This policy explains what personal data WalkaMundi collects, why, and the rights you have over it under the EU General Data Protection Regulation (GDPR).
WalkaMundi ("we", "us") is the service described on this website and in the mobile app, operated by CARTOVISION. For any privacy matter you can reach us at contact@walkamundi.com.
Depending on how you use WalkaMundi, we may process:
We process this data to provide the service (performance of a contract), to keep it secure and improve it (legitimate interest), and where required, with your consent — which you can withdraw at any time.
We share data only with the providers needed to run WalkaMundi — for example app-store payment processing, cloud hosting, mapping and AI text-to-speech services. These act as our processors under contract. We never sell your personal data.
Some providers may process data outside the European Economic Area. When that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We keep personal data only as long as needed for the purposes above or as required by law, and then delete or anonymize it. When you delete your account, your profile, credits and saved tours are erased.
You can delete your account at any time from the app's profile screen. Deletion is permanent and removes your profile, credits and saved tours, and revokes the Sign in with Apple token where applicable. To prevent abuse of one-time promotions (such as free-trial tours or single-use coupons), we retain a one-way, irreversible cryptographic hash derived from your sign-in provider identifier. This value does not contain your email, name or any readable personal data and cannot be reversed to identify you; it is used solely to detect a previously deleted account re-registering to claim the same one-time benefit. We rely on our legitimate interest in preventing fraud (GDPR Art. 17(3)) to retain this minimal record after deletion.
WalkaMundi uses a Meta application to publish national-day content to its own Facebook Page and professional Instagram account. An authorized administrator connects these accounts. Visitors do not need to sign in with Facebook or Instagram to use this website or view its social section.
To operate this connection, we store the linked Page and account identifiers, account name, access credentials, and publication records (post identifiers, dates and status). We use these data to publish content, check publication results and prevent duplicates. The current publishing automation does not read private messages or collect visitors' Facebook or Instagram profile data.
Access credentials are kept on the server and are not included in the public website. We retain connection data and publication records only for as long as needed for these purposes or to meet legal obligations. The account administrator can revoke authorization in Meta. To request deletion of the associated data held by WalkaMundi, follow our data deletion instructions.
Read the data deletion instructions
The Facebook panel loads public posts directly from Meta. When it loads, Meta may receive your IP address and browser information and use cookies according to its own policies. This is separate from the server connection used to publish posts. You can control third-party content in your browser; our social profile links remain available.
Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to certain processing. You can delete your account and personal data directly from the app at any time. You may also lodge a complaint with your local supervisory authority (in Spain, the Agencia Española de Protección de Datos). To exercise any right, write to contact@walkamundi.com.
We use reasonable technical and organizational measures to protect your data. No system is perfectly secure, but we work to keep yours safe.
WalkaMundi is not directed at children under the age required by your local law, and we do not knowingly collect their data.
We may update this policy. We'll post the new version here with a fresh "last updated" date.