Legal information
Privacy policy
What we collect when you book or write to us, what we use it for and how you can control it.
Note for the site owner: this text is complete and correctly structured, but the company's identifying details (registered name, tax number and registered address) are still missing. Fill them in before publishing and, since you handle data about minors on school trips, have an adviser review it.
1. Who the controller is
- Owner: Valle del Tera Experiences S.L. (⚠️ confirm exact registered name)
- Tax number (NIF): ⚠️ to be completed
- Address: Calle Iglesia, 9 · 49692 Santibáñez de Tera (Zamora), Spain
- Phone: +34 617 035 373
- Email: g.e.guaridadellobo@hotmail.com
- Website: guaridadellobo.com
2. What we collect, and where from
We only process what you give us yourself. This website has no database and stores nothing on a server: the booking and contact forms simply compose a message from what you have typed and open it in WhatsApp or your email app, so that you send it.
- Booking form: full name, phone, activity, date, slot, number of people and any notes you add.
- Contact form: name, email address, subject and message.
- Group and school bookings: contact details of the school and of the person responsible for the group.
- Calls and WhatsApp: the number you write from and the content of the conversation.
We do not collect special categories of data. If you tell us about an allergy, a medical condition or anything else relevant to the safety of the activity, we use it solely to run the activity safely and delete it afterwards.
3. Why we use it, and on what legal basis
- Managing your booking and running the activity — basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
- Answering your enquiries — basis: your consent when you write to us (Art. 6(1)(a) GDPR).
- Meeting tax and accounting obligations for paid bookings — basis: legal obligation (Art. 6(1)(c) GDPR).
- Keeping you safe during the activity — basis: legitimate interest and, where relevant, vital interests (Art. 6(1)(f) and 6(1)(d) GDPR).
We send no advertising or newsletters, and we do not profile you or make automated decisions about you.
4. How long we keep it
- Enquiries that do not become bookings: up to one year from the last contact.
- Completed bookings: for the duration of the relationship and then the statutory limitation period for liability (up to 5 years).
- Payment receipts and invoices: 6 years, as required by the Spanish Commercial Code.
5. Who we share it with
We do not sell or trade your data. It reaches third parties only in these cases:
- WhatsApp (Meta Platforms Ireland Ltd.), if you choose that channel to send us your request. It is governed by their own terms and by Meta's privacy policy.
- Our email provider, in order to receive and store messages.
- Our bank, to check payments made by Bizum or bank transfer.
- The tax authorities, where legally required.
Some of these providers may process data outside the European Economic Area, covered by the standard contractual clauses approved by the European Commission.
6. Your rights
You may at any time request access to your data, its rectification or erasure, the restriction of or objection to processing, and portability. You may also withdraw your consent where processing is based on it, without affecting anything done before.
To exercise them, write to g.e.guaridadellobo@hotmail.com stating which right you wish to exercise and attaching a copy of a document proving your identity. We reply within one month at the latest.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid).
7. Minors
Activities involving minors are always booked through a parent or legal guardian, or through the school responsible for the group. We do not collect data directly from children under 14 through this website.
8. Photographs and video
We take photographs during some outings. If you appear in one and would rather we did not use it, tell us at the time or write to us afterwards and we will remove it. For school groups we always ask the school for prior authorisation.
9. Security
The site is served over an encrypted connection (HTTPS). As it stores no data, the exposure is minimal: what you send us stays only in the channel you chose (WhatsApp or email) and on our own password-protected devices.
10. Changes to this policy
If we change how we handle data, we will update this text and the date below. We recommend checking it from time to time.
Last updated: 17 August 2026.