Privacy policy
Last updated: 3 November 2026
Data controller
DNL (trading name of Daniel Fernando Carretero, sole trader) · NRT F-261867-N · Pleta de Soldeu, Building 1, 2, Scale B, 6th 1st, AD100 Soldeu, Canillo (Andorra) · dnl@dnlsoldeu.com
We process personal data in accordance with Andorran Law 29/2021 on the protection of personal data and, where applicable, the EU General Data Protection Regulation (GDPR).
1. What data we process and why
- Customer's name, email, phone and billing address: to manage the booking, payment and invoice and to contact you about your service. Legal basis: performance of the contract and legal (tax and accounting) obligations.
- Full name, age group and passport number of each passenger: to prepare the passenger list and provide it to the coach company (Andorra by Bus) and, where required by law, to the authorities (for example, at border controls between Andorra, Spain and France). Legal basis: performance of the contract and legal obligations for passenger transport.
- Payment data: to charge for the service. Card details are processed directly by the payment gateway (Redsys, through Creand Crèdit Andorrà); DNL does not store them. Legal basis: performance of the contract.
- Email (if you agree): to send you offers and information about our services. Legal basis: consent, which you can withdraw at any time.
- Browsing data: Website operation and statistics (see the Cookie Policy). Legal basis: legitimate interest or consent, depending on the type of cookie.
2. Data of other passengers and minors
If you provide data of other people traveling with you, you confirm that you are authorized to do so and that you have informed them of this policy. Data of minors must be provided by their parent or legal guardian.
3. How long we keep it
- Passenger data (including passports): automatically deleted 30 days after the end of the service, unless the law requires us to keep it longer.
- Booking and billing data: for the period required by tax and accounting law.
- Marketing data: until you withdraw your consent.
4. With whom we share it
- The providers of the services you book (Andorra by Bus for transfers, Sports Calbo for equipment hire and Grandvalira for lift passes) and, where applicable, the intermediaries through which DNL manages the booking. Only the data needed to provide that service is shared.
- The competent authorities, when required by law.
- Companies that provide services to us (web hosting with Hostinger, Redsys payment gateway of Creand Crèdit Andorrà, email delivery), which process data on DNL's behalf with the necessary safeguards.
We do not sell your data or share it for any other purpose.
5. Where it is stored
Our website is hosted on Hostinger servers, with access restricted to the people who manage bookings. Andorra has an adequacy decision from the European Commission, so data flows between Andorra and the European Union with equivalent safeguards.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to dnl@dnlsoldeu.com with your booking number. If you think we have not handled your request properly, you can complain to the Andorran Data Protection Agency (www.apda.ad) or, if you live in the EU or UK, to the data protection authority of your country.
7. Security
We apply technical and organisational measures to protect your data: encrypted connection (HTTPS), restricted access, masking of passport numbers on the website and automatic deletion.
8. Changes
We may update this policy. The version in force is always the one published on this page.
