PRIVACY POLICY

1. Data Controller of Your Personal Data

2. If you have registered on our platform as a guide to publish your own tours:

We will process your personal data for the purpose of registering you as a guide, managing the publication of tours and related payments, conducting a preliminary quality analysis of your listings, and providing you with the necessary information to access the service.

The legal basis for processing your personal data is the necessity of doing so to provide you with the service. Providing this data is a requirement to offer you the service, meaning you won't be able to publish tours unless you provide the requested information.

We will not make international transfers of your personal data nor share it with third parties, except where legally required. For example, we may need to share tax information with the Tax Agency or other public authorities.

Once the tour is published and delivered, we will retain your data—duly blocked—for no more than five years, in case of potential requests from tax, labor, or accounting authorities.

3. If you have registered on our platform as a traveler to book tours:

We will process your personal data to create and manage your user account, provide you access to the tour booking service, track the tours you book, and give you the necessary information regarding the requested service.

The legal basis for this processing is your consent, which you provided when creating your account.

To allow guides to manage the tours properly and notify you of any issues, your phone number and identifying information (full name) will be shared with the guides offering the tours you book. Please note that in cases where the guides are located outside the European Economic Area, these transfers will be considered international data transfers. Many of the countries where GuruWalk S.L. guides operate have been declared by the European Commission to offer an adequate level of personal data protection. You can consult the list of these countries here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

If you book a tour in a country not included in the list, we guarantee an equivalent level of protection through the use of Standard Contractual Clauses approved by the European Commission.

We will store your data until you decide to delete your user account.

4. If you have contacted us or requested information:

We will process your personal data to respond to your contact request or information inquiry.

The legal basis for processing your data is the consent you provided when making the request.

We will not carry out international transfers or share your personal data with third parties, except when required by law.

We will retain your data only for the time necessary to handle and respond to your request.

5. If you have subscribed to our newsletter and promotional content:

We will process your personal data in order to periodically send you, via email, news about GuruWalk S.L. and promotional content.

The legal basis for processing your data is the consent you provided by checking the corresponding box.

We will not carry out international transfers or share your personal data with third parties, except when legally required.

We will retain your data until you unsubscribe from the service or delete your user account.

6. If you have left a review for a tour:

We will process your personal data solely to identify you as the author of the review (anonymous reviews are not allowed).

The legal basis for processing your data is the consent you provided when submitting the review.

We will not carry out international transfers or share your personal data with third parties, except when legally required.

We will store your data until the regular operation of the web service allows it, or until you decide to delete the review.

7. Your Rights Regarding Personal Data Protection

As the data subject, you have the following rights:

You may exercise these rights or request more information by emailing [email protected] and attaching a copy of your ID.

If you do not receive a response, believe your request was not properly handled, or think your data has been unlawfully processed, you may file a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es/es

8. How We Protect Your Personal Data

To safeguard your personal data, GuruWalk S.L. performs regular risk assessments and has adopted appropriate technical and organizational security measures to mitigate such risks and prevent alteration, loss, or unauthorized access—though absolute security cannot be guaranteed.

We also work with service providers who may process your personal data on our behalf. In such cases, we carefully select providers to ensure data protection compliance and require them to sign data processing agreements including, among others, the following obligations: Implement appropriate technical and organizational measures; Process personal data only for agreed purposes and according to our written instructions; Delete or return the data once the service ends.

Additionally, we inform you that all our staff—regardless of their role in the data processing lifecycle—have committed to handling personal data with the utmost care and confidentiality.

9. Changes to This Data Protection Notice

GuruWalk S.L. may modify this Data Protection Notice to align with legal updates or changes in data processing practices. If legally required, affected users will be notified in advance.

10. Applicable conditions for users of the GuruWalk App