KUNDALL informs you about its Privacy Policy regarding the treatment and protection of personal data of users and clients that may be collected by browsing or contracting services through the website

The use of the website implies the acceptance of this Privacy Policy, as well as the conditions included in the Legal Notice.

Identidad del responsable

In this sense, the holder guarantees compliance with current regulations on the protection of personal data, reflected in Organic Law 3/2018, of December 5, on Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD) . It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural persons (RGPD).

Principles applied in data processing

In the processing of your personal data, the holder will apply the following principles that comply with the requirements of the new European data protection regulation:

Obtaining personal data

To browse you do not need to provide any personal information. The cases in which you do provide your personal data are the following:

  • By contacting through the contact forms or sending an email.
  • By signing up for a subscription form or a newsletter that the Owner manages.

Your rights

The Owner informs you that regarding your personal data you have the right to:

  • Request access to stored data.
  • Request a rectification or cancellation.
  • Request the limitation of your treatment.
  • Object to the treatment.
  • Request the portability of your data.

The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly from the Owner, which means that any client, subscriber or collaborator who has provided their data at any time, can contact the Owner and request information about the data that you have stored and how you have obtained them, request their rectification, request the portability of your personal data, oppose the treatment, limit its use or request the cancellation of these data in the Holder's files.

To exercise your rights of access, rectification, cancellation, portability and opposition you have to send an email to [email protected] along with valid proof in law such as a photocopy of the D.N.I. or the equivalen.

You have the right to effective judicial protection and to present a claim with the supervisory authority, in this case, the Spanish Agency for Data Protection, if you consider that the processing of personal data that concerns you violates the Regulation.

Purpose of the processing of personal data

When you connect to the website to send an email to the Owner, subscribe to their newsletter or make a contract, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, name and surname, physical address, email address, telephone number, and other information. By providing this information, you give your consent for your information to be collected, used, managed and stored by, only as described in the Legal Notice and in this Privacy Policy.

The personal data and the purpose of the treatment by the Holder are different according to the information capture system:

  • Contact forms: The Owner requests personal data, among which may be: Name and surname, email address, telephone number, in order to answer your questions.
    For example, the Owner uses this data to respond to your messages, doubts, complaints, comments or concerns that you may have regarding the information included on the website, the services provided through the website, the treatment of your personal data, questions regarding the legal texts included in the website, as well as any other query you may have that is not subject to the conditions of the website or the contract.
  • Content subscription forms: The Holder requests the following personal information: Name and surname, email address, telephone number and address, to manage the list of subscriptions, send newsletters, promotions and special offers.

There are other purposes for which the Holder processes your personal data:

  • To guarantee compliance with the conditions contained in the Legal Notice and in the applicable law. This may include the development of tools and algorithms that help this website to ensure the confidentiality of the personal data it collects.
  • To support and improve the services offered by this website.
  • To analyze navigation. The Owner collects other non-identifying data obtained through the use of cookies that are downloaded to your computer when you browse the website, the characteristics and purpose of which are detailed in the Cookies Policy.
  • The Owner has a presence on social networks. If you become a follower on the Holder's social networks, the processing of personal data will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network that is appropriate in each case and that you have previously accepted.

You can consult the privacy policies of the main social networks in these links:

  • Facebook
  • Twitter
  • Linkedin
  • YouTube
  • Instagram

The Owner will treat your personal data in order to correctly manage their presence on the social network, inform you of their activities, products or services, as well as for any other purpose that the regulations of social networks allow..

In no case will the Owner use the profiles of followers on social networks to send advertising individually.

Personal data security

To protect your personal data, the Holder takes all reasonable precautions and follows the best practices in the industry to prevent their loss, misuse, improper access, disclosure, alteration or destruction of them.

The website is hosted by Amazon web service. The security of your data is guaranteed, since they take all the necessary security measures for it. You can check their privacy policy for more information.

Content from other websites

The pages of this website may contain embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed an additional third-party tracking code, and monitor your interaction using this code.

Cookies policy

For this website to function properly you need to use cookies, which is information that is stored in your web browser.On the Cookies Policy page you can consult all the information related to the collection policy, the purpose and the treatment of cookies. Legitimation for data processing The legal basis for the treatment of your data is: consent. To contact the Owner, subscribe to a newsletter or make comments on this website, you have to accept this Privacy Policy.

Categories of personal data

The categories of personal data that the Owner deals with are:

  • Identification data.

Preservation of personal data

The personal data that you provide to the Holder will be kept until you request its deletion.

Recipients of personal data

  • Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (“Google”). You will find more information at:
    Google Analytics uses “cookies”, which are text files located on your computer, to help the Owner analyze the use made by users of the website. The information generated by the cookie about the use of the website (including your IP address) will be directly transmitted and filed by Google on servers in the United States.

You can also see a list of the types of cookies used by Google and its partners and all the information related to their use of advertising cookies.

Web navigation

When browsing, non-identifying data may be collected, which may include the IP address, geolocation, a record of how the services and sites are used, browsing habits and other data that cannot be used to identify you.

The website uses the following third-party analysis services:

  • Google analytics

The Owner uses the information obtained to obtain statistical data, analyze trends, administer the site, study browsing patterns and to collect demographic information.

