Privacy Policy

At Ad Astra La Palma we take our clients’ privacy very seriously. This policy clearly explains what data we collect, how we use it, and what rights you have over it.

If you have any questions, please write to us at contacto@adastralapalma.com with the subject “Data Protection”.

01 Data controller

Company: Ad Astra La Palma Active Tourism Register (Canary Islands): TA-5-0009941.16 Address: La Palma, Canary Islands, Spain Email: contacto@adastralapalma.com

02 What data we collect

We collect information when you:

Make a booking: Name, contact details and payment information needed to manage your activity.
Contact us: The content of your message and any details you provide so we can reply.
Participate in a group activity: We may take group photographs for promotional purposes, always with your prior consent.
Browse the website: Technical usage data (cookies). See our cookie policy for more information.

We do not intentionally collect data from children under 14 or particularly sensitive data (health, ideology, etc.) without explicit consent.

03 How we use your data

To manage your booking and confirm your participation in the activity.
To process payment and issue the relevant documentation.
To handle your enquiries and provide support before, during and after the activity.
To improve our services through aggregated, anonymous analysis.
To comply with legal obligations applicable to us as an active tourism company.

04 Legal basis for processing

We process your data under different legal bases depending on the situation:

Contract performance: When you make a booking, we need your data to provide the service.
Legal obligation: To comply with applicable tax, tourism and safety regulations.
Consent: For the use of group photographs or marketing communications, only if you expressly authorise it.
Legitimate interest: To improve our services using anonymous, aggregated data.

We do not sell or transfer your data to third parties for commercial purposes. We only share it when strictly necessary:

Service providers that help us operate (payment processors, booking platforms such as TuriTop), acting as data processors under contract.
Public authorities when required by law (tax authorities, law enforcement, etc.).
Emergency services if necessary to protect your safety or that of others.

06 How long we keep your data

We keep your data for as long as necessary to provide the service and, once the relationship has ended, for one additional year to handle any potential claims. Accounting and tax data is kept for 5 years in accordance with current legislation.

After these periods, data is securely deleted or anonymised.

07 Your rights

As a data subject, you have the following rights under the GDPR:

Access: Find out what data we hold about you.
Rectification: Correct inaccurate or incomplete data.
Erasure: Request that we delete your data (right to be forgotten).
Portability: Receive your data in a reusable format.
Restriction: Ask us to suspend processing in certain cases.
Objection: Object to certain uses of your data.

To exercise any of these rights, write to us at contacto@adastralapalma.com with the subject “Data Protection” and tell us which right you wish to exercise. We will respond within one month.

If you feel we have not handled your request correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

08 Security

We apply technical and organisational measures to protect your data against unauthorised access, loss or alteration. However, no internet transmission can be guaranteed completely secure. We recommend not sharing sensitive information through unprotected channels.

09 Changes to this policy

We may update this policy from time to time to reflect legal changes or changes to our services. The date of the last update always appears at the top of the page. We recommend reviewing it periodically.