PRIVACY POLICY – IPALAN

Data Controller Audrey Favard Labas NIE: X9406344B Address: Lomo de los Cardos, 38812 Alajeró, La Gomera (Spain) Contact email: info@ipalan.com Website: www.ipalan.com

1. Purpose of Data Processing

1.1 Booking and activity management

I process your data to manage enquiries, bookings, payments, invoicing, and communication related to hiking and ecotourism activities.

Data processed: name, surname, email, phone number, language, country, billing information. Legal basis: performance of a contract.

1.2 Safety during the activity (voluntary health data)

You may provide information about allergies, injuries, or physical limitations to ensure your safety during the activity.

Legal basis: explicit consent. Retention: deleted once the activity is completed.

1.3 Communication with clients

I send information related to your booking, schedule changes, cancellations, or important notices.

Legal basis: legitimate interest.

1.4 Website comments

When you leave a comment on the website, the data shown in the form, your IP address, and browser information are collected to help detect spam.

Legal basis: consent.

1.5 Contact forms

Data submitted through the contact form is used exclusively to respond to your enquiry.

2. Data Recipients

I only share data when strictly necessary to provide the service:

• Accounting/administrative service (legal obligations)

• Hotels and accommodations when managing bookings for your activity

• Transport companies (ferry, taxi, bus) when required for the activity

• Hosting provider (secure storage of the website)

All of them act as data processors and comply with the GDPR.

3. Data Retention

• Billing data: 5 years (legal obligation).

• Contact data: until you request deletion.

• Health data: only during the activity.

• Website comments: stored indefinitely unless you request deletion.

4. User Rights

You may exercise your rights of:

• access

• rectification

• erasure

• objection

• restriction

• portability

By writing to: info@ipalan.com

You may also file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

5. Cookies

Information about cookies is available in the Cookies Policy.

6. Data Security

I apply appropriate technical and organisational measures:

• secure passwords

• restricted access

• backups

• protected devices

• hosting with servers in the EU or with adequate safeguards

7. External Links

The website may include links to social networks or third‑party sites. I am not responsible for their privacy policies; I recommend reviewing them.

8. Changes to This Policy

This policy may be updated to adapt to legal or operational changes. The current version will always be available on this page.

COOKIES POLICY – IPALAN

1. What are cookies?

Cookies are small files stored on your device when you browse this website. They allow the site to function properly, remember your preferences, and obtain usage statistics.

2. Types of cookies used on this website

2.1 Technical cookies (required)

These are necessary for the website to function:

• Maintain the session

• Save preferences

• Ensure site security

They do not require consent.

2.2 Analytics cookies – Google Analytics (require consent)

This website uses Google Analytics, a service provided by Google LLC, to obtain anonymous usage statistics.

These cookies are only activated if you accept them in the banner.

Purpose: analyse browsing behaviour to improve the website. Legal basis: your consent.

2.3 Third‑party cookies (optional)

Installed only if you interact with external content:

• Google Maps

• YouTube

• Social networks

3. Specific cookies used on this website

4. How to manage or disable cookies

You can accept or reject non‑essential cookies from the cookie banner.

You can also configure your browser:

• Chrome

• Firefox

• Safari

• Edge

To block or delete cookies at any time.

5. International transfers

Google LLC may process data in the United States. Google applies appropriate safeguards under the GDPR, including:

• Standard Contractual Clauses (SCC)

• Additional security measures

You can read Google’s privacy policy here: https://policies.google.com/privacy

6. Data Controller

Audrey Favard Labas NIE: X9406344B Address: Lomo de los Cardos, 38812 Alajeró, La Gomera Email: info@ipalan.com

7. Changes to This Policy

This policy may be updated to adapt to legal or technical changes. The current version will always be available on this page.