Privacy Policy

This Privacy Policy explains in a clear and accessible manner how we process the personal data you provide us with when you browse our website, make a booking, contact us or participate in our tourist activities.

1. Data controller

The data controller responsible for processing your personal data is:
Naturanda Turismo Ambiental S.L.
Tax ID number: B90315408
Address: Parque Rubén Darío 3 9º A 41010 Seville
Official email address for privacy matters: info@andalsurexcursiones.com

Following the integration of the Andalsur Excursiones brand, Naturanda assumes responsibility for the processing of all data collected by said commercial brand and centralises its management in accordance with this Privacy Policy.

2. Data we collect

We collect different types of data, depending on how you interact with us:

a) Data provided directly by you

  • Full name
  • Email address
  • Phone
  • Payment details (processed securely)
  • Information required for bookings and activities
  • Enquiries sent by post or forms
  • Data provided when registering or subscribing
  • Information you choose to share when using linked social media accounts

b) Automatically collected data

  • IP address
  • Cookies and browsing data
  • Information about your searches, bookings or interests
  • Language, country of access, and other non-identifying demographic data

c) Data from social media

If you log in via Facebook, Google, or other platforms, we may receive:

  • Name
  • Email
  • Profile picture
  • Public information in your settings

d) Photographs and videos during activities

We may obtain your image during excursions or activities, as detailed in section 10.

3. What we use your data for

We use your data solely for legitimate purposes:

a) Provision of the service

  • Manage bookings and payments
  • Confirm your purchase
  • Send you relevant information about the activity
  • Provide customer service

b) Improvement and customisation

  • Tailor recommendations to your interests
  • Analyse the use of our website
  • Make operational improvements and internal statistics

c) Commercial communications

Only when you have authorised it or there is a prior commercial relationship:

  • Send promotions
  • Share news about destinations or activities
  • Invite surveys or ratings

d) Legal compliance and security

  • Fraud prevention
  • Tax and accounting obligations
  • Respond to requests from authorities

4. Legitimacy of processing

The processing is carried out in accordance with the following legal bases:

  • Contract execution: booking management.
  • Consent: commercial communications, non-essential cookies, use of images.
  • Legitimate interest: service improvements, internal analysis, security.
  • Compliance with legal obligations.

5. Recipients of your data

We only share your data when strictly necessary:

  • Suppliers involved in your activity: tour operators, guides, transport providers, accommodation providers, etc.
  • Technology and marketing companies operating under confidentiality agreements.
  • Financial institutions and payment gateways.
  • Public authorities when there is a legal obligation to do so.

We do not sell personal data or share it with third parties unrelated to the provision of the service.

6. International transfers

We do not transfer data outside the European Economic Area, unless:

  • The contracted activity is carried out in a third country, or
  • You interact with external platforms (Meta, Google, etc.), which are subject to their own policies.

In these cases, the safeguards provided for in the GDPR shall apply.

7. Retention period

Your data will be retained:

  • For as long as there is a contractual relationship or it is necessary for the provision of the service.
  • Unless you request its deletion, when processing depends on your consent.
  • During the periods required by tax and accounting legislation.
  • The time necessary for statistical or improvement purposes, anonymising the data where possible.

8. Your rights

You may exercise your rights at any time:

  • Right of access
  • Right of rectification
  • Right to erasure
  • Right to object
  • Right to restriction of processing
  • Right to portability
  • Right to withdraw consent

How to exercise these rights:
By sending an email to: andalsur@naturanda.com
(indicating the right you wish to exercise and providing proof of identity if necessary).

Supervisory authority:
If you are not satisfied, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

9. Cookies

We use cookies to:

  • Improve the user experience
  • Analyse website traffic and usage
  • Customise content and recommendations

You may consult the Cookies Policy to manage your preferences.

10. Use of images for promotional purposes

Durante nuestras actividades, podemos capturar fotografías o vídeos en los que usted pueda aparecer.

These images may be used for promotional purposes in:

  • Website
  • Social media
  • Advertising material

If you do not want your image to be used, you can request this at andalsur@naturanda.com, and we will remove the content within a reasonable period of time.

11. Security

Naturanda implements technical and organisational measures to protect your data:

  • SSL connection
  • Encryption of sensitive information
  • Internal access controls
  • Secure servers
  • Incident detection and response protocols

Although no system is completely foolproof, we act with diligence and transparency.

12. Contact

For any questions regarding this policy or the processing of your personal data:

Official GDPR email address:
info@andalsurexcursiones.com

Responsible:
Naturanda Environmental Tourism S.L.