Privacy Policy

The controller of your personal data is WAYURE TRAVEL, SOCIEDAD LIMITADA ("WAYURE"), registered office at Rúa Fernando III o Santo 32, 15701 Santiago de Compostela (A Coruña), Spain, VAT ES B67844159, Licence XG-803.

For any question about the processing of your personal data, write to hello@wayure.com.

This notice is provided under Regulation (EU) 2016/679 (GDPR) and Spanish Ley Orgánica 3/2018 (LOPDGDD).

We process the following categories of data:

• Identification and contact data: first name, surname, email, phone number.
• Travel data: preferences, travellers, dates and information needed to plan and deliver the trip.
• Contract and billing data: data required for the contract, payments and tax obligations.
• Account and app data: credentials to access the private area (Wayers Lounge), verified via a one-time code (OTP) sent by email or SMS.
• Technical and browsing data: logs, device data and cookies, as described in the Cookies section.

We process your data for the following purposes:

• Handling travel enquiries and proposals: pre-contractual measures at your request (Art. 6.1.b GDPR).
• Entering into and performing the travel contract and providing support and the private area: performance of the contract (Art. 6.1.b).
• Complying with legal, tax and accounting obligations: legal obligation (Art. 6.1.c).
• Sending push notifications about your booking: consent (Art. 6.1.a), withdrawable at any time.
• Sending commercial communications and newsletters: consent (Art. 6.1.a).
• Ensuring security and preventing fraud: legitimate interest (Art. 6.1.f).

The Wayure app (Wayers Lounge) lets clients with an active booking access their itinerary and travel information. Access is via registration and verification with a one-time code (OTP) sent by email or SMS.

With your consent, the app may send you push notifications with updates about your trip. To deliver them we store a device identifier (notification token). You can turn notifications off at any time in your device settings.

The app does not use your data for third-party advertising and does not sell your personal data.

Your data may be processed by service providers acting as processors on our behalf, including: Supabase (database and authentication infrastructure, servers in the European Union), Vercel (website hosting), Stripe (payment processing), email and messaging providers used to send communications and OTP codes, and MailerLite (newsletter).

Data may also be shared with travel service providers (accommodation, transport and local partners) strictly as needed to deliver your trip, and with public authorities where required by law.

We do not sell your personal data to third parties.

We keep data for as long as necessary for the purposes for which it was collected:

• Enquiries and contacts without a contract: up to 24 months from the last contact, unless you request earlier deletion.
• Contract and billing data: for the duration of the relationship and thereafter for the period required by applicable tax, accounting and legal limitation obligations.
• Data processed on the basis of consent (newsletter, notifications): until consent is withdrawn.

Once the retention periods end, data is deleted or anonymised.

You may exercise at any time your rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent, by writing to hello@wayure.com.

You also have the right to lodge a complaint with the competent supervisory authority. In Spain this is the Agencia Española de Protección de Datos (www.aepd.es).

The website uses technical cookies necessary for its operation and, subject to your consent, analytics and marketing cookies. You can manage your preferences through the cookie banner.