PRIVACY & COOKIES

Last updated: 11 November 2026

1. Who is responsible for your data

The data controller for this website is the site owner identified below. You can contact us about any privacy matter using the details below.

Owner (legal name)

Pending — to be completed by the site owner

Tax ID (NIF/CIF)

Pending — to be completed by the site owner

Registered address

Pending — to be completed by the site owner

Contact email

Pending — to be completed by the site owner

2. What data we collect and why

• Browsing the site. Our hosting and security providers process technical data (IP address, browser and device information, pages requested) to deliver and protect the website. Legal basis: our legitimate interest in running a secure service.
• Booking an experience. The booking calendar is provided by Bókun and only loads when you choose to check dates. Bókun processes the details you enter (name, email, phone, payment) to create and manage your reservation and send your confirmation. We receive the booking details needed to run the experience. We never collect payment card details on this website. Legal basis: performance of the contract you request.
• Signing in to comment. If you sign in with Google to join the conversation, we receive your name, email address and profile picture from Google. Your comments are published with your display name and stored in our content management system. Legal basis: providing the service you request.
• Comment moderation. To keep the community safe, the text of new comments may be checked automatically for offensive language, including by an AI moderation service (OpenAI). Legal basis: our legitimate interest in preventing abusive content.
• Analytics. Only if you accept analytics cookies, we use Google Analytics to understand how the site is used (pages visited, approximate location, device type). Legal basis: your consent, which you can withdraw at any time.
• Contacting us. If you email us, we use your details only to answer your request.

3. Who receives your data

We use trusted providers that process data on our behalf: Bókun (bookings), Cloudflare (hosting, content delivery and security), Railway and Cloudflare R2 (content management system and images), Google (sign-in and, with your consent, analytics) and OpenAI (comment moderation). Some of these providers are located outside the European Economic Area, mainly in the United States. In those cases transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. We do not sell your personal data.

4. How long we keep it

• Comments: until you ask us to delete them or they are removed by moderation.
• Sign-in session: until you sign out or the session expires.
• Booking data: for as long as needed to provide the experience and to meet our tax and accounting obligations.
• Analytics data: according to the retention period configured in Google Analytics (maximum 14 months).

5. Your rights

You can request access to your data, rectification, erasure, restriction of processing, data portability, or object to processing, and you can withdraw your consent at any time without affecting earlier processing. Use the contact email listed above. If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Cookies and similar technologies

We use a small number of cookies and browser storage items. Optional analytics cookies are only set after you click “Accept” in the cookie banner. You can change your choice at any time with the “Cookie settings” link in the footer.

You can also block or delete cookies in your browser settings. Blocking necessary cookies may prevent sign-in from working.

7. Changes to this policy

We may update this policy when our services or legal requirements change. The date at the top shows the latest version.