Privacy Policy

In compliance with the provisions of Regulation (EU) 2016/679 General Data Protection Regulation (GDPR) and the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we hereby inform you of the following:

1. Data controller

Identity: Gemma Santiago Martínez (hereinafter, "the Owner").
Tax ID (NIF): 35774396N.
Address: C/ Margarita de Navarra 22, 31013, Ártica (Berrioplano), Navarra, Spain.
Phone: +34 699 357 881.
Contact email: info@turisonroad.com.

2. Purpose of data processing

We inform you that the data you provide will be processed for the following purposes:

• Managing the services provided through this Internet portal.
• Keeping you informed about TurisOnRoad activities, products and services.
• Development, performance and execution of the service provision contract and queries related to the services requested through the website.
• Customer service.
• Managing the relationship between the parties, registration and maintenance of the subscription on the website as a User.

Likewise, in accordance with the provisions of the GDPR, a record of processing activities is maintained, specifying, according to its purposes, the processing activities carried out and the other circumstances established in the GDPR.

Personal information may not be used for purposes other than those related to the contracted services or products purchased. No automated decisions with legal effects based on profiling will be made.

3. Legal basis for data processing

The legal basis for processing your data is based on:

• The consent given by the User by accepting this Policy and ticking the corresponding box.
• The legitimate interest to attend to requests or queries made through the different contact channels.
• The existence of a contractual or pre-contractual relationship when the User has provided their personal data in this framework, with their processing being necessary for the maintenance of said relationship.
• The User's consent at the time of registering as a registered user.
• Legal obligations applicable to the Owner that require the processing of personal data, for example, in tax matters.

The User may, at any time, revoke their consent for the processing of their personal data. In no case shall the withdrawal of these consents condition the provision of the service and/or the execution of contracts with the Owner.

4. Personal data processed and source

The personal data we process is of an identifying nature and has been provided by the User themselves by completing the contact form, sending emails, registering as a user or using the functionalities offered on the website.

The use of the contact sections, the completion of forms and/or the use of the functionalities offered on the portal is voluntary. However, the completion of certain fields of the form is necessary to properly attend to and manage your request, so the User's refusal to provide the requested information will prevent the Owner from properly attending to and managing it.

The User guarantees that the data provided is truthful, accurate and complete. The data will be cancelled, deleted or blocked when it is inaccurate, incomplete or has ceased to be necessary or relevant to its purpose in accordance with current legislation. If the personal data provided is from a third party, the User guarantees that they have informed them of this Privacy Policy and obtained their authorisation to provide their data for the aforementioned purposes.

5. Protection of minors' data

According to the provisions of the GDPR and LOPDGDD, only those over 14 years of age may give their consent for the processing of their personal data lawfully. Only persons over 14 years of age may provide personal data on this website. In the case of minors under 14 years of age, the consent of their parents or guardians will be a mandatory condition in order to process their personal data.

6. Personal data retention periods

The personal data provided by the User will be kept while they remain registered with the service, while the business relationship is maintained, while the User does not request its deletion, or for the legally established period. Likewise, it may be kept when necessary for compliance with a legal obligation or for the formulation, exercise and defence of claims.

If the User withdraws their consent or exercises the rights of opposition or deletion, their data will be kept blocked at the disposal of the Administration of Justice for the periods legally established to address possible liabilities arising from the processing of personal data.

7. Secrecy and security of personal data

The Owner undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected, in order to guarantee the security of personal data and prevent the destruction, loss or accidental or unlawful alteration of personal data transmitted, stored or otherwise processed, or unauthorised communication or access to said data.

Personal data will be treated as confidential by the Owner, who undertakes to inform and guarantee, through a legal or contractual obligation, that said confidentiality is respected by their employees, associates and any person to whom they make the information accessible.

8. Disclosures and recipients of personal data

Your personal data will be communicated in the cases legally foreseen, for example, to Public Administrations to comply with obligations directly enforceable on the Owner or when necessary to comply with the processing purposes indicated above, or to provide services strictly necessary for the development of the activity (data processors such as hosting providers, email providers or web analytics tools).

Where applicable, some of these providers may be located in countries outside the European Economic Area. International transfers that may be carried out will have the appropriate guarantees provided for in the GDPR (adequacy decision, standard contractual clauses or Data Privacy Framework).

9. User rights

The User has the right to obtain confirmation as to whether we are processing personal data concerning them and to exercise the following rights:

You may exercise these rights before the Owner by written communication accompanied by a photocopy of your ID to prove your identity, with the reference "GDPR Rights", addressed to the postal address C/ Margarita de Navarra 22, 31013, Ártica (Berrioplano), Navarra, Spain, or to the email address info@turisonroad.com.

Likewise, we inform you that you can address any claim regarding the protection of personal data to the Spanish Data Protection Agency (www.aepd.es), the supervisory authority in Spain.

Last updated: 18/09/2026