; * mapping services; * social media platforms; * accommodation providers; * transportation providers; and * other travel-related services. While we carefully select our partners, MB Sun2Fun Tours: * does not own or control third-party platforms; * is not responsible for their availability, accuracy, pricing, security, or performance; * cannot guarantee uninterrupted access to third-party services; and * is not liable for disputes arising directly between customers and third-party providers. Use of third-party websites remains subject to their own terms and privacy policies. Pricing & Content Accuracy We make every reasonable effort to ensure that information published on our websites is accurate and up to date. However, errors may occasionally occur. MB Sun2Fun Tours reserves the right to correct typographical errors, pricing mistakes, inaccuracies, availability information, descriptions, photographs, or other website content at any time without prior notice. Such corrections shall not affect bookings that have already been confirmed unless required by applicable law or where an obvious pricing error has occurred. Accessibility Commitment MB Sun2Fun Tours is committed to improving the accessibility and usability of all websites operated under its brands. We continuously work to improve the browsing experience for all users, including those using assistive technologies. If you experience accessibility difficulties or identify content that is difficult to access, please contact us so we can make reasonable efforts to provide the information in an alternative format or improve the affected content. Use of Artificial Intelligence We may use Artificial Intelligence ("AI") tools to assist with: * drafting website content; * translations; * travel information; * marketing materials; * customer support assistance; and * other operational tasks. Where AI tools are used for public-facing content, the output is reviewed by a member of our team before publication whenever appropriate. MB Sun2Fun Tours does not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals within the meaning of Article 22 of the General Data Protection Regulation (GDPR). Limitation of Liability To the maximum extent permitted by applicable law, MB Sun2Fun Tours shall not be liable for indirect, incidental, consequential, special, or punitive damages arising from: * temporary website unavailability; * internet failures; * technical issues beyond our reasonable control; * failures of third-party services; * delays caused by force majeure; * loss of data; * interruption of business; or * other events beyond our reasonable control. Nothing in this clause excludes liability where such exclusion is prohibited under applicable law. Applicable Law & Jurisdiction This Privacy Policy, Cookie Policy, Legal Notice, and all related matters shall be governed by the laws of the Republic of Lithuania. Where legally permitted, disputes arising from these policies shall fall within the jurisdiction of the competent courts of the Republic of Lithuania. Nothing in these policies limits any mandatory rights granted to consumers under European Union legislation or the mandatory laws applicable in the consumer's country of residence. Contact For any questions regarding privacy, data protection, legal matters, compliance, or these policies, please contact: MB Sun2Fun Tours Legal Entity Code: 308091791 Registered Office: Šiaulių r. sav., Kuršėnų kaimiškoji sen.
Paringuvio k.
Ringuvos g. 7A-3
LT-81107
Republic of Lithuania Email: Sun2FunTours@icloud.com Telephone: +34 691 380 144 We are committed to handling enquiries promptly and in accordance with applicable legal requirements.