PRIVACY
Privacy Policy
What data we process
Depending on how you use 25places.com, we may process contact details you send us, purchase and transaction information needed to fulfil an order, technical/security data generated by the website, referral information where applicable, and analytics data if you consent to analytics cookies.
Why we process it
Purchases and delivery. We process information necessary to take payment, verify the transaction, deliver the digital guide and interactive-map access, provide purchase support and keep required transaction records. The legal bases are performance of the purchase contract and compliance with applicable legal obligations.
Messages and support. If you contact us, we use the information you provide to answer and manage the communication.
Analytics. Google Analytics 4 is loaded only if you choose “Accept analytics”. The legal basis is your consent, which you can withdraw through Cookie settings.
Service providers and recipients
We use service providers where necessary to operate the website and fulfil purchases. Stripe processes payment information; hosting/email providers support the website and transactional email; and Google Analytics is used only with your consent.
International transfers
Some technology providers may process data outside the European Economic Area. Where this occurs, an applicable transfer mechanism and safeguards required by data-protection law must be used.
How long we keep data
Purchase and accounting information is retained for the periods required by applicable tax, accounting and consumer-protection rules. Support correspondence is kept only for as long as reasonably necessary to resolve the matter and address related legal obligations. Analytics retention follows the configured Google Analytics settings.
Your rights
You may request access, rectification, erasure, restriction or portability of your personal data, or object to processing where applicable. You may withdraw consent at any time without affecting prior processing. Email hello@25places.com to exercise your rights. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
Security
25PLACES. applies reasonable technical and organisational measures appropriate to the information processed. Payment-card details are entered into Stripe Checkout and are not stored by 25PLACES.