Privacy Policy
Last updated: 20/01/2026
1) Who is the controller?
Controller: HUNTY IBÉRICA S.L. (“Hunty”)
CIF: B-26567826
Address: C/ Marqués de Larios nº38, 5ºC, CP 26006, Logroño (La Rioja), Spain
Privacy email: administracion@hunty.es
2) What data do we process?
Depending on how you interact with Hunty, we may process:
A) Account and registration data
- Email, password (in encrypted/hashed form), account status.
- Optional profile data: full name and telephone number.
B) Data for contracting/managing bookings
- First name, surname, telephone number, email.
- Tax document: NIF/DNI/NIE/CIF (for invoicing/receipts where applicable).
- Purchase/booking data (product/hunting day, date, amount, status, incidents).
C) Communications
- Messages sent through forms, email, web chat and/or WhatsApp.
- Communication metadata (date/time, channel).
D) Browsing and analytics data (cookies/identifiers)
- IP address, online identifiers, browsing and conversion events (according to accepted cookies).
E) Facebook access
- If you register or log in with Facebook, Hunty receives the data you authorize in Meta’s flow (normally an identifier, email and/or name, depending on permissions).
We do not request specially protected data. If you send us data of this nature in a message, we will process it only to the extent strictly necessary to manage your request.
3) For what purposes and on what legal basis?
In accordance with the information duty under Article 13 GDPR, we state the purposes, legal bases and retention periods/categories.
Processing table
| Processing | Purpose | Legal basis | Data | Retention |
|---|---|---|---|---|
| Contact and enquiries | Respond to enquiries and manage requests for information | Pre-contractual measures and/or legitimate interest (assisting the user) | Identification + communications | 12–24 months from the last interaction (unless a contract is entered into) |
| Registration and account | Create/manage an account, authentication, security | Performance of the contract (T&Cs) | Email, credentials, optional profile | While the account exists; thereafter blocking and deletion after a reasonable period of inactivity (e.g. 24 months) |
| Purchase/checkout and booking management | Process purchases/bookings, coordinate with the provider/organizer, provide support and manage changes | Performance of the contract / pre-contractual measures | Identification + booking data + communications | During the relationship and thereafter according to legal periods |
| Billing and accounting | Tax/accounting management, issuing invoices/receipts | Legal obligation | Identification and tax data + transactions | According to applicable tax/accounting regulations (usually several years) |
| Customer service through WhatsApp | Operational confirmations (booking received, organizer confirmation, location/instructions, review request) | Performance of the contract and/or legitimate interest (service) | Telephone number + messages | 24 months from the end of the management process (recommended) |
| Email marketing | Sending newsletters, offers and news | Consent (and opt-out in each message) | Email + preferences | Until consent is withdrawn or prolonged inactivity |
| Analytics and advertising | Campaign measurement and attribution (GA4, Meta, Clarity, etc.) | Consent (cookies) | Online identifiers and events | According to cookie duration (see Cookie Policy) |
| Security and fraud prevention | Logs, abuse control, platform security | Legitimate interest | Technical IP/logs | Normally 6–12 months |
| Referral Programme | Manage participation in the Referral Programme, attribute registrations, bookings and Club subscriptions made through referral links, calculate and manage rewards and promotional balance, and prevent fraudulent or abusive use of the Programme. | Performance of the Programme conditions | Identification and account data, referral identifiers, information about registrations, bookings, Club subscriptions and rewards generated. | For as long as necessary to manage the Programme and thereafter for the applicable legal periods. |
4) WhatsApp Business: how we comply with opt-in and opt-out
Hunty uses WhatsApp Business as a customer-service and operational-communications channel.
- We will only contact you on WhatsApp if you have provided your number (for example, at checkout/in your profile or if you write to us on WhatsApp).
- We do not send marketing through WhatsApp (only operational messages about your booking and service).
- You can request to opt out at any time by replying “BAJA” or “STOP”, or by writing to operaciones@hunty.es; we will stop contacting you through this channel.
5) Who do we share your data with? (recipients)
We may disclose data where necessary to provide the service:
A) Providers/organizers of hunting days
To manage and perform the booking (confirmation, logistics, location, requirements, etc.).
(In a marketplace, this is essential and must be stated.)
B) Technology providers (data processors)
- Hosting/infrastructure: Hetzner (hosting and systems).
- CRM/emailing: ActiveCampaign (email-communications management).
- Messaging and support: Chatwoot (conversation management) + WhatsApp Business.
- Payments: Stripe (payment processing, fraud prevention, reconciliation).
- Analytics/ads: Google Analytics, Meta (pixel/ads), Microsoft Clarity.
C) Public administrations and authorities
Where there is a legal obligation or request.
6) International transfers
Some providers (for example, marketing, analytics or advertising platforms) may process data outside the European Economic Area. In that case, Hunty will apply appropriate safeguards (e.g. standard contractual clauses) or other valid mechanisms under applicable regulations.
7) Minors
The services for booking hunting days are intended for adults with legal capacity to contract and meet the activity requirements.
If a minor contacts us, it is recommended that they do so with the authorization of their legal representatives.
8) Data-subject rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and your right not to be subject to solely automated decisions, by writing to administracion@hunty.es (or by post to the stated address), indicating the right you are exercising and proving your identity where necessary.
If you believe that processing does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
9) Security
Hunty applies reasonable technical and organizational measures to protect data against unauthorized access, loss or alteration.
10) Changes to this policy
We may update this policy to reflect legal or service changes. The current version will always be published on the Website.