Privacy Policy

The controller of the personal data collected through heymogan.com is:

• Trade name: HeyMogan
• Domain: heymogan.com
• Contact email: [email protected]

The controller's full details (company name, tax ID, registered address) are available on request through the contact email above. You may contact the controller at any time to exercise your rights or raise any question about data protection.

Depending on the services you use, we collect:

• Contact form: name, email address and the content of your message.
• Business suggestions: details of the business and the contact details you provide.
• Subscriptions (guides, ebooks and other content): name, email address, country and preferred language.
• Experience bookings (handled through the Tour2B/Hub2B platform): name, email, phone number, number of participants and booking details. Payment is processed by Tour2B/Hub2B's secure payment gateway; HeyMogan does not store and has no access to full payment details.
• Paid business services (featured or premium listings): billing and tax details, processed through Stripe.
• Technical data collected automatically: IP address, browser type, device, pages visited and similar usage data. See our Cookie Policy for details.

We process your data to: answer your enquiries; manage the directory and business listings; process bookings of tourist experiences as an intermediary; send you the content you have requested (guides, newsletter); manage paid services and their invoicing; keep the website secure; and produce aggregate statistics on how the site is used.

The legal bases are: your consent (forms and subscriptions, which you may withdraw at any time); performance of a contract (bookings and paid services); and our legitimate interest in maintaining the security of the site and improving our services.

We share data only with the providers needed to run the service: Tour2B/Hub2B (booking management and payment), Stripe (payments for business services), our email delivery provider, hosting and analytics providers (Google Analytics). We never sell your personal data.

Some providers may process data outside the European Economic Area. Where this happens, transfers rely on adequacy decisions of the European Commission or standard contractual clauses that guarantee an equivalent level of protection.

We keep your data only as long as necessary for the purpose it was collected for: enquiries, while the conversation is handled; subscriptions, until you unsubscribe; booking and billing records, for the periods required by Spanish tax and commercial law (up to 6 years); technical logs, for limited security periods.

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected]. You also have the right to lodge a complaint with the Spanish supervisory authority, the AEPD (www.aepd.es).

We apply appropriate technical and organisational measures (encryption in transit, restricted access, secure providers) to protect your data against unauthorised access, alteration or loss.

The website is not aimed at children under 14. We do not knowingly collect data from minors; if you believe a minor has provided us with data, contact us and we will delete it.

The site contains links to third-party websites (for example Booking.com or business websites). We are not responsible for their privacy practices; we recommend reading their own policies.

We may update this policy to reflect legal or service changes. The current version will always be published on this page.

For any question about this policy or about your personal data: [email protected].