Privacy Policy

1. Data controller

Exploideo is the data controller responsible for processing users' personal data.

Contact email: info@exploideo.com

If in the future we appoint a Data Protection Officer or enable a specific privacy contact channel, we will update this policy accordingly.

2. Data we collect

• Identification and profile data: name, email, username, profile image, language, and any other information you choose to complete in your account.
• Account data: login credentials, user role, basic settings and preferences related to the use of the platform.
• Booking data: dates, number of participants, reserved experience, booking status, billing information and communications related to the management of the reservation.
• Communication data: messages sent to support or to other users within the features enabled on the platform.
• Data on experiences published by guides: location, city, island, region, descriptions, images, prices, availability, and other information associated with the experience.
• Geographic coordinates automatically derived from the textual location provided to improve search and navigation within the platform.
• User device geolocation data when the user voluntarily uses features such as 'Near me' and grants permission through their browser.
• Basic technical, security, and operational data needed to run the platform, prevent abuse, and diagnose incidents.

3. Purpose of processing

• Manage your account, authentication, and profile within the platform.
• Allow guides to publish, edit, and manage experiences.
• Process bookings, changes, cancellations, payments, billing, and service-related communications.
• Enable communication between travelers and guides when the feature is available.
• Show nearby or relevant experiences based on the location or area selected by the user.
• Automatically resolve geographic coordinates from textual locations to improve experience discovery and features such as proximity sorting.
• Handle requests, incidents, technical support, and complaints.
• Improve the platform's operation, security, reliability, and user experience.
• Comply with applicable legal, accounting, tax, or security obligations.

4. Legal basis

We process your personal data when necessary for the performance of the contractual or pre-contractual relationship with you, for compliance with applicable legal obligations, on the basis of your consent where required, and in certain cases on the basis of our legitimate interest in keeping the platform secure, operational, and properly managed.

In the case of geolocation features such as 'Near me', device location is used only when the user chooses to enable it and grants permission in their browser.

When processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

5. Recipients and access to data

We do not sell your personal data to third parties.

Your data may be disclosed or made accessible, as applicable, to:

• Guides or travelers involved in a booking, to the extent necessary to manage the booked experience.
• Technology providers acting on behalf of Exploideo, such as hosting, email, infrastructure, technical support, or tools required to operate the platform.
• Payment, billing, or fraud-prevention providers when necessary to process financial transactions or comply with legal obligations.
• Technical location or geocoding providers when necessary to convert textual locations into coordinates or enable proximity search features.
• Public administrations, judges, courts, or competent authorities where required by law.

6. International data transfers

As a general rule, we seek to use providers located in the European Economic Area or providers that offer appropriate safeguards under applicable data protection laws.

However, some technical providers used to operate the platform may be located outside the European Economic Area or involve international access to data. In such cases, we will implement the appropriate safeguards required by applicable regulations.

If you would like more information about the safeguards applied in each case, you can request it by writing to info@exploideo.com.

7. Data retention

We will retain your personal data while your account remains active or as long as it is necessary to provide the service, manage bookings, handle incidents, or comply with legal obligations.

Booking, payment, billing, and support data may be retained for the periods required by tax, accounting, or consumer regulations, or as needed to address potential liabilities.

Location data associated with guides' experiences will be retained while those experiences remain active or for as long as necessary for platform operations.

The location used for features such as 'Near me' is used to show nearby results during user interaction and, unless expressly stated otherwise, is not stored permanently in our systems.

8. Derechos del usuario

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request the deletion of your data where applicable.
• Request restriction of processing.
• Object to processing in the cases provided by law.
• Request data portability where applicable.
• Withdraw your consent at any time when processing is based on it.

Likewise, if you consider that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the competent supervisory authority, in Spain the Spanish Data Protection Agency (AEPD).

9. Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or improper disclosure.

However, no system is completely invulnerable, so we cannot guarantee absolute security in all cases.

10. Contact

For any questions related to privacy or data protection: