Privacy Policy

Introduction

This Privacy Policy explains how Global Network 4 You S.L. ("WhatToday", "we", "us") collects, uses, stores and protects personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish data protection law (LOPDGDD).

1. Data controller

2. Data we collect

2.1 Booking data

• Full name
• Email address
• Phone number
• Number of participants
• Booking date and activity details
• Payment reference (we do not store full card numbers)

2.2 Technical data

• IP address
• Browser type and version
• Device type
• Pages visited and time on site
• Referral source

2.3 Communication data

• Customer support messages
• Review and feedback content

3. How we use your data

We process your data for the following purposes:

• Processing and confirming bookings (legal basis: contract performance)
• Sending booking confirmations and updates (legal basis: contract performance)
• Customer support and complaint handling (legal basis: legitimate interest)
• Platform security and fraud prevention (legal basis: legitimate interest)
• Legal compliance and regulatory obligations (legal basis: legal obligation)
• Marketing communications, with your consent (legal basis: consent)

4. Data sharing

We share your data only where necessary:

• With the activity provider to fulfill your booking
• With Stripe for payment processing (Stripe Privacy Policy: stripe.com/privacy)
• Supplier ratings shown on our platform are provided by Google Maps Platform; use of this feature is subject to the Google Privacy Policy (policies.google.com/privacy). No personal customer data is shared with Google for this feature.
• With email service providers for booking confirmations
• With analytics providers (anonymized data only)
• With authorities where required by law

We do not sell personal data to third parties.

5. Data retention

6. Your rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (where legally permitted)
• Object to processing
• Withdraw marketing consent at any time
• Request data portability
• Lodge a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es

7. Cookies

We use cookies for platform functionality, analytics and marketing. See our Cookie Policy at www.whattoday.app/cookies for full details and opt-out options.

8. International transfers

Where data is transferred outside the EU/EEA, we ensure adequate protection through Standard Contractual Clauses approved by the European Commission.

9. Supplier applications

When a business applies to sell through WhatToday, we collect the company details, contact details, operating information and insurance information provided on the application form, together with a record of the agreement version accepted, the date and time of acceptance, and the IP address and browser used to accept it. We use this to assess the application, to contact the business about it, to meet our own legal and insurance obligations, and to keep proof of what was agreed. Our lawful basis is the performance of a contract, or steps taken at the applicant's request before entering one, together with our legitimate interest in keeping a record of agreements we have entered into. If the application leads to a partnership, we then collect the further tax, identity and banking information required to onboard you — including the details we are obliged to verify and report to the Spanish Tax Agency under DAC7 (Modelo 238) — and the identity verification carried out by our payment processor, Stripe. We keep applications for 24 months from our last contact about them, and longer only where a partnership began, in which case the record is kept for as long as that relationship lasts plus the period required by law. We do not sell this information and we do not pass it to other travel platforms. To ask for a copy of your data, or for it to be corrected or deleted, write to us at the address on this page.

10. Contact

For any privacy-related questions or to exercise your rights, contact us at: admin@whattoday.app

Last updated: 29 August 2026