PRIVACY POLICY

Last updated: 24/11/2025

This Privacy Policy describes how Spanish While Traveling collects, processes and protects personal data through www.spanishwhiletraveling.com, in accordance with:

  • Regulation (EU) 2016/679 (GDPR)

  • Ley Orgánica 3/2018 (LOPDGDD)

  • And all other applicable legislation on data protection

By using our Website, you acknowledge that you have read and understood this Privacy Policy.

1. Identity of the Data Controller

Spanish While Traveling
Website: https://www.spanishwhiletraveling.com
Email: info@spanishwhiletraveling.com

Spanish While Traveling is responsible for processing your personal data.

2. What Personal Data We Collect

Through our Website, we may collect the following information:

2.1. Data you provide directly

  • Name and surname

  • Email address

  • Phone number

  • Messages sent via contact forms

  • Booking or consultation details (if applicable)

  • Newsletter subscription data

  • Data provided during purchases or service bookings

2.2. Data collected automatically

  • IP address

  • Device information

  • Browser type

  • Pages visited

  • Navigation behavior

  • Cookies and trackers (see Cookie Policy)

2.3. Data provided via third-party services

  • Google Analytics (anonymous traffic data)

  • OptinMonster (interaction with pop-ups and forms)

  • Social media (Instagram, Facebook, etc. if interacting with embedded content)

No special-category data is collected.

3. Purpose of Processing Personal Data

Personal data collected through the Website is used for the following purposes:

3.1. Service management

  • Managing your access to the Website

  • Handling questions, requests or incidents you submit

  • Providing information about our services, travel programs or activities

  • Managing bookings, inquiries or purchases

  • Providing customer support

3.2. Communication

We may contact you by email or message for:

  • Responding to your questions

  • Providing essential service information

  • Informing you about updates, policies, or technical notices

These communications are necessary and cannot be opted out of if you are using our services.

3.3. Marketing communications (optional)

With your explicit consent, we may send:

  • Newsletters

  • Promotions

  • Offers

  • Surveys

  • Updates about Spanish While Traveling

You may unsubscribe at any time via a link in the email or by contacting us.

3.4. Improving the Website

Using analytical data (e.g., Google Analytics 4) to:

  • Improve navigation

  • Enhance user experience

  • Detect errors and optimize performance

3.5. Recruitment

If you submit a CV or job application, we will use your data for recruitment or collaboration processes.

We will not process your data for purposes other than those described unless required by law or you expressly authorize it.

4. Legal Basis for Processing

Spanish While Traveling processes your data based on:

4.1. Consent (Art. 6.1.a GDPR)

Given:

  • When you submit a form

  • When you subscribe to the newsletter

  • When you accept cookies

  • When you request information

  • When you participate in marketing actions
    You may withdraw your consent at any time.

4.2. Contractual necessity (Art. 6.1.b GDPR)

When the processing is required to:

  • Provide a requested service

  • Manage a booking or travel advisory program

  • Respond to service-related inquiries

4.3. Legitimate interest (Art. 6.1.f GDPR)

For:

  • Improving our services

  • Maintaining Website security

  • Responding to complaints or claims

  • Sending information about similar services already contracted

Legitimate interests never override your rights.

5. Data Retention Periods

We retain your data only for the time strictly necessary:

  • Contact requests: up to 12 months

  • Customer data: as long as the service relationship continues

  • Billing data: 5–6 years (legal requirement)

  • Marketing data: until you withdraw consent

  • Website analytics data: according to Google’s retention settings

  • Recruitment data: up to 2 years

If you unsubscribe from communications, we will stop sending them but may retain the minimum necessary data to comply with legal obligations.

6. Data Recipients

We do not sell personal data.

We only share data with:

  • Website hosting providers

  • Email service providers

  • Google Analytics

  • OptinMonster (marketing pop-ups/forms)

  • Payment processors (if applicable)

  • External service providers necessary to deliver functionalities

  • Authorities when legally required

All providers operate under GDPR-compliant contracts (Data Processing Agreements).

7. International Data Transfers

Some of our service providers (e.g., Google, Meta/Instagram, OptinMonster) may store data outside the European Economic Area.

In such cases, transfers are safeguarded through:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions

  • Additional contractual and technical protections

We only use providers that ensure an adequate level of data protection as required by GDPR.

8. User Rights

You may exercise the following rights at any time:

Right of Access

Obtain information about your personal data being processed.

Right of Rectification

Correct inaccurate or incomplete data.

Right of Erasure (“Right to be Forgotten”)

Request deletion of your data when it is no longer necessary.

Right to Object

Object to the processing of your data (especially for marketing).

Right to Restriction

Request temporary suspension of processing.

Right to Data Portability

Receive your data in a structured, commonly used and machine-readable format.

Right to Withdraw Consent

At any time and without affecting prior lawful processing.

Right Not to Be Subject to Automated Decisions

We do not create automated profiles that produce legal effects.

How to Exercise Your Rights

You may contact us at:

📧 info@spanishwhiletraveling.com

Include:

  • Name and surname

  • Email address used on the Website

  • Right you wish to exercise

We may request ID verification.

Complaints

You may also file a complaint with the Spanish Data Protection Authority (AEPD):
https://www.aepd.es

9. Automatically Collected Data

Our servers automatically collect:

  • IP address

  • Device identifier

  • Browser type

  • Operating system

  • Pages viewed

  • Time spent on the Website

This is necessary for Website security and analytics.

10. Security Measures

Spanish While Traveling applies:

  • SSL encryption

  • Server and hosting security

  • Access control measures

  • Internal policies for confidentiality

  • Continuous monitoring

  • Technical and organizational measures

Our goal is to prevent:

  • Unauthorized access

  • Accidental loss

  • Misuse

  • Data alteration

11. Social Media Privacy Policy

When interacting with our profiles on:

  • Instagram

  • Facebook

  • Other social platforms

The platform acts as a separate data controller.

By interacting with our social media accounts, you consent to the processing of publicly accessible data associated with your profile.

Each social network processes data according to its own privacy policy.

12. Children’s Data

Access to our Website and services is not intended for minors under 14 years old.

We do not knowingly collect data from minors.
If a minor has submitted data, please contact us so we can delete it.

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically.
If changes are significant, we will notify you via email or a notice on the Website.