Privacy Policy

Last updated: September 2026


This Privacy Policy explains how personal data is processed when you visit visitfinisterre.com, contact us through the website, or interact with services and links available through the website.


Visit Finisterre is operated by Lonkav Tuvi OÜ.


1. Data controller

The data controller responsible for the processing of personal data through this website is:

Lonkav Tuvi OÜ

Estonia

Email: hello@visitfinisterre.com


For questions about privacy or the use of your personal data, you can contact us at the email address above.


2. Personal data we process

Depending on how you use the website, we may process the following categories of information:


Information you provide directly

If you contact us through a contact form or by email, we may process information such as:

  • your name
  • your email address
  • the content of your message
  • any other information you voluntarily include in your enquiry

Please avoid submitting sensitive personal information unless it is necessary for your request.


Website and technical information

When you visit the website, certain technical information may be processed automatically, including:

  • IP address
  • browser and device type
  • operating system
  • pages visited
  • date and time of visits
  • referring website or source
  • approximate geographic location
  • information about how visitors interact with the website

Some of this information may be collected through cookies or analytics technologies, where permitted and, when required, only after you have provided consent.


3. Why we process personal data

Personal data may be processed for the following purposes:

  • to respond to enquiries and messages
  • to operate, maintain and secure the website
  • to understand how visitors use the website
  • to improve website content, structure and usability
  • to identify technical problems and monitor website performance
  • to manage consent and cookie preferences
  • to comply with applicable legal obligations

We do not sell personal data.


4. Legal basis for processing

Under the General Data Protection Regulation (GDPR), personal data must be processed on a valid legal basis.


Depending on the circumstances, we rely on the following legal bases:


Consent

Where analytics or other non-essential cookies or technologies require your permission, processing is based on your consent. You can withdraw or change your consent at any time through the available cookie settings.


Legitimate interests

Certain limited technical processing may be necessary for the operation, security, maintenance and improvement of the website, provided that these interests do not override your fundamental rights and freedoms.


Steps taken at your request

When you contact us with an enquiry relating to a possible service, collaboration or other arrangement, processing may be necessary in order to respond to your request.


Legal obligations

In some circumstances, information may need to be processed or retained in order to comply with applicable law.


5. Cookies and similar technologies

This website may use cookies and similar technologies.

Some cookies are strictly necessary for the website to function and do not require consent.


Non-essential cookies, including certain analytics or tracking technologies, are only activated where required after you have provided consent.


You can accept, reject or manage non-essential cookies through the cookie consent options available on the website.


More detailed information about the cookies and technologies used on this website should be provided in the website’s Cookie Policy or cookie settings.


6. Analytics

We may use analytics services to understand how visitors interact with the website.


Depending on your consent preferences, analytics data may include information such as:

  • pages viewed
  • approximate geographic location
  • device and browser information
  • traffic source
  • time spent on pages
  • interactions with website elements

Analytics information is used to understand website performance and improve the experience for visitors.


Where analytics technologies require consent under applicable law, they will not be activated before that consent has been given.


7. Contact forms and email enquiries

When you send an enquiry through the website or contact us by email, the information you provide is used primarily to respond to your request and communicate with you.


Your information will not be added to a marketing mailing list solely because you contacted us.


Contact information and correspondence are retained only for as long as reasonably necessary to handle the enquiry and any related follow-up, unless a longer retention period is required for legal or administrative reasons.


8. Third-party services and external websites

Visit Finisterre contains links to third-party websites and services, which may include:

  • accommodation providers
  • booking platforms
  • restaurants and local businesses
  • travel services
  • maps and navigation services
  • social media platforms
  • other external travel resources

When you follow an external link, you leave visitfinisterre.com and the third party may process your personal data according to its own privacy policy.

Visit Finisterre does not control the privacy practices of independent third-party websites and services.


We recommend reviewing the relevant privacy information before providing personal information to an external service.


9. Affiliate links

Some pages may contain affiliate links.

If you follow an affiliate link and subsequently make a booking or purchase through a third-party provider, Visit Finisterre may receive a commission or referral fee.


Where affiliate tracking technologies involve the storage of or access to information on your device, they will be used in accordance with applicable consent requirements.


Using an affiliate link does not normally increase the price you pay.

Affiliate relationships do not affect the editorial independence of Visit Finisterre.


10. Sharing of personal data

Personal data may be processed by service providers that help us operate the website, host its content, process enquiries, provide analytics or maintain technical infrastructure.


These providers may process data only where necessary to provide their services and subject to applicable data-protection requirements.

We may also disclose information where required by law, a competent authority or a valid legal request.


We do not sell or rent personal data to third parties.


11. International data transfers

Some service providers used by the website may process information outside the European Economic Area.


Where personal data is transferred internationally, appropriate safeguards required by applicable data-protection law will be used where necessary, such as an adequacy decision or approved contractual safeguards.


12. How long we keep personal data

Personal data is retained only for as long as necessary for the purpose for which it was collected.


Retention periods may vary depending on the type of information and the reason it is processed.


For example:

  • contact enquiries are retained for the period reasonably necessary to respond and manage related correspondence
  • technical and analytics data is retained according to the settings and retention periods of the relevant service
  • information required for legal or administrative purposes may be retained for the period required by applicable law

When personal data is no longer required, it is deleted or anonymised where appropriate.


13. Your data-protection rights

If the GDPR applies to the processing of your personal data, you may have the right to:

  • access your personal data
  • request correction of inaccurate or incomplete information
  • request deletion of your personal data
  • request restriction of processing
  • object to certain processing
  • receive certain personal data in a portable format
  • withdraw consent at any time where processing is based on consent

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.


To exercise your rights, contact:

hello@visitfinisterre.com


We may need to request sufficient information to verify your identity before processing a request.


14. Right to lodge a complaint

If you believe that your personal data has been processed in violation of applicable data-protection law, you have the right to lodge a complaint with a competent data-protection supervisory authority.


If you are located in Spain, you may contact the Agencia Española de Protección de Datos (AEPD).


You may also have the right to contact the supervisory authority in another EU or EEA country where you live, work or where the alleged infringement occurred.


15. Data security

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.


However, no website or online transmission method can guarantee absolute security.


16. Children’s privacy

This website is intended as a general travel-information resource and is not designed to collect personal information specifically from children.


If we become aware that personal information from a child has been submitted inappropriately, appropriate steps will be taken to delete it.


17. Changes to this Privacy Policy

This Privacy Policy may be updated when the website, the services we use or applicable legal requirements change.


The latest version will always be published on this page together with the date of the most recent update.