Privacy Policy
Last updated: 1 May 2025
This Privacy Policy describes how iWalker Travel S.L. (CIF ESB03547821), with registered address at Calle Mayor 23, Local 4, 03001 Alicante, España ("we", "us" or "our"), collects, uses and protects your personal data when you visit iwalkertravel.com or contact us about our services.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), the Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), and any other applicable legislation.
1. Data Controller
iWalker Travel S.L.
Calle Mayor 23, Local 4
03001 Alicante, España
CIF / VAT: ESB03547821
Email:
privacy@iwalkertravel.com
Phone: +34 965 212 345
2. What Personal Data We Collect
We may collect the following categories of personal data:
- Identification data: name, surname, nationality, passport or ID number (required for tour bookings).
- Contact data: email address, telephone number, postal address.
- Payment data: billing address, payment reference (card details are processed by our payment provider and are never stored on our servers).
- Health data: any mobility or medical information you voluntarily provide to help us adapt tour difficulty and pace. This data is treated with strict confidentiality.
- Usage data: IP address, browser type, pages visited, time spent on site (collected via cookies — see Section 8).
- Communications data: content of emails or messages you send to us.
3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
- Tour booking and service delivery — to manage reservations, send booking confirmations, arrange guides and logistics. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Customer communications — to respond to enquiries and provide pre- and post-tour support. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
- Legal obligations — to comply with Spanish tax, accounting and tourism licensing requirements. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
- Marketing — to send you news about our tours and offers, only with your explicit consent. Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
- Website analytics and improvement — to understand how visitors use our site and improve its content. Legal basis: legitimate interests (Art. 6(1)(f) GDPR) and, where cookies are involved, your consent.
4. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes described above:
- Booking and financial records: 6 years (Spanish tax law requirement).
- Customer communications: 3 years from last contact.
- Marketing consents: until you withdraw consent or 3 years of inactivity.
- Website analytics: aggregated data only, retained up to 26 months.
5. Who We Share Your Data With
We do not sell or rent your personal data. We may share it with:
- Service providers acting as data processors: web hosting providers, payment processors, booking software providers, email service providers — all bound by data processing agreements.
- Tour partners such as accommodation providers or local transport companies, to the extent necessary to deliver your booked tour.
- Regulatory authorities when required by law (e.g. Spanish Tax Agency, Policía Nacional for accommodation registration).
Where we transfer data outside the European Economic Area, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
6. Your Rights
Under GDPR you have the following rights regarding your personal data:
- Right of access — to obtain a copy of the data we hold about you.
- Right to rectification — to correct inaccurate or incomplete data.
- Right to erasure — to request deletion of your data where there is no legitimate reason to continue processing it.
- Right to restriction of processing — to request that we limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a structured, machine-readable format.
- Right to object — to object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at privacy@iwalkertravel.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD — Agencia Española de Protección de Datos).
7. Cookies
Our website uses cookies — small text files placed on your device — to make the site function correctly and to understand how it is used.
Strictly necessary cookies (no consent required): session management, security tokens.
Analytics cookies (require consent): we use anonymised analytics to measure page visits and navigation patterns. No personally identifiable data is transmitted to third parties without consent.
Marketing / advertising cookies (require consent): if you arrive via a paid advertisement (e.g. Google Ads), conversion measurement cookies may be set. These are only activated with your consent, given via our cookie banner.
You can manage or withdraw cookie consent at any time via your browser settings or by contacting us.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or alteration. Our website uses HTTPS (TLS) encryption for all data in transit. Access to personal data is restricted to staff who need it to perform their duties.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via a notice on our website. The date at the top of this page shows when the policy was last revised.
10. Contact
For any questions about this Privacy Policy or how we handle your personal data, please contact:
iWalker Travel S.L.
Calle Mayor 23, Local 4, 03001 Alicante, España
Email:
privacy@iwalkertravel.com
Phone: +34 965 212 345