Privacy policy
Touriny privacy policy for the website, forms, waitlist, and shared tour pages.
Document for legal review
Last updated: 8 July 2026.
This page describes the data processing detected on the Touriny website. Legal counsel should review it before it is published as the final version.
1. Controller
The controller is Touriny. The full legal name, postal address, privacy contact and, if applicable, data protection officer must be confirmed before publication.
Current operational contact: customerservice@touriny.com.
2. Scope
This policy applies to the Touriny website, home pages, public destination pages, shared tour pages, contact form, and app availability waitlist.
It does not replace a separate mobile app privacy policy if the app performs additional data processing.
3. Data we process
- Contact form: name, surname, email address, and message.
- Waitlist: email, language, source page, selected store, and signup date.
- Technical and security data: IP, browser, device, referrer, logs, and reCAPTCHA signals.
- Advertising: cookies, identifiers, impressions, and interactions processed by Google AdSense.
- Content: language, tour identifiers, and requests to the Touriny content API.
4. Connected and inactive services
The site loads or may send data to Google reCAPTCHA, Google AdSense, Google Fonts, Cloudflare/cdnjs, OVH SMTP infrastructure, Apple App Store, Google Play, and the Touriny content API.
Google Tag Manager, Google Ad Manager/GPT, and Matomo are not described as active processing unless configured in production.
5. International transfers
Some providers may process data outside the European Economic Area. Touriny must confirm the applicable safeguards, such as adequacy decisions, standard contractual clauses, or data processing agreements.
6. Retention
We keep data only for as long as needed for each purpose. Final periods for contact messages, waitlist emails, logs, and support records must be confirmed.
7. User rights
You may request access, rectification, erasure, objection, restriction, portability, and withdrawal of consent where applicable.
You may also lodge a complaint with the Spanish Data Protection Agency. To exercise rights, write to customerservice@touriny.com; the final privacy channel must be confirmed.
8. Cookies and similar technologies
The site may use cookies, local storage, pixels, scripts, and logs to remember preferences, protect forms, load resources, display advertising, and measure performance.
Non-essential cookies, especially analytics or advertising cookies, must depend on consent where the law requires it.
9. Children, security, and changes
The website is not directed at children who cannot validly consent to online services. Touriny applies reasonable technical and organizational measures and may update this policy when the site, providers, or data practices change.
Processing
Purpose
Expected legal basis
Recipients
Retention
Contact
Answer requests and manage communications.
Consent or legitimate interest, pending legal review.
Touriny and OVH/email.
Specific period pending confirmation.
Waitlist
Notify users about app availability and related launch news.
Consent.
Touriny; final storage pending.
Until notice, withdrawal of consent, or defined period.
reCAPTCHA
Prevent spam, fraud, and automated abuse.
Legitimate interest or consent, pending legal review.
Google.
According to Google terms and applicable configuration.
AdSense
Show ads, prevent fraud, and measure ad performance.
Consent where required.
According to Google policies and user settings.
Fonts, scripts, and content API
Load resources and display Touriny content.
Service operation and legitimate interest, pending legal review.
Google, Cloudflare/cdnjs, and Touriny.
According to providers and confirmed technical logs.
- Controller legal name, address, and privacy contact.
- Whether a DPO or equivalent contact is required.
- Exact retention periods for contact, logs, support, and waitlist data.
- AdSense configuration by region and ad type.
- Whether Google Fonts and cdnjs remain third-party hosted or are served by Touriny.
- Final storage location for waitlist emails and consent proof.
- International transfer safeguards and vendor agreements.
- Link to the mobile app privacy policy if app processing differs.
