Privacy policy

1. Data controller

The controller of the personal data you provide on this site is Turismo Aventura Y Recreacion Spa (Chilean tax ID 77.795.387-7), registered at Nevados Lonquimay 3816, Temuco, Chile, owner of the Correntinos Rafting brand. Contact: correntinosrafting@gmail.com.

2. What data we collect

To manage your booking: name, national ID or passport, phone, email, country and the age of each participant.

Health data: the pregnancy and medical condition declaration for participants. We ask only for safety during the activity, and only the management team and the guides on your departure can see it.

If you use the contact or quote forms: name, email, phone, institution and your message.

3. How we use it

To manage your booking and payment, send your confirmation, departure reminder and review request, and keep you safe on the river.

Only if you expressly agree with the corresponding checkbox will we send you promotions. You can withdraw this consent at any time.

4. Who we share it with

With the providers needed to run the service: the payment gateway, the email delivery service and the platform that hosts the database. We never sell or transfer your data to third parties for marketing purposes.

You enter your card details directly on Flow, our payment gateway. This website never sees or stores them.

5. How long we keep it

We keep bookings, payments and your contact details for 6 years from your last booking, to meet tax and accounting obligations. After that we delete them.

We delete the medical information you declare 30 days after your trip.

If you agreed to receive promotions, you can unsubscribe at any time and we will stop using your data for that purpose.

6. Your rights

Under Chilean Law 19,628 and Law 21,719 on personal data protection, you can request access, rectification, erasure, objection, portability and restriction of processing of your data by writing to correntinosrafting@gmail.com.

7. Security

We store your data with role-based access controls: only authorized staff can see it. Connections to the site are encrypted.