Privacy policy
Last updated: 31 July 2026
At Waymino, your journey is yours. This policy explains, with no small print, what data we process, why, and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
Gustavo Bargiela (Spanish tax ID: see the Spanish version of this policy), Rúa O Pinar, 17 bajo, 36400, O Porriño (Pontevedra), Spain. Email: hola@waymino.com.
2. What data we process and why
a) Buying in the store. Name, shipping address, email, phone and payment details (payment details are processed directly by the payment gateway; we never see your full card). Purpose: to manage your order, shipping, invoicing and tax obligations. Legal basis: performance of the contract and legal obligation.
b) Your travel journal (the band's digital service). When you activate your band you create a personal space where you can save photos, videos, notes and the stage or place where you created them. Purpose: to provide the service you bought, including creating your memory video when you reach Santiago. Legal basis: performance of the contract. Your journal is private by default: only you decide whether to share anything and with whom.
c) Emergency profile (optional). You may voluntarily add data such as allergies, medication, blood type or an emergency contact, so that whoever helps you can see them by holding a phone near your band. These are health data (special category, art. 9 GDPR): we only process them with your explicit consent, which you can withdraw at any time from your profile, deleting the data instantly. If you don't activate this feature, we process no health data at all.
d) Communications. If you join the mailing list or write to us, we use your email to reply or send you news. Legal basis: consent; you can unsubscribe in every email.
3. Recipients and processors
We don't sell your data to anyone. We work with providers that process data on our behalf under processing agreements (art. 28 GDPR): Shopify (store and payments), Supabase (digital service), Vercel (hosting), Resend (transactional emails, such as those to access your account) and the courier that delivers your order. Some providers are outside the European Economic Area (USA); in those cases the transfer is covered by the EU-US Data Privacy Framework or standard contractual clauses.
4. Retention periods
Order and invoicing data: the years required by tax and commercial law. Your travel journal: while your account is active; you can delete it yourself or ask us to delete it. Emergency profile: until you delete it or withdraw consent. Mailing list: until you unsubscribe.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to hola@waymino.com with a copy proving your identity. If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
6. Minors
The store and the digital service are intended for people over 14. If we detect data of children under 14 without their guardians' authorisation, we will delete it.
In case of any discrepancy, the Spanish version of this policy prevails.