Privacy policy

Last updated: 2 September 2026

Controller

Angel, owner of Aventura y Turismo 4x4, is the data controller. You can contact us at angelgp35@gmail.com.

Data we process

When you contact us we may receive your name, email, phone number and enquiry. Comments require a name, email and message. A commenter’s email is never published. Administration uses access and security data.

Purposes and legal basis

We use data to answer enquiries, moderate comments, protect the website and keep it operational. The legal basis is your consent when submitting a form or comment, pre-contractual steps when requesting trip information and our legitimate interest in protecting the service.

Recipients and providers

We use providers needed to operate the service, including Vercel for hosting and anonymised analytics, Supabase for authentication, database and storage, Google Analytics only if accepted, OpenAI to translate editorial content and WhatsApp when you choose to open a conversation. Commenters’ personal data is not sent to OpenAI.

Retention

Enquiries are retained as needed to respond and meet legal responsibilities. Comments remain while part of an article or until deletion is requested. Items in the administration trash can be restored for 30 days. Analytics preferences remain until changed or browser data is cleared.

Your rights

You may request access, correction, deletion, objection, restriction or portability by writing to angelgp35@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency.

Comments

All comments are moderated before publication. We may hide or remove content that is offensive, unlawful, misleading, irrelevant or spam. We publish the submitted name and approved comment, never the email address.

Security and changes

We apply access controls, row-level permissions and encrypted communications. This policy may be updated when website features or providers change.