Privacy Policy

This page explains how Castro Park processes the personal data that users can provide through the website, contact forms, email, telephone, reservations, inquiries about activities, groups, birthdays, camping or motorhome area.

Basic information on data protection

In compliance with applicable data protection regulations, users of this website are informed of how their personal data is processed when they contact Castro Park, request information, make queries, manage reservations or use the services available on the website.

Responsible Castro Urdiales Eco-Adventure Park, S.L.
Purpose Manage queries, reservations, requests for information, communications and contracted services.
Legitimation Execution of pre-contractual or contractual measures, consent, legal obligation and legitimate interest.
Rights Access, rectification, deletion, opposition, limitation, portability and other rights recognized by regulations.

Personal data that we can process

Castro Park may process the personal data that the user voluntarily provides through web forms, email, telephone, reservation systems or other enabled means of contact.

Depending on the type of consultation or service requested, the data processed may include:

  • Name and surname.
  • Email.
  • Contact telephone number.
  • Data included in the message or query sent.
  • Data related to reservations, number of attendees, dates, times, requested activities, birthdays, groups, camping or motorhomes.
  • Billing or payment data, when necessary to manage a contracted service.
  • Technical data associated with navigation, as indicated in the cookie policy.

Especially sensitive data should not be sent unless it is strictly necessary to manage an activity securely. In that case, they will be processed solely for that purpose.

Treatment purposes

The personal data provided by users may be processed for the following purposes:

  • Respond to queries sent through forms, email, telephone or other contact channels.
  • Manage requests for information about activities, zip lines, circuits, birthdays, groups, camping, motorhomes, barbecues and other services offered by Castro Park.
  • Manage reservations, availability, schedules, operational communications and customer service.
  • Manage the provision of services contracted by the user.
  • Issue invoices, supporting documents or administrative documents when appropriate.
  • Comply with legal, fiscal, accounting, administrative or security obligations.
  • Manage possible incidents, claims, responsibilities or communications related to the park's activities.
  • Send commercial or promotional communications only when there is user consent or a legal basis that allows it.
  • Guarantee the technical security of the website, prevent abuse, fraud, unauthorized access or improper use of the site.

Legal basis of treatment

The legal basis for data processing will depend on each specific purpose:

  • Execution of pre-contractual or contractual measures: when the user requests information, makes a reservation, hires a service or requests the management of a specific activity.
  • Consent: When the user checks a box, accepts the sending of communications, voluntarily submits a form or authorizes specific processing.
  • Compliance with legal obligations: when it is necessary to retain or communicate data for tax, accounting, administrative, consumer, security or any other applicable legal obligation.
  • Legitimate interest: to maintain the security of the website, address complaints, prevent improper use or defend the rights and legitimate interests of Castro Park.

Minor data

Castro Park offers activities in which minors can participate, but requests, reservations or communications made through the website must be managed by adults, fathers, mothers, legal guardians or authorized responsible persons.

Minors should not send personal data through this website without authorization from their parents or legal guardians. When it is necessary to process data related to minors to organize an activity, birthday, group or reservation, said data will be used only to correctly manage the requested service and apply the necessary organization and security measures.

Data recipients

In general, Castro Park will not transfer users' personal data to third parties, unless there is a legal obligation, it is necessary to provide the requested service or the user has given their consent.

However, for the ordinary operation of the activity, some providers may access personal data as data processors. These may include providers of web hosting, computer maintenance, email, reservation management, advice, billing, payment gateways, insurance, legal services or tools necessary for the operation of the website.

Data may also be communicated to public administrations, authorities, courts, security forces and bodies, insurance entities or other third parties when there is a legal obligation or it is necessary to manage a claim, incident or liability derived from the service.

International transfers

Castro Park will try to use providers that process data within the European Economic Area. If technological services are used that may involve international data transfers, these will be carried out only when there are adequate guarantees in accordance with applicable regulations.

Data retention period

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected and, subsequently, for the periods necessary to meet possible legal, fiscal, administrative, contractual obligations or responsibilities arising from the processing.

As a guide:

  • The data sent in queries will be kept for the time necessary to respond and manage the request.
  • The data associated with reservations or services will be kept for the duration of the relationship with the user and during the applicable legal periods.
  • Billing data will be kept for the periods required by tax and accounting regulations.
  • The data processed based on consent will be kept until the user withdraws said consent.
  • The technical data and cookies will be kept in accordance with what is indicated in the cookie policy.

User rights

Users can exercise the rights recognized by data protection regulations, including:

  • Right of access to your personal data.
  • Right to rectify inaccurate or incomplete data.
  • Right to delete data when applicable.
  • Right to object to treatment.
  • Right to request limitation of treatment.
  • Right to data portability, when applicable.
  • Right not to be subject to automated individual decisions, when applicable.
  • Right to withdraw consent at any time, without affecting the legality of the treatment previously carried out.

To exercise these rights, the user can write to info@castropark.es, indicating the right you wish to exercise and providing the necessary information to prove your identity.

If you consider that the processing of your data does not comply with the regulations, the user can also file a claim with the Spanish Data Protection Agency.

Data accuracy

The user guarantees that the data provided is correct, true and up to date. Likewise, you undertake to communicate any modification to them so that the information processed by Castro Park is adequate and up to date.

When the user provides data from third parties, they declare that they have sufficient authorization to do so and undertake to inform said parties about the content of this privacy policy.

Commercial communications

Castro Park will only send commercial, promotional or informative communications when there is a legal basis that allows it, especially when the user has given their consent or when the communication is related to previously requested or contracted services.

The user may object to receiving commercial communications or withdraw their consent at any time through the channel indicated in the communication or by writing to info@castropark.es.

Data security

Castro Park will apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, misuse or unauthorized disclosure.

However, the user must keep in mind that no system connected to the Internet can guarantee absolute security. Therefore, it is also recommended to make responsible use of the forms, emails and contact channels available.

Cookies and similar technologies

This website may use its own and third-party cookies to enable its operation, improve the browsing experience, analyze website use or integrate external services. Detailed information on the use of cookies is collected in the cookie policy.

Social networks and external services

Castro Park may have a presence on social networks or use external services integrated into the web, such as maps, reservation systems, forms, payment platforms or analysis tools. The use of said services may involve the processing of data by their respective owners, in accordance with their own conditions and privacy policies.

Modification of the privacy policy

Castro Park may modify this privacy policy when necessary to adapt it to regulatory, technical, organizational changes or modifications in the services offered through the website.

In the event of relevant changes, efforts will be made to inform users by reasonable means available.

Last update: May 2026.

follow us