— Legal

Privacy policy

Last updated: 21 July 2026

Internova Turisme takes privacy seriously. This policy explains the personal data we process when you use this website or request a travel proposal, why we use it, our legal bases, recipients and your rights.

Data controller

The controller is the owner of this website (internovaturisme.com):

Controller
Internova Turisme
Tax number (NRT)
L-701338-W
Registered address
Ctra. d'Engolasters A 1 1 (Edifici Santa Maria), AD700 Escaldes-Engordany, Principat d'Andorra
Email
info@internovaturisme.com
Phone
+376 810 604

Data we process and why

We process only the data required to assist you. Depending on how you contact us:

Travel-proposal requests

The planner collects contact data and trip details such as dates, group composition, interests, accommodation preferences and relevant school, company or agency information. We use it to respond, prepare a tailored quote and manage the trip if booked.

Direct contact

When you contact us by email, phone or WhatsApp, we process the details and message content solely to answer the enquiry.

Browsing and measurement

Cloudflare Web Analytics measures aggregate traffic. With analytics consent, Google Analytics and campaign attribution are enabled. Separately, advertising consent allows Meta Pixel to record page views and conversions for measuring and optimising Facebook and Instagram campaigns. Each choice can be changed through the cookie policy.

Form security

Anti-spam and per-IP submission limits prevent automated abuse. IP addresses are processed temporarily for that purpose.

Legal bases

  • Steps requested before entering a contract and, where applicable, performance of the travel contract.
  • Separate consent for analytics cookies and advertising measurement through Meta Pixel, which can be withdrawn at any time.
  • Our legitimate interests in answering enquiries, securing the site and preventing fraud.
  • Compliance with applicable legal, accounting and tax obligations.

Who receives the data

We do not sell personal data. The following providers support site operation and measurement; Meta receives advertising events only after your specific consent:

Supabase

Secure database storing the requests you send.

Cloudflare

Website hosting, content delivery, internal request notifications and cookie-free web analytics.

Meta Platforms Ireland

Receives PageView, ViewContent, Contact and Lead events with technical identifiers only after advertising consent. The pixel receives no names, emails, phone numbers or planner answers.

These providers may process data on servers outside Andorra, including in the EU or other countries. Appropriate safeguards such as standard contractual clauses or adequacy decisions apply where required.

How long we keep data

Request data is kept while we manage the proposal and, if booked, throughout the commercial relationship. It is then restricted for applicable legal, tax and accounting periods before deletion or anonymisation.

If a proposal does not become a booking, we keep it for a reasonable period to handle related communication and then delete it.

Your rights

You may exercise the following rights:

  • Access personal data we process about you.
  • Correct inaccurate or incomplete data.
  • Request deletion when data is no longer needed.
  • Object to processing or request restriction.
  • Receive portable data and, where applicable, transmit it to another controller.
  • Withdraw consent without affecting earlier lawful processing.

To exercise a right, email info@internovaturisme.com stating which right you wish to exercise. We may request proof of identity and will respond within the applicable legal period.

If you believe your rights were not handled correctly, you may complain to the Andorran Data Protection Agency (APDA) or, if resident in the EU, your national supervisory authority.

Children

The planner is intended for adults. Where a family or educational request includes children, the responsible parent, guardian or institution provides the information and confirms it has the necessary authority. We do not collect data directly from children.

Security

We apply reasonable technical and organisational measures against unauthorised access, loss or alteration, including encrypted site communications and restricted access to requests.

Cookies

This site uses a minimum of cookies and similar technologies. Details and controls are available in the cookie policy.

Changes to this policy

We may update this policy for legal or processing changes. The current version and update date will always appear on this page.