1. Data controller
The Tours Andorra website is managed by Orgest, a trade name owned by Sebastian Diaz, identifier F-289640-Y and business registration number 928651 Y.
- Commercial address: Carrer Engordany, no. 7, 2nd floor, Escaldes-Engordany, Principality of Andorra.
- Customer office: Carrer de les Boïgues, s/n, Ed. Pic Blanc, Office 601, AD700 Escaldes-Engordany, Principality of Andorra.
- Telephone: +376 853 791.
- Email: info@toursandorra.com.
Personal data is processed in accordance with Qualified Law 29/2021 of 28 October on the protection of personal data of the Principality of Andorra (LQPD) and its implementing regulations.
2. Data we may process
Depending on your relationship with us, we may process identification and contact details; information about bookings, activities, services, dates, participants, preferences and special requirements; messages and comments; billing information and payment status; technical browsing, device, IP-address or campaign-identifier information; and professional details supplied by companies, agencies, partners or providers.
Where payment is made through an external gateway such as Redsys, Tours Andorra does not need to store full card details. We receive only the information required to identify the status of the transaction and manage the booking.
3. Purposes and legal bases
- Enquiries, quotations and requests: to respond to your request and prepare a proposal or potential booking.
- Pre-bookings and bookings: to organise activities, transfers, accommodation, experiences, concierge services and other requested services, and to manage changes, incidents and operational communications.
- Provider coordination: where necessary to supply the requested service, we may share the minimum required data with the activity, transport, accommodation, restaurant, guide, private-aviation or other provider involved.
- Payments and administration: to issue payment links, monitor payments, prevent fraudulent use and comply with applicable legal, tax, accounting or record-retention obligations.
- After-sales support and legal claims: to manage complaints, incidents or queries and, where appropriate, establish, exercise or defend legal claims.
- Marketing communications: only where there is a valid legal basis and, where required, with your consent. You may withdraw consent or unsubscribe at any time.
- Analytics and non-essential cookies: only after the relevant consent has been given through the cookie settings panel.
Applicable legal bases may include steps taken at your request before entering into a contract, performance of a contract, compliance with legal obligations, consent and, in certain circumstances, legitimate interests in system security, fraud prevention or the defence of our rights, subject to the balancing required by law.
4. Required information
Fields marked as required are necessary to process a request or booking. If they are not provided, we may be unable to handle the request correctly. Please ensure that the information is accurate, up to date and relates to you or to people for whom you have sufficient authority to provide it.
5. Recipients and service providers
We do not sell personal data. Our technology and professional service providers may access data where necessary to supply their services, subject to the applicable confidentiality and data-protection obligations.
To fulfil a booking, we may also disclose the strictly necessary information to final suppliers or partners — for example activity companies, transport providers, accommodation providers, restaurants, guides, wellness centres, private-aviation operators or brokers, and other providers involved in the request. Data may also be disclosed to public authorities, courts or law-enforcement bodies where required by law.
6. International transfers
Some technology providers or service suppliers may be located outside the Principality of Andorra. Where a disclosure constitutes an international data transfer, the safeguards required by Andorran law will be applied, taking into account, among other matters, any applicable adequacy decisions or appropriate safeguards.
7. Retention
Data is kept for as long as necessary for the purpose for which it was collected. Commercial enquiries that do not become bookings may generally be retained for up to 24 months so that we can follow up the request and retain the customer-service history, unless you request earlier deletion or another lawful basis applies.
Data relating to bookings, payments, invoices, complaints or contractual relationships may be kept for the additional periods required to meet legal obligations and address potential liabilities. Once no longer required, data will be securely deleted or anonymised.
8. Your rights
You may exercise your rights of access, rectification, objection, erasure, restriction of processing and data portability, and you may withdraw consent where processing is based on consent.
To exercise your rights, contact info@toursandorra.com, stating the right you wish to exercise and providing the information necessary to verify your identity. If you believe that your data has not been processed in accordance with the law, you may lodge a complaint with the Andorran Data Protection Agency (APDA).
9. Children
Requests and bookings must be made by people with sufficient legal capacity to contract or by their legal representatives. Where a booking includes children, we process only the information required to organise and properly deliver the service.
10. Security and confidentiality
We use reasonable technical and organisational measures to protect information against unauthorised access, loss, alteration or disclosure. Internal access is limited to people who need the information to manage the customer relationship or support the service.
11. Cookies and similar technologies
Necessary cookies may be used for site operation and security. Analytics, measurement or advertising cookies that are not strictly necessary are enabled only in accordance with the user’s preferences. Further information is available in our Cookie policy.
12. Changes to this policy
We may update this policy to reflect legal, technical or service changes. The version published on this page is the version applicable at any given time. Last updated: 15 August 2026.