Effective date: 20 October 2025

This Privacy Policy explains how Ride Southern Spain (“we”, “us”, “our”) collects and uses your personal data when you contact us, make a booking, or visit our website and social channels. We’re based in Lanjarón, Granada (Spain) and comply with the EU GDPR and Spanish data protection law.

Data Controller - Ride Southern Spain
Calle Los Peñoncillos 110, 18420 Lanjarón, Granada, Spain
Email: info@ridesouthernspain.com · Phone/WhatsApp: +34 621 66 24 58

What data we collect

• Contact & booking details: name, email, phone/WhatsApp, address (optional), group size, dates, rider levels, room preferences, diet notes.
• Travel logistics: flight times, airport, transfer windows.
• Riding & safety info: emergency contact, medical/allergy notes you choose to share (to plan safely), insurance confirmation, signed waiver status (by payment of booking).
• Payments: amount, currency, invoice and payment status. Card details are processed by our payment provider—never stored on our servers.
• Communications: emails, WhatsApp/Instagram messages, enquiry forms, and call notes.
• Media: informal photos/video taken during trips.
• Website/cookies: device info, pages viewed, and analytics.

Why we use your data (lawful bases)

• To answer enquiries and manage bookings (performance of a contract or steps prior to a contract).
• To plan guiding, transfers and accommodation safely, including risk management (legitimate interests; vital interests for safety).
• To take payment and send invoices/receipts (performance of a contract).
• To send trip information and important updates (performance of a contract/legitimate interests).
• To improve our services and website (legitimate interests; consent where required for cookies).
• To send optional marketing (consent; you can opt out any time).
• To comply with the law (e.g., accounting, insurance, incident logs).

Who we share data with

We share only what’s necessary with trusted partners:

• Payment processors (card/bank payments).
• Transfer and logistics partners (airport pickups, vehicle hire).
• Accommodation and maintenance providers (only if needed for your stay).
• Insurance/brokers and legal advisors.
• Messaging & social platforms if you contact us there (WhatsApp, Instagram—your data also follows their privacy terms).
• We don’t sell your data.

International transfers

Our tools (email, booking, payments, analytics) may store data in or route data through the EEA/UK/US. Where data leaves the EEA, we use adequate safeguards (e.g., EU adequacy decisions or Standard Contractual Clauses).

How long we keep data

• Enquiries (no booking): up to 12 months.
• Bookings & invoices: typically 6–7 years (tax/legal).
• Waivers/incident reports: up to 5 years (insurance/legal).
• Marketing consent records: until you opt out or we remove inactive contacts.
• Cookies/analytics: per cookie lifetime (see banner/settings).

Your GDPR rights

You can access, correct, delete, restrict or object to processing of your data, and download a copy (portability). Where we rely on consent, you may withdraw it at any time. To exercise rights, email info@ridesouthernspain.com. You also have the right to complain to the Spanish Data Protection Agency (AEPD).

Cookies & tracking

• We use essential cookies for site functionality and analytics cookies to understand traffic and improve the site.
• You can manage preferences via our cookie banner or your browser settings.
• Disabling certain cookies may reduce site functionality.

Emails, WhatsApp & Instagram

If you contact us via email, WhatsApp or Instagram, your messages are processed by those platforms according to their own terms. We keep relevant conversation history in our booking records to provide the service and for audit/quality purposes.

Media & marketing (photos/videos)

• Guides may capture informal photos and short clips during rides for group sharing and occasionally for our social media/website.
• Tell us before or during your stay if you don’t want to appear in marketing content—we’ll respect this and do our best to exclude or blur you.
• Group sharing (e.g., WhatsApp album) is part of the trip experience; avoid reposting images of others without consent.

Children

Our holidays are designed for adults. Under-18s may join only with a parent/guardian, and their data is handled with extra care and parental consent.

Security

We use reasonable technical and organisational measures (access controls, encrypted connections, least-privilege accounts, regular updates) to protect data. No system is 100% secure; we maintain an incident response process and will notify where legally required.

Links to other sites

Our site and emails may include links to external websites (e.g., airlines, tourism, payment pages). We’re not responsible for their content or privacy practices.

Changes to this policy

We may update this Privacy Policy. We’ll post the latest version on our website and adjust the effective date above.

Contact

Questions about privacy or your data?
Ride Southern Spain · Calle Los Peñoncillos 110, 18420 Lanjarón, Granada, Spain
Email: info@ridesouthernspain.com · Phone/WhatsApp: +34 621 66 24 58

Quick summary

• We use your data to answer you, run your booking and keep rides safe.
• We don’t sell your data. We use reputable providers for payments, email, logistics and analytics.
• You can opt out of marketing and ask us to delete or send you your data.
• Tell us if you don’t want to appear in photos.
• For any privacy request, email info@ridesouthernspain.com.