Privacy policy

This is a translation for convenience. In case of discrepancy, the Spanish version prevails.

What data we process and why

Purchases

Name, email, country and the details the payment page asks for. We use them to take payment, deliver your itinerary, send you the access links and handle complaints. Legal basis: performance of the contract (art. 6.1.b GDPR) and accounting and tax obligations (art. 6.1.c GDPR). We never see or store your card details: Stripe processes them.

Contact form

Name, email and whatever you tell us. We use them only to reply. Legal basis: your consent (art. 6.1.a GDPR).

Analytics and advertising

Only if you accept them in the cookie notice: browsing data to measure visits (Google Analytics) and show ads (Google AdSense). Legal basis: your consent, which you can withdraw at any time. We also use Vercel Web Analytics, which measures visits in aggregate without cookies or data that identify you. Details in the cookie policy.

Security

Technical logs without contact details (for example, failed access attempts) to protect the website. Legal basis: legitimate interest (art. 6.1.f GDPR).

How long we keep it

Purchase data, for the periods required by accounting and tax rules. Contact messages, for as long as the conversation lasts. Analytics data, according to the retention settings of Google Analytics.

Who else has access to your data

Providers that process data on our behalf, under a data processing agreement:

• Stripe (payments).
• Resend (sending emails).
• Vercel (website hosting and cookieless analytics).
• Google (Analytics and AdSense, only with your consent).

Some of these providers may process data outside the European Economic Area. In that case, safeguards such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses apply.

Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability of your data, and withdraw your consent, by writing to info@excursia.es. If you think we haven’t handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Minors

The website is not aimed at children under 14 and we do not knowingly process their data.