Privacy Policy

Last updated: September 28, 2026


Migueliyo Travel respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how information may be collected, used, stored and protected when you visit migueliyotravel.com (“Website”), contact us, submit information through the Website, or interact with the services and content available through it.
This Privacy Policy should be read together with our Cookie Policy and Terms of Service.


1. Who We Are

The Website migueliyotravel.com is operated under the Migueliyo Travel brand.
For questions regarding this Privacy Policy or the processing of your personal data, you can contact us at:
Email: hello@migueliyotravel.com
For the purposes of applicable data protection law, the operator of Migueliyo Travel acts as the data controller in relation to personal data processed through the Website where Migueliyo Travel determines the purposes and means of processing.


2. Information We May Collect

Depending on how you interact with the Website, we may collect or process the following categories of information.

Information You Provide Directly

When you contact us or submit information through a form, we may receive information such as: your name; your email address; the content of your message; information you voluntarily provide in correspondence with us. Please do not provide sensitive personal information unless it is necessary for your communication.

Technical and Usage Information

When you visit the Website, certain technical information may be processed automatically by the Website, hosting infrastructure, security services or, where applicable and permitted, analytics technologies. This may include: IP address; browser type and version; device type; operating system; referring website or source; pages viewed; approximate visit time and duration; technical logs; Website interaction and performance information; cookie and consent preferences. Some of this information may constitute personal data under applicable law.


3. How We Use Personal Information

We may process personal information for the following purposes: to operate and maintain the Website; to respond to messages, questions or requests; to provide requested information or services; to maintain Website security and prevent abuse; to diagnose technical problems and errors; to understand Website performance and usage where permitted; to improve Website content, functionality and user experience; to maintain records of consent choices where required; to comply with legal obligations; to establish, exercise or defend legal claims where necessary. We do not use personal information for purposes that are incompatible with those described in this Privacy Policy unless permitted or required by law.


4. Legal Bases for Processing

Where the General Data Protection Regulation (“GDPR”) or similar legislation applies, personal data may be processed on one or more of the following legal bases:

Consent

Where processing requires your consent, such as certain analytics or other non-essential cookies and technologies, processing is based on the consent choices you make. You may withdraw your consent at any time through the cookie settings available on the Website or through another applicable withdrawal mechanism. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Legitimate Interests

We may process limited personal data where necessary for legitimate interests such as:operating and securing the Website; preventing fraud, abuse or unauthorized access; diagnosing technical problems; protecting our legal rights; improving the reliability and functionality of the Website. Where we rely on legitimate interests, we consider those interests against the rights and interests of Website users.

Contractual Necessity

Where you request or purchase a product or service directly from us, certain processing may be necessary to take steps at your request or to perform a contract.

Legal Obligation

We may process or retain information where necessary to comply with applicable legal or regulatory obligations. These legal bases are consistent with the GDPR framework, under which processing must have an appropriate lawful basis and users must be informed of that basis.


5. Contact Forms and Communications

If you contact Migueliyo Travel through a Website contact form or by email, we may process the information you provide in order to respond to your inquiry and manage subsequent correspondence. Information submitted through contact forms should only be used for the purpose for which it was provided and related legitimate administrative or legal purposes.
We may retain correspondence for a reasonable period where necessary for follow-up, record-keeping, security or legal purposes.


6. Cookies and Similar Technologies

The Website uses cookies and similar technologies. Some cookies are necessary for the Website to function and may be used without consent where permitted by law. Other cookies and technologies, including certain analytics or measurement technologies, may require your consent before they are activated. Where consent is required, these technologies are managed according to the preferences selected through the Website’s cookie consent system.You can accept, reject or manage applicable cookie categories through the cookie banner or cookie settings available on the Website. Detailed information about the cookies and technologies used, their purposes and applicable providers is available in our Cookie Policy. Spanish and EU guidance distinguishes necessary technologies from non-essential technologies requiring consent; users must also be able to refuse or withdraw applicable consent.


7. Google Analytics

The Website may use Google Analytics to help us understand Website traffic, performance and how visitors interact with Website content. Depending on your consent choices and the Website’s configuration, analytics technologies may process information such as: Website interactions; pages viewed; device and browser information; approximate geographic information; traffic source; session and engagement information. Where consent is legally required, Google Analytics and associated non-essential storage or technologies are used according to the consent preferences selected through the Website’s cookie consent system. We use consent-management mechanisms, including Google Consent Mode where applicable, to communicate consent choices to relevant Google services. Google may process information through its infrastructure in accordance with its own applicable privacy terms and data protection arrangements. For more information about cookies associated with analytics and how consent is managed, please see our Cookie Policy.


8. Cookie Consent Management

The Website uses a consent management system to record and communicate your cookie preferences. When you visit the Website, you may be presented with options to accept, reject or customize non-essential cookies and technologies. Necessary cookies may remain active because they are required for essential Website functionality or for recording your privacy choices. You can change your preferences later through the cookie settings available on the Website. Consent must be freely given, specific, informed and unambiguous, and withdrawing consent should be possible. These principles are reflected in GDPR guidance from both the European Commission and the AEPD.


