Privacy Policy

Last updated: May 2026

This privacy policy provides information on the processing of personal data carried out through the website www.geolag.com.

GEOLAG processes personal data responsibly, transparently, and in accordance with current data protection regulations, especially the General Data Protection Regulation and the Organic Law on the Protection of Personal Data and Guarantee of Digital Rights.

1. Data Controller

Controller: Luna Adrados González
Trade name: GEOLAG · Turismo Geológico®
Website: www.geolag.com
Email: info@geolag.com
Administrative phone: +34 985 780 681
Contact phone: +34 659 20 30 59

2. Personal data that may be processed

GEOLAG may process personal data provided directly by interested parties via email, telephone, web forms, newsletter subscriptions, social networks, or any other enabled contact channel.

The data processed may include:

First and last name.
Email address.
Phone number.
Educational center, entity, company, or organization, where applicable.
Information voluntarily included in messages, inquiries, or requests.
Data relating to registrations, participation in activities, or communications maintained with GEOLAG.
Technical browsing data, online identifiers, IP address, cookies, or website usage information, in accordance with the cookie policy and consent settings.

Specially protected data is not requested through the website. It is recommended not to send sensitive information, such as health data, ideology, religion, biometric data, unnecessary information regarding minors, or any other specially protected information, unless it is essential for a specific activity and is expressly requested by GEOLAG.

3. Purposes of processing

Personal data may be processed for the following purposes:

a) Addressing inquiries and requests for information

GEOLAG will process the necessary data to respond to inquiries sent by email, telephone, web forms, or social networks.

b) Managing activities, workshops, routes, presentations, or training

When an individual, educational center, entity, or company requests information or participates in an activity, GEOLAG may process the necessary data to manage communication, organization, participation, adaptation of the activity, and administrative follow-up.

c) Managing newsletter subscriptions

GEOLAG may use MailerLite or another equivalent tool to manage subscriptions to newsletters, news, educational content, or communications related to activities.

Subscribers may unsubscribe at any time via the link included in each communication or by writing to info@geolag.com.

d) Analyzing website usage

GEOLAG may use measurement tools, such as Google Analytics, to obtain statistics on visits, navigation, site performance, and content improvement, always in accordance with the cookie policy and the consent provided where necessary.

These tools may use cookies or other identifiers, always in accordance with the cookie policy and the consent provided by the user when necessary.

e) Managing social media presence

GEOLAG may have profiles on Facebook, Instagram, or other social networks. The data processed on these platforms will also depend on the conditions and privacy policies of each social network.

GEOLAG will process the data of individuals who interact with its profiles solely to manage its social media presence, respond to messages, comments, or inquiries, share educational content, and maintain the relationship with its community.

f) Displaying or integrating third-party content

The website may integrate third-party content, such as YouTube videos, maps, social media posts, or other external resources.

These services may process technical data or install cookies when the user interacts with them or accepts them through the corresponding consent panel.

g) Complying with legal obligations

GEOLAG may process data when necessary to comply with legal, fiscal, administrative, accounting obligations, or to respond to requirements from competent authorities.

h) Ensuring website security

Technical data, such as IP addresses, access logs, or technical activity, may be processed to protect the website against attacks, unauthorized access, spam, form abuse, or security incidents.

i) Processing data of minors

In the case of activities aimed at families, school groups, or educational centers, GEOLAG may process the minimum data necessary for the organization of the activity, always through the responsible persons, legal guardians, educational centers, or organizing entities.

Personal data of minors will not be requested directly through the website unless it is necessary for the management of a specific activity and the corresponding legitimacy is held.

4. Legal basis for processing

The legal bases that legitimize the processing of data are:

Consent of the interested party, for sending newsletters, accepting non-essential cookies, voluntary forms, or expressly requested communications.
Application of pre-contractual measures, when the person requests information about activities, routes, workshops, training, quotes, or services.
Execution of a contract or service, when a specific activity, assignment, training, or provision is formalized.
Compliance with legal obligations, when it is necessary to retain or communicate data for fiscal, administrative, accounting, or legal reasons.
Legitimate interest, to maintain the security of the website, prevent abuse, respond to previously initiated communications, or manage the ordinary presence of GEOLAG on social networks, always respecting the rights and freedoms of the interested parties.

5. Data retention period

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected.

As a guideline:

Data sent in inquiries will be kept for the time necessary to address them and perform reasonable follow-up.
Data related to activities or services will be kept as long as the relationship with the interested party exists and during the applicable legal periods.
Newsletter subscription data will be kept as long as the person does not request to unsubscribe.
Data derived from legal, fiscal, or accounting obligations will be kept for the legally required periods.
Technical security data will be kept for the time necessary to prevent, detect, or investigate incidents.

When the data is no longer necessary, it will be deleted or blocked in accordance with applicable regulations.

6. Recipients and service providers

GEOLAG does not sell personal data or transfer it to third parties for commercial purposes.

However, for the ordinary operation of the website and the provision of services, technology providers may intervene and process data on behalf of GEOLAG or under their own conditions, including:

Web hosting provider.
Email provider.
Form or web management tools.
Google, for measurement, analytics, or associated services.
MailerLite, for managing newsletters and subscriptions.
Meta Platforms, in relation to Facebook and Instagram.
YouTube/Google, when videos are integrated or viewed.
Security, maintenance, backup, or spam prevention tools.
Administrative, fiscal, legal, or technical providers when necessary.

When these providers act as data processors, GEOLAG will ensure that the corresponding guarantees and agreements are in place.

7. International data transfers

Some technology providers, such as Google, MailerLite, Meta/Facebook/Instagram, or YouTube, may involve international data transfers or processing carried out outside the European Economic Area.

In those cases, such processing must be carried out in accordance with the guarantees provided by the applicable regulations, such as adequacy decisions, standard contractual clauses, recognized transfer frameworks, or other legally valid mechanisms.

The user can consult additional information in the privacy policies of each provider.

8. Social networks

GEOLAG may maintain profiles on social networks such as Facebook and Instagram.

When a person interacts with these profiles, for example by following the page, commenting, sharing content, sending messages, or reacting to posts, their data will be processed by both GEOLAG and the social network itself in accordance with their respective policies.

GEOLAG does not fully control the processing carried out by social platforms, so it is recommended to review the privacy settings and policies of each service.

9. Rights of interested parties

Interested parties may exercise the following rights:

Right of access.
Right to rectification.
Right to erasure.
Right to object.
Right to restriction of processing.
Right to data portability.
Right not to be subject to automated individual decisions, where applicable.

The AEPD lists these rights as part of the guarantees recognized for individuals affected by the processing of their personal data.

To exercise these rights, a request can be sent to:

info@geolag.com

The request must clearly indicate the right you wish to exercise and allow for the verification of the applicant’s identity if necessary.

Furthermore, if the person considers that the processing of their data does not comply with the regulations, they may file a complaint with the Spanish Data Protection Agency.

10. Data security

GEOLAG applies reasonable technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.

However, no system connected to the Internet can guarantee absolute security. Therefore, users are advised to act with caution when sending personal information through electronic means.

11. Changes to the privacy policy

GEOLAG may modify this privacy policy to adapt it to regulatory, technical, organizational, or activity changes.

The current version will be the one published at any given time on this page.