This Privacy Policy describes how personal data is collected, used, stored and disclosed in connection with the website jmbasquetours.com (the “Website”) and the services offered under the name “JM Basque Tours”.

By accessing or using the Website, you acknowledge that you have read and understood this Privacy Policy.

​

1. Data controller and contact details

For the purposes of applicable data protection law (including, where applicable, the EU General Data Protection Regulation “GDPR”), the data controller is:

José Manuel Corpas (JM Basque Tours)
ID: 18054375L
Location: Camino de la Hípica, 12, 4C, 20014 (San Sebastián), Spain
Email: josemanuel@jmbasquetours.com
Telephone: +34 627 952 618

If you have any questions about this Privacy Policy or about our processing of your personal data, you can contact us using the details above.

​

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data that we collect through the Website, including any contact forms, booking-related communications and statistical/analytics tools implemented on the Website. It does not apply to processing carried out by third‑party websites or services that may be linked from the Website and that we do not control.

​

3. Categories of personal data we collect

Depending on how you interact with the Website, we may collect and process the following categories of personal data:

• Identification and contact data: name, email address, telephone number and any other information you voluntarily provide when contacting us (for example, in a contact form or by email).

• Booking‑related information: details you may provide about desired dates, group size, tour preferences or other information relevant to organising a tour.

• Technical and usage data: IP address, device and browser characteristics, language settings, referring URLs, approximate location (based on IP), pages visited, clickstream data, time and duration of visits, and similar information generated by your use of the Website. This information may be collected automatically through cookies and similar technologies for analytics and statistical purposes.support.wix+1

• Cookie and analytics identifiers: online identifiers such as cookies, pixel tags, Google Analytics client IDs or similar technologies used to recognise your browser or device over time for statistical and performance analysis.consently+1

We do not intentionally collect special categories of personal data (such as health data, political opinions or religious beliefs) through the Website. We also do not request payment card details directly through the Website; if, in the future, any online payment functionality is added, such payments will be processed via secure third‑party providers with their own privacy and security terms.

​

4. How we collect personal data

We collect personal data in the following ways:

• Data you provide directly: when you contact us via a contact form, by email, telephone or messaging applications, or when you request information or a quotation for a tour, you voluntarily provide certain personal data (such as your name, contact details and the content of your message).

• Data collected automatically: certain technical and usage information is collected automatically when you access or interact with the Website, using cookies, log files and similar tracking technologies implemented by the Website platform (Wix.com) and by analytics tools such as Google Analytics.support.wix+1

• Data from third‑party tools: where we use third‑party analytics or marketing tools (for example, Google Analytics), those providers may collect information about your use of the Website on our behalf, as further described below.termly+1

​

5. Purposes and legal bases for processing

We process personal data for the following purposes and on the following legal bases:

1. To operate, maintain and secure the Website

   • To ensure the Website is displayed correctly, functions technically and remains secure and available.

   • Legal basis: our legitimate interest in providing and protecting the Website and our services (Article 6(1)(f) GDPR).

2. To respond to enquiries and provide pre‑contractual information

   • To handle and respond to contact requests, questions about tours, and any other communications initiated by you via the Website or by email/phone.

   • Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) and/or our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).

3. To perform and manage the contractual relationship (if applicable)

   • If you decide to book a tour, we may process your personal data to organise, confirm and provide the requested services and to manage related communications.

   • Legal basis: performance of a contract with you (Article 6(1)(b) GDPR).

4. To conduct statistical analysis and improve the Website (Google Analytics and similar tools)

   • To obtain aggregated, anonymised or pseudonymised statistics about Website traffic, user flows and general behaviour in order to understand how visitors use the Website, improve user experience and optimise our visibility and positioning in search engines.

   • Legal basis: your consent where required for the use of non‑essential cookies/analytics tools (Article 6(1)(a) GDPR), and/or our legitimate interest in analysing and improving our online presence (Article 6(1)(f) GDPR).consently+1

5. To comply with legal obligations

   • To comply with applicable legal, tax, accounting or regulatory requirements, including retaining certain information if necessary for legal defence or to respond to requests from public authorities.

   • Legal basis: compliance with legal obligations (Article 6(1)(c) GDPR).

We do not use your personal data for aggressive marketing campaigns, nor do we carry out automated individual decision‑making or profiling that produces legal or similarly significant effects for you, based solely on automated processing.

​

6. Cookies, analytics and similar technologies

The Website is built and hosted on the Wix.com platform, which uses cookies and similar technologies for purposes such as security, system monitoring, performance and analytics. In addition, we may use Google Analytics or comparable tools to obtain statistical information on Website traffic and usage patterns.wix+3

• Wix cookies: Wix sets a number of cookies that are necessary for the functioning, security and stability of the Website, as well as certain analytics and performance cookies. For an up‑to‑date list and description of Wix cookies, please consult Wix’s own documentation.wix+1

• Google Analytics (GA4): Google Analytics uses cookies and similar technologies to collect pseudonymous information such as your IP address (which may be truncated or anonymised), device identifiers and events related to your use of the Website (pages viewed, time spent, clicks, etc.). This information is processed by Google on our behalf in order to provide us with aggregated reports about Website activity and to help us improve our online presence.termly+1

Where required by law, non‑essential cookies and analytics tools will only be activated after you have provided your consent via a cookie banner or similar mechanism. You can withdraw or change your consent at any time via the mechanisms offered on the Website or by adjusting your browser settings to block or delete cookies.

