1. Data controller
- Holística Nature Ecotourism, Training and Wellbeing, S.L. (Holística Nature)
- Tax Identification Number (CIF): B21607908
- Registered office: Calle Teodoro Domínguez, 24, 21291 Galaroza (Huelva)
- Email: info@holisticanature.com
- Telephone: (+34) 636 78 11 67
2. What data do we process, for what purpose and on what legal basis?
Purchases and registrations. Name, contact details, billing details and, for physical products, delivery address. We use this information to process your order or registration, organise the event, communicate with you about it and issue an invoice. Legal basis: performance of the contract (Article 6(1)(b) of the GDPR) and compliance with legal, tax and accounting obligations (Article 6(1)(c)).
Enquiries. The data you send us via the contact form, by email or via WhatsApp, so that we can reply to you. Legal basis: your consent when you contact us and, if the enquiry is made prior to entering into a contract, the implementation of pre-contractual measures.
Newsletter. Your email address and, if you provide it, your name, so that we can send you news, information about events and the «Seasonal Newsletter». Legal basis: your consent (Art. 6.1.a). You can unsubscribe at any time via the link included in each email.
Photographs and videos of the activities. We will only publish images in which you are recognisably depicted if you have given us your consent when you registered. Legal basis: your consent, which you may withdraw at any time.
Reviews. Following a purchase, Trustpilot may send you an invitation to review your experience. Legal basis: legitimate interest in finding out the views of those who choose us. You can object by writing to us or via the invitation itself.
Navigation and measurement. With your consent, we use browsing data to analyse website usage and measure the effectiveness of our campaigns. We set this out in the Cookie Policy.
3. Health data
We do not ask for any health information. To take part in an activity, we simply ask you to confirm that you are fit enough to do so, taking into account the level of difficulty. If you choose to tell us about any circumstances relevant to your safety during an activity, we will use this information solely for that purpose and will not retain it once the activity has finished.
4. How long we retain the data
- Order and invoicing data: 6 years, in accordance with tax and commercial regulations.
- Data on participation in activities: up to 2 years after the last activity.
- Enquiries: the time required to respond to them and, at the latest, one year thereafter.
- Newsletter: until you unsubscribe.
- Image licence: valid until you revoke it.
5. Who can access your data
We do not sell or pass on your data to third parties. Access to your data is restricted to service providers who have entered into a data processing agreement with us, and to public authorities where required by law:
- IONOS: web hosting and email.
- Stripe, PayPal and seQura: payment management. seQura assesses requests for flexible payment in accordance with its own privacy policy.
- MailerLite: newsletter dispatch.
- Google: calendar of events (Google Calendar), online sessions (Google Meet), web analytics, anti-spam protection for forms (reCAPTCHA), map and website backups.
- Goal: tracking of Facebook and Instagram campaigns, only if you accept the relevant cookies, and messaging via WhatsApp if you contact us through that channel.
- Trustpilot: invitations to share your feedback on your experience.
6. International transfers
Some of these providers, such as Google, Meta, Stripe and PayPal, may process data outside the European Economic Area. They do so in accordance with the safeguards required by the GDPR: the EU-US Privacy Shield, where the provider is a signatory, or the European Commission’s standard contractual clauses.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to info@holisticanature.com. We will only ask you to prove your identity if we have reasonable doubts about it. We will reply within one month at the latest.
If you feel that we have not dealt with your request satisfactorily, you can lodge a complaint with the Spanish Data Protection Agency.
8. Minors
Children under the age of 14 must have the consent of their father, mother or guardian before providing us with their personal data. The participation of minors in activities is governed by the Policy on the participation of minors.
9. Security
We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration.
10. Updates
This policy was updated on 29 September 2026. Should there be any significant changes, we will indicate this on this page.