Privacy Policy

1. Data Controller

The data controller responsible for the personal data collected through this website and platform ("Trekko") is:

• STAYTICK TRAVEL SL
• Tax ID (CIF): B67906602
• Registered address: Calle Islas Marshall 1, 1º E, 28035 Madrid, Spain
• Contact email: support@trekko.co

2. Information We Collect

• Information you provide directly: name, email address, phone number, agency details, payment information, and travel preferences when you register, make a booking, or contact support.
• Information collected automatically: IP address, browser type, pages visited, and platform usage data, through first-party and third-party cookies (see our Cookie Policy).

3. Purpose and Legal Basis

• Contract performance: managing your agency account and processing accommodation and travel service bookings.
• Legitimate interest: platform security, fraud prevention, and service improvement, including usage analytics.
• Consent: marketing communications and non-essential cookies, where you have expressly opted in.
• Legal obligation: retention of accounting and tax records required under Spanish law.

4. Data Processors (Sub-processors)

To provide the service, we share strictly necessary data with the following processors:

• Stripe — payment processing and fraud prevention.
• Google Analytics (Google Ireland Ltd.) — website usage analytics.
• AWS Cognito (Amazon Web Services) — identity management and account authentication.
• Accommodation and travel service suppliers (hotels, bed banks, transfer/car rental companies) — only the data necessary to fulfil the requested booking.

We do not sell or rent your personal data to third parties for marketing purposes. Some of these processors may process data outside the European Economic Area; where this occurs, we rely on GDPR safeguards such as the European Commission's Standard Contractual Clauses.

5. Data Retention

We retain your personal data for as long as you maintain an active Trekko account and, after account closure, for the periods required by Spanish accounting and tax law (generally up to 6 years from the last transaction, extendable for liability purposes under the Spanish Commercial Code). Booking records are retained as long as necessary to handle claims, warranties, and legal obligations.

6. Your Rights

Under the GDPR (EU) 2016/679 and Spanish data protection law, you have the right to:

• Access your personal data.
• Rectification of inaccurate data.
• Erasure ("right to be forgotten") where applicable.
• Object to processing.
• Portability of your data in a structured format.
• Restriction of processing in certain circumstances.

To exercise any of these rights, write to support@trekko.co, stating the right you wish to exercise and attaching proof of identity. We will respond within one month.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es if you believe the processing of your data does not comply with applicable law.

7. Security

We apply reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. However, no method of transmission over the Internet is completely secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email. The date of the last update appears at the bottom of this page.

9. Governing Law and Jurisdiction

This policy is governed by Spanish law. Any dispute relating to the processing of personal data shall be submitted to the courts of Madrid (Spain), without prejudice to the rights available to consumers under the law of their country of residence within the European Union.