Privacy policy

1. Data controller

Controller: Asier Urquizu Lope.

Trade name: Astiro.

NIF: 15984069N.

Address: C/ San Bartolomé 2, Valle de Larraun, Navarra.

Contact email: info@astiro.eus.

Website: astiro.eus.

2. Information about cookies

This website does not use any type of cookie (neither its own nor third-party, whether technical, analytical, or advertising). No tracking of users is carried out, and no information is stored on their device.

3. Data collected

The website astiro.eus only collects personal data that the user voluntarily provides through the contact form (or other equivalent means, such as email), which may include:

Name.

Email.

Any other information the user chooses to include in their message.

No browsing data is collected, and no web analytics tools are used.

4. Purpose of processing

The data provided is processed solely for the purpose of:

Responding to enquiries and requests for information about Astiro’s services.

Managing the booking and delivery of the guided visits and experiences contracted.

5. Legal basis

The legal basis for processing the data is the consent of the data subject, given by voluntarily submitting their data through the contact form, as well as, where applicable, the performance of a contract or pre-contractual measures (booking management).

6. Data retention

Data will be kept for as long as necessary to handle the enquiry or manage the contractual relationship, and subsequently, where applicable, for the periods legally required.

7. Recipients

Data will not be shared with third parties, except where legally required. Data may be processed by service providers necessary for the operation of the website (for example, the web hosting provider or the email service manager), acting as data processors under Article 28 of the GDPR.

8. Rights of data subjects

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time, by writing to info@astiro.eus, indicating the right they wish to exercise and enclosing a copy of an identifying document.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they believe the processing of their data does not comply with applicable regulations.

9. Security measures

The necessary technical and organisational measures are adopted to ensure the security of personal data and to prevent its alteration, loss, unauthorised processing, or access.

10. Changes to this privacy policy

This privacy policy may be amended to adapt to legislative developments or changes in how the website operates. Users are advised to check it periodically.

Last update: July 2026