Privacy policy
Last updated:
This policy explains how Visit NOA (“we”, “us”) handles personal data on visitnoa.com. It should be read together with our cookie policy, our affiliate disclosure and our terms and conditions.
Draft pending operator details. The items marked
[PLACEHOLDER]below must be completed by the site operator before publication, and this policy should be reviewed by a qualified lawyer in the operator’s jurisdiction. It is not legal advice.
Who is responsible for your data
The operator of visitnoa.com, and the controller of the personal data described here, is:
- Legal name:
[PLACEHOLDER: registered company or sole trader name] - Registered address:
[PLACEHOLDER: full postal address] - Company or tax registration number:
[PLACEHOLDER: e.g. NIF/CIF, CUIT, company number] - Country of establishment:
[PLACEHOLDER: country] - Contact: hello@visitnoa.com
- Data protection officer:
[PLACEHOLDER: name and contact, or state that no DPO is required]
A short summary
Visit NOA is a static website. We do not ask you to create an account, we do not run analytics or advertising, and we do not set any cookies. The only personal data we process is the technical information our hosting provider records in order to serve the site, plus anything you choose to send us by email.
What personal data we collect
Information our host records automatically. When your browser requests a page, our hosting provider records technical information in server logs. This typically includes your IP address, the date and time of the request, the page or file requested, the HTTP status returned, your browser’s user agent string and, where your browser sends one, the referring page. An IP address is personal data in many jurisdictions, which is why it is listed here.
Information you send us. If you write to us at hello@visitnoa.com, we receive your email address, your name if you give it, and whatever you choose to put in the message.
What we do not collect. We do not collect payment or credit card details — bookings happen on our partners’ websites, never here. We do not run analytics, advertising or social media tracking. We do not operate a newsletter or any other subscription at this time; if we add one, we will update this policy before it goes live. We do not knowingly collect personal data from children.
Why we process it, and on what legal basis
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Delivering the website to your browser | Server log data | Legitimate interests — operating the service you requested |
| Keeping the site secure, and detecting abuse, attacks and errors | Server log data | Legitimate interests — network and information security |
| Replying to messages you send us | Your email and its contents | Legitimate interests, or performance of a contract where your message concerns one |
| Remembering that you dismissed the notice about our cookie policy | A single local storage value on your own device, which we never receive | Strictly necessary to provide a feature you asked for |
Where our legal basis is legitimate interests, we have considered your rights and interests and concluded that this limited processing does not override them. You may object to it at any time, as described under Your rights.
Affiliate links and tracking
Some links to tours and activities on this site are affiliate links to our booking partners, principally Viator. We do not track your clicks, set any cookie, or receive any personal data about you when you follow one. The affiliate attribution travels in the link’s own web address.
When you arrive on a partner’s website, that partner becomes responsible for your data and its own privacy and cookie policies apply. Our partners typically report to us, in aggregate, that a booking originated from Visit NOA and what commission is due. That reporting does not identify you to us. Our affiliate disclosure explains the arrangement in full.
Analytics
We do not currently use any analytics service. If we introduce one, we will update this policy and our cookie policy before it goes live and, where the law requires consent, we will ask for yours before any non-essential technology is used.
Who else processes your data
We rely on a small number of service providers, who act as our processors or as independent controllers:
| Provider | Role | What it handles | Where |
|---|---|---|---|
[PLACEHOLDER: hosting and CDN provider] |
Hosting, content delivery, security | Server logs, request routing | Global edge network |
[PLACEHOLDER: email provider for hello@visitnoa.com] |
Messages you send us | [PLACEHOLDER: region] |
|
[PLACEHOLDER: source code and content hosting] |
Stores the site’s content and code | No visitor data | [PLACEHOLDER: region] |
Our booking partners, including Viator, are independent controllers of any data you give them on their own websites. We are not responsible for their processing.
We do not sell personal data, and we do not share it for advertising purposes.
International transfers
Our hosting and service providers may process data outside your country, including in the United States. Where data originating in the European Economic Area or the United Kingdom is transferred outside it, that transfer relies on an appropriate safeguard — typically the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision. [PLACEHOLDER: confirm the specific mechanism each provider relies on.]
How long we keep it
- Server logs: retained by our hosting provider for its standard period, typically no more than
[PLACEHOLDER: confirm retention period with the hosting provider], then deleted or aggregated. - Email correspondence: kept for as long as needed to deal with your enquiry and, afterwards, for as long as we may need it to establish, exercise or defend a legal claim.
- Local storage on your device: until you clear your browser’s site data. We never receive it.
Your rights
Depending on where you live, you may have the right to request access to the personal data we hold about you; to have it corrected or erased; to restrict or object to its processing; to receive it in a portable form; and, where processing is based on consent, to withdraw that consent at any time without affecting prior processing.
To exercise any of these, write to hello@visitnoa.com. We will respond within the period the applicable law requires, and we may need to ask you for information to confirm your identity.
Because we hold very little data and none of it identifies you by name, we may be unable to connect a request to a specific person. Where that is the case, the law generally does not require us to collect additional data purely in order to do so, and we will explain this in our reply.
If you are unhappy with our response, you may complain to your supervisory authority:
- European Union: the data protection authority of your country of residence, of your workplace, or of the alleged infringement.
- Spain: the Agencia Española de Protección de Datos (aepd.es).
- United Kingdom: the Information Commissioner’s Office (ico.org.uk).
- Argentina: the Agencia de Acceso a la Información Pública (argentina.gob.ar/aaip).
Which laws apply
Visit NOA is published from [PLACEHOLDER: country of establishment] and read internationally. Depending on where you are, this policy is intended to meet the requirements of the EU General Data Protection Regulation (2016/679), the UK GDPR and Data Protection Act 2018, Spain’s Ley Orgánica 3/2018 (LOPDGDD) and Ley 34/2002 (LSSI-CE), and Argentina’s Ley 25.326 de Protección de los Datos Personales.
[PLACEHOLDER: confirm with counsel which of these in fact apply to the operator, and add any further regime — for example a US state privacy law — that applies to your audience.]
Changes and contact
We may update this policy when the site, or the way we work, changes; the date at the top of the page shows the latest revision. Where a change materially affects your rights, we will say so on this page. For anything in this policy, write to us at hello@visitnoa.com.