Privacy Policy

The controller of the personal data processed through NatSnap is NatSnap S.L., with CIF B22614713 and registered office at Calle Hirigoien 16, 3 derecha, Lazkao 20210, Gipuzkoa, Spain.

You can contact NatSnap for any matter related to data protection at info@natsnap.es.

This Privacy Policy applies to people who visit the website, create an account, request or manage bookings, contact NatSnap, leave reviews, register as professionals, or publish experiences on the platform.

It also applies when the user uses third-party registration or login methods, such as Google or Facebook, always in relation to the account created on NatSnap.

NatSnap processes only the data necessary to provide its services, manage the platform, and comply with its legal obligations. Depending on how you use NatSnap, we may process the following categories of data:

• Identification and contact data: name and surname, email, telephone, and, where necessary for a booking, ID card, passport, or another identification document.
• Account data: encrypted password or access credentials, registration method, signup date, accepted terms version, and user preferences.
• Social login data: if you register or log in with Google or Facebook, we may receive your name, email, provider unique identifier, email verification status, and other authorized basic data. NatSnap does not receive your Google or Facebook password.
• Booking data: selected experience, dates, number of places, price, booking status, communications with NatSnap, and data needed to manage the experience.
• Payment data: payment information managed by Stripe. NatSnap does not store the full card number. We may receive transaction identifiers, payment status, card last digits, card brand, and data needed to manage charges, refunds, incidents, or disputes.
• Professional and tax data: tax name or company name, NIF/CIF, tax address, billing email, contact telephone, bank account or payout account, licenses, authorizations, insurance, and regulatory compliance declarations where necessary to publish experiences.
• User- or professional-generated content: reviews, ratings, photographs, texts, experience descriptions, messages, and other information published or sent through the platform.
• Technical and usage data: IP address, device identifiers, browser, operating system, logs, security events, browsing data, and cookies, as explained in the Cookies Policy.

We process your data for the purposes and legal bases indicated below:

NatSnap may allow registration and login through Google and Facebook. These providers act as external authentication services. Their use allows you to create or access a NatSnap account without creating a NatSnap-specific password.

When you choose this method, the provider may show you which data it will share with NatSnap. NatSnap will use that data to identify you, create or access your account, avoid duplicates, and maintain service security.

Use of Google or Facebook is also subject to the terms and privacy policies of those providers. You may manage or revoke permissions from your Google or Facebook account. If you wish to delete data associated with your NatSnap account or Facebook access, you may request it by writing to info@natsnap.es.

Payments are processed through Stripe. NatSnap does not store full card numbers or card security codes. Stripe may securely store the payment method and return technical identifiers to NatSnap that allow it to manage payments, refunds, authorized future charges, incidents, and disputes.

For certain bookings, NatSnap may request a payment method even if the charge is made later. In those cases, the user authorizes the payment method to be securely stored through Stripe so that the charges provided for in the Terms of Service and in the booking and cancellation policy can be applied.

We may disclose personal data where necessary to provide the service, comply with legal obligations, or manage the relationship with users and professionals.

• Professionals: when a client requests or confirms a booking, we may provide the professional with the data needed to manage the experience, contact the client, and provide the service.
• Clients: we may provide the client with necessary data about the professional or the experience to manage the booking, communication, and provision of the service.
• Stripe and payment providers: to process payments, save authorized payment methods, manage refunds, and prevent fraud.
• Technology providers: hosting, email, support tools, security, analytics, user management, and other providers needed to operate NatSnap.
• Google and Meta/Facebook: when the user uses registration or login through those providers.
• Public administrations, courts, tribunals, or authorities: where there is a legal obligation or where necessary to bring, exercise, or defend claims.

Some technology providers may be located outside the European Economic Area or process data from third countries. In those cases, NatSnap will seek appropriate safeguards, such as adequacy decisions, standard contractual clauses, or other mechanisms recognized by data protection regulations.

We will retain personal data for the time necessary to fulfill the described purposes and, subsequently, for the legal periods required to address tax, accounting, consumer, contractual, administrative, or claims-defense obligations.

• Account data will be retained while the account is active and then blocked for the applicable legal periods.
• Booking, payment, and invoicing data will be retained for the periods required by tax, accounting, and consumer regulations.
• Data processed on the basis of consent will be retained until you withdraw that consent or request deletion, unless another legal basis exists for retention.
• Technical and security data will be retained for the time necessary to protect the platform, prevent abuse, and handle incidents.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and, where applicable, not to be subject to solely automated individual decisions, by writing to info@natsnap.es.

You may also withdraw your consent at any time where processing is based on your consent. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

If you believe that we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency.

Account creation and bookings on NatSnap are reserved for persons over 18 years of age. Minors may participate in experiences when accompanied by a responsible adult and when the specific experience allows it.

NatSnap applies reasonable technical and organizational measures to protect personal data against loss, unauthorized access, alteration, disclosure, or destruction. However, no system is completely infallible, so users must keep their credentials protected and report any unauthorized use of their account.

NatSnap does not make decisions based solely on automated processing that produce legal effects concerning users or similarly significantly affect them. We may use technical rules to prevent fraud, protect payments, detect abuse, or improve platform security.

NatSnap may update this Privacy Policy to reflect legal, technical, or operational changes. Where changes are relevant, users will be informed through reasonable means.