Privacy Policy (GDPR)

A) Data you provide to us

• Name
• Phone number / WhatsApp
• Email address (optional)
• Preferred date/time
• Number of participants
• Selected activity (quad/buggy/bike/e-bike, etc.)
• Message content (e.g., pickup area, special requests, experience level)

B) Technical data

• IP address (may be anonymized/shortened where possible)
• Device and browser type
• Approximate location (city/region, derived from IP)
• Pages visited, interaction events (if analytics enabled)
• Cookie identifiers (see Cookie Policy)

C) Payment data (if payments are enabled)

• payment status (successful/failed/refunded)
• transaction reference ID
• amount/currency
• time/date of payment

We use personal data for:

• handling inquiries and booking requests
• confirming availability and sending booking details
• customer support, rescheduling, refunds (where applicable)
• improving our services and website (analytics, aggregated)
• preventing fraud and protecting security
• legal/accounting compliance (where required)
• marketing communications only if you opt in (where applicable)

We process personal data under the following legal bases:

• Contract / pre-contract steps: to handle your request and arrange your booking.
• Legitimate interests: service operations, customer support, website security, basic analytics (where lawful).
• Consent: optional cookies/analytics where required; marketing emails/messages where applicable.
• Legal obligation: compliance with tax/accounting rules or responding to lawful requests.

We share personal data only as necessary for the purposes above, such as with:

• Tour operators/instructors to confirm and deliver the activity (e.g., schedule, meeting point, participant info relevant for safety/eligibility).
• Payment providers to process payments and refunds (if used).
• Service providers that help operate our website and communications (hosting, email tools, CRM), acting as data processors under appropriate agreements.

We do not sell personal data.

If any service providers are located outside the EEA, we use appropriate safeguards for transfers where required (e.g., Standard Contractual Clauses), and only when necessary.

We keep personal data only as long as necessary:

• booking/inquiry records: for service delivery, issue resolution, and legal requirements
• communications (email/WhatsApp): as long as needed for support and operations
• payment references: as required for accounting and dispute handling
• analytics data: according to analytics tool settings

You may have the right to:

• access your personal data
• correct inaccurate data
• request deletion (where applicable)
• restrict processing
• object to processing based on legitimate interests
• request data portability (where applicable)
• withdraw consent at any time (for consent-based processing)

To exercise your rights, contact us at: nagap.esp@gmail.com. You also have the right to lodge a complaint with your local data protection authority (in Spain, AEPD).

We use cookies and similar technologies as described in our Cookie Policy. Optional cookies are used only with consent where required.

We use reasonable technical and organizational measures to protect your data (e.g., HTTPS, access controls, limited internal access). No method of transmission or storage is 100% secure, but we work to reduce risk.

Our excursions are generally intended for adults. Minors may participate only under the conditions of the specific activity and typically with a parent/guardian. We do not knowingly collect personal data from children without appropriate consent.

We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated effective date.

For privacy-related questions or requests:

• Email: nagap.esp@gmail.com
• Address: Calle Galicia 40, 38660 Adeje, Tenerife, Spain
• WhatsApp/Phone: +34 613985750