9. Hosting and Technical Service Providers

The Website is hosted using third-party hosting and technical infrastructure. These providers may process limited technical information, including IP addresses, server logs and security information, where necessary to deliver, secure and maintain the Website. We may also use third-party providers for services such as:website hosting; content delivery; security; analytics; contact forms; website performance; email communications; digital product distribution; payment or e-commerce functionality. Where a service provider processes personal data on our behalf, appropriate data protection arrangements are used where required by applicable law.


10. Third-Party Websites and Platforms

The Website may contain links to third-party websites and services, including travel platforms, mapping services, social media networks, music or streaming platforms, online stores and other external resources. When you follow an external link, the third party may process your personal information according to its own privacy policy. Migueliyo Travel does not control the privacy practices of independent third-party websites. We encourage you to review the privacy information provided by any external service before providing personal information to it.


11. Digital Products and External Stores

Some Migueliyo Travel products, including travel guides, books, digital downloads or other materials, may be offered through third-party platforms. If you purchase a product through an external platform, that platform may independently collect and process information necessary to complete your transaction, such as: name; email address; billing information; payment information; transaction details; account or delivery information. The third-party provider’s privacy policy and terms will apply to processing carried out independently by that provider. Migueliyo Travel does not receive or store full payment card details when payment is processed entirely by an independent payment provider.


12. Social Media and External Content

Migueliyo Travel may maintain profiles or publish content on third-party platforms. If you interact with Migueliyo Travel through a social network or other third-party platform, that platform may independently process information about your interaction according to its own privacy policy. The Website may also link to external multimedia, mapping or social content. Your interaction with external content may result in data being processed by the relevant provider, subject to applicable consent requirements and the provider’s privacy practices.


13. Sharing of Personal Information

We do not sell personal information. Personal information may be disclosed where reasonably necessary to:service providers supporting Website operation; hosting, security or technical providers; analytics providers where permitted by your consent and applicable law; professional advisers where necessary; public authorities where disclosure is legally required; parties involved in protecting our legal rights or preventing fraud or security incidents. We limit disclosures to what is reasonably necessary for the relevant purpose.


14. International Data Transfers

Some third-party service providers may process information outside Spain or the European Economic Area (“EEA”). Where personal data subject to GDPR is transferred internationally, applicable safeguards will be relied upon where required, which may include adequacy decisions, Standard Contractual Clauses or other legally recognized safeguards. The privacy documentation of the relevant third-party provider may contain additional information about its international data transfer arrangements. The GDPR requires users to be informed when their personal data may be transferred outside the EU and of the applicable safeguards or circumstances.


15. Data Retention

 Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected or as required by applicable law. Retention periods may depend on the type of information and purpose of processing. For example:contact correspondence may be retained while an inquiry is active and for a reasonable period afterward; technical and security logs may be retained for periods appropriate to security and troubleshooting needs; consent records may be retained where necessary to demonstrate compliance; information required for legal, accounting or contractual purposes may be retained for the applicable statutory period; analytics information is retained according to the applicable analytics configuration and provider settings. When information is no longer required, it may be deleted, anonymized or otherwise securely disposed of as appropriate.


16. Data Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss or destruction. However, no internet transmission or electronic storage system can be guaranteed to be completely secure. Users should also take reasonable precautions when communicating or sharing information online.Security and confidentiality are core GDPR data-processing principles.


17. Your Data Protection Rights

Depending on your location and applicable law, you may have rights regarding your personal data. Under the GDPR, these may include the right to: request access to your personal data; request correction of inaccurate or incomplete personal data; request deletion of your personal data in applicable circumstances; request restriction of processing; object to certain processing; receive certain personal data in a portable format where applicable; withdraw consent at any time where processing is based on consent; lodge a complaint with a competent data protection authority. These rights are subject to the conditions and exceptions provided by applicable law. To exercise an applicable privacy right relating to Migueliyo Travel, contact: hello@migueliyotravel.com
We may need to request information reasonably necessary to verify your identity before fulfilling certain requests.


18. Complaints

If you have concerns about how your personal information is processed, you may contact us first at: hello@migueliyotravel.com
You also have the right, where applicable, to lodge a complaint with a competent supervisory authority. In Spain, the relevant supervisory authority is the Agencia Española de Protección de Datos (AEPD).


19. Children’s Privacy

The Website is intended for a general audience and is not designed to knowingly collect personal information from children through services directed specifically at them.If you believe that a child has provided personal information through the Website in circumstances where parental or guardian authorization is required, please contact us so that the situation can be reviewed and appropriate action taken.


20. Automated Decision-Making

Migueliyo Travel does not use information collected through the Website to make solely automated decisions that produce legal effects or similarly significant effects on individuals, unless otherwise specifically disclosed.


21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in: Website functionality; technologies or service providers; data processing practices; legal or regulatory requirements.
When the Privacy Policy is updated, the “Last updated” date at the top of this page will be revised.
We encourage visitors to review this page periodically.


22. Contact

For privacy-related questions, requests or concerns, please contact:
Migueliyo Travel
Email: hello@migueliyotravel.com