1. Data controller
Controller: Wolfgang Braunschweig, NIF/NIE ESX2016413A, Lugar Siete Caras s/n, 29120 Alhaurín el Grande (Málaga, Spain). Privacy contact: privacy@activaviva.com.
Privacy Policy
This Privacy Policy explains how ActivaViva processes personal data when you use the website, contact us, activate experience updates or follow links to external booking providers.
2. Data we process
Depending on how you use ActivaViva, we may process contact details and message content you submit, your email address, language, selected search criteria, optional dream-experience description and update frequency. If you activate web push, we also process the browser-generated push endpoint and subscription keys needed for delivery. If you consent to analytics, we process interaction events such as impressions, clicks, searches, detail views and booking-partner clicks together with page, language, category, destination and a session identifier. If you also consent to personalization, a random pseudonymous visitor ID is linked to weighted interests such as activities, destinations and countries. Raw Smart Search text is not stored in the analytics database. Technical server requests may also contain IP address, browser/device information, requested URL, referrer and timestamp.
3. Purposes and legal bases
We process enquiries and requested service functions under the applicable contractual or legitimate-interest bases. Technical logs, fraud prevention and website security rely on our legitimate interest in a secure and reliable service. Experience-update emails and web-push notifications are based on consent. Analytics/statistics and cross-visit personalization are activated only after your consent (Art. 6(1)(a) GDPR); you can refuse or withdraw them without losing the core website functions.
4. Experience updates, email confirmation and web push
For email updates, we process your email address, language, selected criteria, optional text and frequency; email delivery becomes active only after double opt-in confirmation. For web push, activation requires your explicit click and browser permission; we store the device-specific push endpoint and browser-generated subscription keys together with the selected criteria and language. Push can be disabled at any time on ActivaViva or in the browser/device notification settings. We retain consent and withdrawal information as necessary to document your choice.
5. Analytics and personalization
With analytics consent, ActivaViva records first-party interaction events and loads self-hosted Matomo, configured without Matomo analytics cookies. These data are used to calculate impressions, click-through rates, search and detail engagement and booking-partner click rates, including position and source where available. With separate personalization consent, a random first-party visitor ID links those signals to a server-side interest profile used to rank more relevant experiences on later visits. The visitor cookie contains no name or email address. Withdrawing personalization deletes the interest profile and removes the visitor ID from retained event records; aggregate anonymous statistics may remain. Analytics also records the first browser language, a broad operating-system category, screen dimensions rounded to 100 pixels, and approximate country/city derived locally from the IP address. The raw IP is not stored in the analytics database. Analytics also records referring website domains, active time while the tab is visible, and clicked link destinations without URL query parameters or fragments.
6. Approximate location
Where location is used to suggest a nearby departure airport, ActivaViva uses approximate server-side geolocation. We do not store the visitor’s IP address for this purpose and do not send it to an external geolocation API. You can override the suggested airport manually.
7. External booking providers and affiliate links
ActivaViva is an intermediary and comparison platform. If you follow a booking link, you leave ActivaViva and the external provider processes data under its own privacy and cookie policies. The provider may receive information normally transmitted when a link is opened, including referral information. Booking, payment and customer-service data are handled by the provider concerned.
8. Service providers and recipients
We do not sell personal data and do not disclose your email address to third parties for their own advertising. Hosting, email-delivery and other technical providers may process data on our instructions only to the extent required to provide their services. Data may also be disclosed where required by law or to establish, exercise or defend legal claims.
9. International transfers
Some external booking or technical providers may operate outside the European Economic Area. Where ActivaViva itself uses a processor outside the EEA, transfers are made only where a valid transfer mechanism is available, such as an adequacy decision or appropriate safeguards. External booking providers are responsible for their own transfers after you leave ActivaViva.
10. Retention
We retain personal data only as long as necessary for its purpose. Experience-update data is kept while the subscription is active and where necessary afterwards to document consent or withdrawal. Analytics events are retained for a limited measurement period; pseudonymous personalization profiles are kept only while personalization remains active and useful. On withdrawal of personalization the server-side interest profile is deleted and the visitor identifier is removed from retained analytics events. Technical logs are retained for a limited period for security and troubleshooting.
11. Your rights and complaints
Subject to the applicable conditions, you have rights of access, rectification, erasure, restriction, data portability and objection, and you may withdraw consent at any time without affecting processing carried out before withdrawal. Contact privacy@activaviva.com to exercise your rights. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
12. Security, links and changes
We use appropriate technical and organisational safeguards, although no internet transmission can be guaranteed to be completely secure. External websites are governed by their own policies. We may update this Privacy Policy when services or legal requirements change. The current version is published on this page.
Stand / Last updated: 29 October 2026