Privacy

This website is designed to minimize personal data processing.

AI trip planner

With your express agreement, the optional planner sends destinations, start date, duration, travel profile, travel party, pet preference and your age range to OpenAI, including web search, solely to create the requested itinerary. Do not enter names, emails, health information or personal data about children or other people. No account is created and the application does not retain your answers or generated itinerary.

We keep an encrypted agreement record outside the public website for 90 days: date, notice version, accepted text, random reference and a keyed request digest; not your answers, IP or browser identifier. It is available only to authorized administration for demonstrating the requested authorization. Contact us through the legal notice using your reference to exercise your rights or withdraw agreement for future processing; withdrawal does not reverse processing already performed.

The API uses response storage disabled; this does not eliminate OpenAI's possible security retention. Processing and international transfers are governed by the applicable data processing agreement and safeguards. See OpenAI data controls.

Data we do not collect

There are no contact forms, accounts, comments, newsletter, analytics, advertising pixels, cookies, or equivalent browser storage technologies.

Technical logs and abuse prevention

The hosting provider may generate technical logs needed for security and availability. The planner also uses a keyed pseudonymous network identifier for a maximum one-hour rate-limit window; the application does not store the raw address in that rate-limit file.

External links

When you click an affiliate link, you leave this website and the destination site's privacy policy applies.

Cookies and browser storage

This website does not install first-party cookies, third-party cookies, analytics cookies, advertising cookies, pixels, local storage, or session storage.

If cookies or equivalent technologies are added later, this policy will be updated before activation with their name, owner, purpose, and duration, and consent will be requested when legally required.

Data controller

The data controller for this minimal website is the owner identified in the legal notice. Contact is only used to answer legal or website-related communications.

Legal basis and retention

Security logs and rate limiting rely on legitimate interest. Planner input processing relies on express agreement for the requested purpose; the agreement evidence is retained for accountability. Email communications are processed to answer the request. Planner content is not retained here; provider-side retention follows its applicable terms.

GDPR rights

Where applicable, you may request access, rectification, erasure, objection, restriction, and portability by writing to the contact address in the legal notice. You may also file a complaint with the Spanish Data Protection Authority (AEPD).