Privacy policy

Data controller

Your data is handled by Guies de Muntanya Tirantmilles, S.L. (NIF B25818253), Masia Mirave, s/n, 25286 Pinell de Solsonès (Lleida), Spain. For any privacy matter, write to guies@tirantmilles.com.

What data we collect

• Availability form: the activity, the date, how many of you there are, ages, your name and a phone number or email.
• Email and WhatsApp: whatever you tell us when you write.
• Gift voucher: the recipient’s name and the payment details PayPal sends us (name, email and amount).
• Booking: the details needed to organise the activity, issue the invoice and, where relevant, arrange insurance (for example, participants’ full names, ID or passport number and date of birth).
• Health: only if you tell us something that matters for safety (an injury, an allergy). We use it solely to adapt the activity.

What we use it for

• To answer your request and prepare a proposal. Legal basis: steps taken at your request before a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR).
• To manage your booking, run the activity and take payment. Legal basis: the contract (Article 6(1)(b) GDPR).
• To meet legal obligations, such as tax and insurance requirements. Legal basis: legal obligation (Article 6(1)(c) GDPR).
• Any health information you give us, for your safety during the activity. Legal basis: your explicit consent (Article 9(2)(a) GDPR), which you can withdraw at any time.

We won’t send you advertising or newsletters unless you ask for them.

How long we keep it

If your request doesn’t lead to a booking, we delete the data within one year at most.

Booking data is kept for as long as the relationship lasts and then for the periods required by law: for example, six years for invoices and accounting records (Article 30 of the Spanish Commercial Code).

Who can see it

We don’t sell or pass on your data. Only the service providers we work with have access, as far as necessary, and they must comply with the GDPR:

• The company that hosts the website, which receives the form.
• Google (Google Workspace), where our email is.
• WhatsApp (Meta), if you choose to contact us that way.
• The insurer, when the activity includes insurance.
• Our accountants, bank and payment platform, for invoicing and payment.
• Public authorities and courts, when the law requires us to share it.

Data outside the EU

Google and Meta may process data outside the European Economic Area. They do so with GDPR safeguards: the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

The form and the server

The form sends your request to our email; the website does not store it in any database.

To curb spam, the server keeps an encrypted fingerprint of your IP address for one hour. Like any website, the server also logs visits (IP address, date and page) for technical and security reasons.

The website does not use cookies. See our cookie policy.

Your rights

You can ask us to show you the data we hold about you, correct or delete it, restrict its use, give it to you in a format you can take elsewhere, or object to any processing. Write to guies@tirantmilles.com saying what you need; we will reply within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Other people’s data

If you give us details of other participants (your group or your children, for example), make sure they agree and know about this policy. For children under 14, the data must be provided by a parent or legal guardian.