Privacy Policy
Last updated: 20/01/2026
1) Who is the data controller?
Controller: HUNTY IBÉRICA S.L. ("Hunty")
Tax ID (CIF): B-26567826
Address: C/ Marqués de Larios nº38, 5ºC, CP 26006, Logroño (La Rioja), Spain
Privacy email: administracion@hunty.es
2) What data do we process?
Depending on how you interact with Hunty, we may process:
A) Account and registration data
- Email, password (in encrypted/hashed format), account status.
- Optional profile data: full name and phone number.
B) Data for contracting/managing bookings
- Name, surname, phone, email.
- Tax document: NIF/DNI/NIE/CIF (for invoicing/receipts if applicable).
- Purchase/booking data (product/session, date, amount, status, incidents).
C) Communications
- Messages sent through forms, email, web chat and/or WhatsApp.
- Communication metadata (date/time, channel).
D) Navigation and analytics data (cookies/identifiers)
- IP, online identifiers, navigation and conversion events (according to accepted cookies).
E) Facebook login
- If you register/log in with Facebook, Hunty receives the data you authorize in the Meta flow (usually identifier, email and/or name, depending on permissions).
We do not request particularly sensitive data. If you send us data of this nature in a message, we will process it only to the extent necessary to manage your request.
3) For what purposes and on what legal basis?
In accordance with the information duty of Art. 13 GDPR, we indicate purposes, legal basis and retention periods/categories.
Processing table
Processing | Purpose | Legal basis | Data | Retention |
Contact and inquiries | Respond to inquiries and manage information requests | Pre-contractual measures and/or legitimate interest (attend to user) | Identifying + communication | 12-24 months from the last interaction (unless there is a contract) |
Registration and account | Create/manage account, authentication, security | Contract performance (T&Cs) | Email, credentials, optional profile | While the account exists; then blocking and deletion due to reasonable inactivity (e.g. 24 months) |
Purchase/checkout and booking management | Process purchases/bookings, coordination with provider/organizer, support and changes | Contract performance / pre-contractual measures | Identifying + booking data + communications | During the relationship and, thereafter, according to legal periods |
Billing and accounting | Tax/accounting management, invoice/receipt issuance | Legal obligation | Identifying and tax data + transactions | According to applicable tax/accounting regulations (usually several years) |
Customer service via WhatsApp | Operational confirmations (booking received, organizer confirmation, location/instructions, review request) | Contract performance and/or legitimate interest (service) | Phone + messages | 24 months from case closure (recommended) |
Email marketing | Sending newsletters, offers and news | Consent (and unsubscribe in each send) | Email + preferences | Until consent is withdrawn or prolonged inactivity |
Analytics and advertising | Campaign measurement and attribution (GA4, Meta, Clarity, etc.) | Consent (cookies) | Online identifiers and events | According to cookie duration (see Cookie Policy) |
Security and fraud prevention | Logs, abuse control, platform security | Legitimate interest | IP/technical logs | Usually 6-12 months |
4) WhatsApp Business: how we comply with opt-in and opt-out
Hunty uses WhatsApp Business as a customer service and operational communication channel.
- We will only contact you via WhatsApp if you have provided your number (for example, at checkout/profile or if you write to us via WhatsApp).
- We do not send marketing via WhatsApp (only operational messages about your booking and service).
- You can request to unsubscribe at any time by replying "STOP" or "UNSUBSCRIBE" or writing to operaciones@hunty.es, and we will stop contacting you through this channel.
5) Who do we share your data with? (recipients)
We may share data when necessary to provide the service:
A) Providers/organizers of hunting sessions
To manage and execute the booking (confirmation, logistics, location, requirements, etc.).
(In a marketplace, this is essential and must be stated.)
B) Technology providers (data processors)
- Hosting/infrastructure: Hetzner (hosting and systems).
- CRM / emailing: ActiveCampaign (email communications management).
- Messaging and support: Chatwoot (conversation management) + WhatsApp Business.
- Payments: Stripe (payment processing, anti-fraud, reconciliation).
- Analytics/ads: Google Analytics, Meta (pixel/ads), Microsoft Clarity.
C) Public administrations and authorities
When there is a legal obligation or requirement.
6) International transfers
Some providers (for example, marketing, analytics or advertising platforms) may process data outside the European Economic Area. In that case, Hunty will apply appropriate safeguards (e.g., standard contractual clauses) or other valid mechanisms in accordance with applicable regulations.
7) Minors
The hunting session booking services are aimed at adults with legal capacity to contract and meet activity requirements.
If a minor contacts us, it is recommended that they do so with authorization from their legal representatives.
8) Data subject rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and the right not to be subject to solely automated decisions, by writing to administracion@hunty.es (or by postal mail to the address indicated), indicating the right you are exercising and proving your identity when necessary.
If you consider that the processing does not comply with regulations, you can file a complaint with the Spanish Data Protection Agency (AEPD).
9) Security
Hunty applies reasonable technical and organizational measures to protect data against unauthorized access, loss or alteration.
10) Changes to this policy
We may update this policy to reflect legal or service changes. The current version will always be published on the Website.