For more details on how Google processes data in the context of Google Analytics, please refer to Google’s own privacy documentation.support.google+1

​

7. How we share personal data

We do not sell your personal data. We only share personal data to the extent necessary for the purposes described in this Privacy Policy and under appropriate safeguards:

• Wix.com Ltd.: The Website is hosted on servers and infrastructure operated by Wix.com Ltd. (“Wix”), which acts as a service provider and data processor in relation to certain data about visitors to our Website. This may include storage of technical and usage data, log files and other information necessary for the operation and security of the Website.wix+1

• Google LLC and affiliated entities: When we use Google Analytics, certain pseudonymous analytics data about your use of the Website is transmitted to and processed by Google, which acts as a processor or, in some configurations, as an independent or joint controller for certain processing operations, in accordance with its own terms and the applicable data protection framework.support.google+3

• Professional advisers and authorities: We may disclose personal data to professional advisers (such as lawyers or accountants) and, where legally required, to courts, law enforcement or other public authorities, if necessary to protect our rights or to comply with a legal obligation.

Whenever we engage third‑party service providers, we take appropriate steps to ensure that they process personal data only in accordance with our instructions, under confidentiality obligations and with suitable technical and organisational measures to protect the data.cookieyes+1

​

8. International transfers

Wix.com Ltd. is based in Israel and uses data centres located, among others, in the United States of America and Ireland to host websites and store related data. Google Analytics may also involve the transfer of certain personal data to Google’s servers in the European Union and/or the United States or other countries outside the European Economic Area (“EEA”).wix+3

Where such transfers involve countries that are not recognised by the European Commission as providing an adequate level of data protection, they will be carried out under appropriate safeguards, such as standard contractual clauses approved by the European Commission together with additional technical and organisational measures, or any other mechanism recognised by applicable data protection law.wix+1

​

9. Data retention

We retain personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected or to comply with applicable legal, tax or regulatory requirements.wix+1

In general:

• Contact and enquiry data are kept for the time needed to resolve your request and, where applicable, for the duration of any contractual relationship and the applicable limitation periods for legal claims.

• Technical and analytics data are retained for the periods configured in the relevant tools (for example, standard or customised retention periods in Google Analytics), after which the data is deleted or anonymised.consently+1

When personal data is no longer required for the purposes described above, it will be securely deleted, anonymised or aggregated so that it can no longer be associated with an identifiable individual.

​

10. Data security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include, among others, the use of secure hosting providers, encryption in transit where appropriate, access controls and internal policies designed to limit access to personal data to those who need it for the purposes described in this Privacy Policy.wix+1

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

​

11. Communications and marketing

We may use your contact details to respond to your enquiries, confirm or clarify information about potential or existing bookings and provide you with information that you have explicitly requested. We do not maintain mass email marketing lists and do not send regular newsletters at this time.

If, in the future, we decide to send newsletters or promotional communications by email or other electronic means, we will do so in accordance with applicable law and will provide you with a clear and simple way to opt out of such communications at any time.

​

12. Your data protection rights

Subject to the conditions and limitations set out in applicable data protection law, you have the following rights in relation to the personal data we hold about you:cookieyes+1

• Right of access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy of that data together with information on the processing.

• Right to rectification: to request the correction of inaccurate personal data and the completion of incomplete data.

• Right to erasure (“right to be forgotten”): to request the deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected or where you withdraw your consent (if consent was the legal basis).

• Right to restriction of processing: to request that we restrict processing of your personal data in certain cases, for example while we verify the accuracy of the data or assess an objection you have raised.

• Right to data portability: to receive personal data that you have provided to us in a structured, commonly used and machine‑readable format, and to transmit that data to another controller, where processing is based on your consent or on a contract and is carried out by automated means.

• Right to object: to object, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling based on such interests. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.

• Right to withdraw consent: where processing is based on your consent (for example, for certain analytics cookies), you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with a competent supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.

​

13. How to exercise your rights and withdraw consent

To exercise any of the rights described above, or to withdraw your consent to the use of cookies or analytics tools (where consent is the legal basis), you can contact us at:

Email: josemanuel@jmbasquetours.com
Postal location: Camino de la Hípica, 12, 4C, 20014 (San Sebastián), Spain

Please include sufficient information to allow us to identify you and process your request (for example, the context in which you provided your personal data and the right you wish to exercise). To protect your privacy, we may request additional information to verify your identity before acting on your request.cookieyes+1

You may also adjust your browser settings to block or delete cookies, and you may manage your choices regarding analytics and other non‑essential cookies via any consent tools or banners implemented on the Website.

​

14. Changes to this Privacy Policy

We reserve the right to amend or update this Privacy Policy from time to time, for example to reflect changes in our processing activities, in the Website, or in applicable legal requirements. Any changes will be published on this page and will take effect from the date of their publication, which will be indicated at the end of the document.cookieyes

​

We encourage you to review this Privacy Policy periodically to remain informed about how we process personal data.

Contact

If you have any questions, concerns or requests regarding this Privacy Policy or our processing of your personal data, you may contact the data controller:
José Manuel Corpas (JM Basque Tours)
Email: josemanuel@jmbasquetours.com
Telephone: +34 627 952 618

Last updated: 10/08/2026