Accuracy and veracity of personal data

You assure that the data provided to the Holder are correct, complete, accurate and current, as well as to keep them duly updated.

As a user of the website, you are solely responsible for the veracity and correctness of the data that you send to the site, exonerating the owner of any responsibility in this regard.

Acceptance and consent

As a User of the Website, you declare that you have been informed of the conditions on the protection of personal data, you accept and consent to their treatment by the Owner in the manner and for the purposes indicated in this Privacy Policy.


To exercise your rights of access, rectification, cancellation, portability and opposition you have to send an email to [email protected] along with valid proof in law such as a photocopy of the D.N.I. or the equivalent.

The exercise of your rights does not include any data that the Holder is obliged to keep for administrative, legal or security purposes.

Children's privacy

Our Service is not directed to children under the age of 13 ('Children'). We do not knowingly collect personally identifiable information from children under the age of 13. If you are a parent or guardian and you know that your children have provided us with personal information, please contact us ([email protected]). If we become aware that we have collected personal information from children under the age of 13 without verification of parental consent, we take steps to remove that information from our servers.

Access permissions to personal data for mobile devices

Depending on the User's specific device, Kundall may request certain permissions that allow it to access the User's device Data as described below.

By default, these permissions must be granted by the User before being able to access the respective information. Once the permission has been granted, the User can revoke it at any time. To revoke these permissions, users can check the device settings or contact the owner for assistance at the contact details provided in this document.

The exact procedure for controlling application permissions may depend on the User's device and software.

Please note that revoking such permissions could affect the proper functioning of Kundall..

If the User grants any of the permissions listed below, Kundall may process (i.e. access, modify or delete) the respective Personal Data.

Approximate location permit (not continuous)

It is used to access the approximate location of the user's device. Kundall may collect, use and share user location data to provide location-based services.

The geographic location of the user is determined in a way that is not continuous. This means that it is impossible for Kundall to obtain the approximate position of the User continuously.

Camera permission

It is used to access the camera or capture images and videos from the device.

Motion sensors permission

It is used to access the motion sensors of the User's device to measure User activity, such as step count, stairs climbed, and type of movement (walking, cycling, etc.).

Precise location permission (not continuous)

It is used to access the precise location of the user's device. Kundall may collect, use and share user location data to provide location-based services.

The geographic location of the user is determined in a way that is not continuous. This means that it is impossible for Kundall to obtain the exact position of the user continuously.

Social media account permission

Se utiliza para acceder a los perfiles de cuenta de redes sociales del Usuario, como Facebook y Twitter.

Write-only photo library permission

Allows write-only access to the user's photo library.

Notifications permission


Push notifications: The push notifications used in Kundall are associated with the updates of the tours/routes created in the platform. By acquiring a route, the user has access to all the content of that route. This route may undergo modifications by the tour guide who created the route, as updates and/or corrections. These updates are notified to the users who have purchased the route through the push notifications of the app.

Informational windows: The purpose is to inform the user that he is in one of the points marked by the guide within the route. Kundall has a functionality based on the geolocation of the user, where being in a radius close to the point indicated by the guide, the informative window is activated so that the user can listen to the audio associated with that point.

To be able to use this functionality the user must be within the Tour or route that has been purchased, if the user is outside the Tour / route that has been purchased and / or if the Kundall application is not open, the process of notifications will not come into operation.

Payment management

Payment processing services allow Kundall to process payments by credit card or other means. To ensure greater security, Kundall shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.

Some of these services may also allow the sending of timed messages to the User, such as emails containing invoices or notifications related to payment. Stripe Spain Sl, Braintree (PayPal Pte. Ltd.) and PayPal (PayPal Inc.).

Braintree (PayPal Pte. Ltd.)

Braintree is a payment service provided by Braintree, a division of PayPal Limited Pte.

Personal data processed: various types of data as specified in the Privacy Policy from service.

Place of processing: see the privacy policy of PayPal, Stripe or Braintree.

PayPal (PayPal Inc.)

PayPal s a payment service provided by PayPal Inc., which allows users to users perform online payments.

Personal data processed: various types of data as specified in the Privacy Policy from service.

Place of processing: see PayPal's privacy policy - Privacy Policy Privacy.

Stripe Spain Sl.

Stripe is a payment service provided by Stripe, to reveice online payments

Personal data processed: various types of data as specified in the Privacy Policy from service.

Place of processing: see the privacy policy of Stripe.

Registration and authentication

By registering or authenticating, users allow Kundall to identify them and give them access to dedicated services.

Depending on what is described below, third parties may provide registration and authentication services. In this case, Kundall may access some Data, stored by these third-party services, for registration or identification purposes.

Facebook Authentication (Facebook, Inc.)

Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and is connected to the Facebook social network. Personal data processed: various types of data as specified in the privacy policy of the service.

Google Authentication (Alphabet, Inc.)

Google Authentication is a registration and authentication service provided by Google, Inc. and it’s connected to the Google social network.

Place of processing: United States - Privacy Policy. Privacy Shield Participant.

Changes to the Privacy Policy

The Owner reserves the right to modify this Privacy Policy to adapt it to new legislation or jurisprudence, as well as industry practices.

These policies will be in force until they are modified by others duly published.