Your data, in context.

The data controller is the owner of GidePass, identified in the legal notice. Business address: calle Velázquez 10, 28001 Madrid, Spain.

The owner’s full name and Spanish tax identification number (NIF) appear in the legal notice. Contact the controller at soporte@gidepass.app or by post at the business address above.

We may process account data, information needed to manage a purchase, preferences you choose to save, technical usage data and, where a feature requires it and permission has been granted, location information.

Camera and contribution features may involve processing content you choose to submit to receive the requested service.

Data is used to provide the service, manage access and purchases, remember preferences, improve the experience, respond to issues and protect the platform against misuse.

Product analytics help us understand which parts of GidePass work well and which need improvement.

PostHog (región OF la UE) mide visitas a páginas públicas y clics hacia la compra únicamente con tu consentimiento. Guarda gidepass_public_analytics_v1 en sessionStorage durante esta pestaña. No creamos perfiles personales: excluimos páginas privadas, parámetros, fragmentos, correo, coordenadas y contenido del viaje; el origen de referencia se limita al dominio. Retirar el consentimiento detiene los envíos y elimina ese identificador.

With your analytics consent, Vercel Speed Insights measures technical performance. Before sending data, GidePass removes URL parameters and fragments and groups private screens by function. This measurement does not include camera or chat content, bookings, expenses, email addresses, coordinates or accommodation names.

If you request the newsletter, we process your email address, language, form source and request, confirmation and unsubscribe dates to send travel inspiration and GidePass commercial news. This relies on your consent: an optional checkbox followed by email confirmation. Accounts, buyers and university contacts are not added automatically.

Resend sends these messages from hola@gidepass.app. Unsubscribe using the link in any message or by emailing that address. Unsubscribing does not affect your account, passes or a welcome discount already earned. Newsletter confirmation does not create an account, buy a pass or activate one.

The 20% discount applies to your first Madrid Traveller Pass, normally €4.99 (rounded final price: €3.99), using the same email address for your account. It cannot be combined with other offers and does not apply to extensions or earlier purchases. We check confirmation and previous purchases before applying the price.

Requests expire after 24 hours. Requests that were never confirmed are deleted on the next subscription request once seven days have passed since expiry. After unsubscribing, we retain the minimum record needed to honour the unsubscribe, evidence your choice and manage an unused discount or potential liabilities. Request deletion at soporte@gidepass.app. Abuse counters use identifiers derived from the IP address without storing the original address, and are cleared after two days on the next request.

Managing your account, pass and requested features is based on performing the contract. Billing and compliance with legal obligations are based on applicable law; preventing fraud and misuse is based on the legitimate interest of keeping the service secure.

Optional analytics and publishing testimonials require consent, which you can withdraw. Food personalisation is also optional: allergies and restrictions are used only after your explicit consent. We record the date, language and notice version without copying those preferences into the consent record. From Profile you can withdraw consent and delete saved food settings for your account and the companions you manage, along with shared temporary camera orders. Do not add companions’ data without their authorisation or legal representation. For other privacy requests, email soporte@gidepass.app.

Without essential access or purchase data, we cannot manage your account or pass. Refusing analytics or publication of a review does not prevent you from using the service.

Initial setup may save a temporary draft in this tab to recover it after a reload. It is linked to your account and pass, stops being recoverable after 30 minutes without changes and is deleted on completion or sign-out. The draft does not store allergies or dietary restrictions; you must select them again if you reload. Avoid completing personal profiles on shared devices.

The consent record retains your choice, date, language and notice version while your account exists. Withdrawal stops personalisation and deletes saved food settings; it does not affect earlier processing or copies you have already given to third parties. For other erasure requests and timeframes, contact soporte@gidepass.app.

Account data and saved content are retained while needed for the account and requested features, or until a deletion request is fulfilled. Support requests are retained while being handled and for as long as necessary to address potential liabilities.

Purchase and billing records are retained for periods required by tax, accounting and complaint-handling obligations. Where applicable, data is restricted to these purposes and deleted when those periods end.

Reviews of GidePass remain private unless publication is authorised and they have been reviewed. You can delete them from My account. Wallet reminders are imported into your calendar; their retention and alerts depend on that provider.

Utilizamos proveedores de alojamiento, base de datos, correo, mapas e inteligencia artificial, incluidos Vercel, Supabase, Mapbox, OpenAI y PostHog (analítica opcional en la región de la UE), para prestar sus respectivas funciones. Cuando la compra esté habilitada, el proveedor de pago tratará los datos necesarios para cobrar y devolver importes. No vendemos tus datos personales.

Some providers may process data outside the European Economic Area. Transfers must rely on an adequacy decision or safeguards such as standard contractual clauses, depending on the provider and service. Request information about recipients and applicable safeguards at soporte@gidepass.app.

Automated recommendations help you explore your trip; they do not determine your rights or access to essential services. External bookings are made with the relevant provider under its own terms and privacy policy.

GidePass uses technology providers for hosting, databases, payments, maps, email and analytics. Each provider is involved only as necessary to perform its function.

Payments are processed by specialist providers; GidePass does not need to store full card details.

Location is used only when a feature needs it, for example to calculate routes or show nearby services. Access depends on device or browser permissions and can be disabled.

Disabling location may limit some features but does not prevent you from viewing general GidePass content.

The assistant is automated. Common sales questions are answered using GidePass information; open-ended questions may be sent to OpenAI with recent messages to generate a response. Do not share card details, passwords or documents in chat.

GidePass does not save this conversation’s history in its database. Requests to OpenAI have response storage disabled; the provider may retain technical logs under its policies. To prevent abuse, we store temporary counters linked to an identifier derived from the IP address, without storing the original IP address.

Where applicable, request access, rectification, erasure, portability, restriction or objection by emailing soporte@gidepass.app from your account email address. State which right you wish to exercise; additional identity information will be requested only if necessary. You can withdraw consent without affecting earlier processing and lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.