Growtur · AI security & compliance

Your company already uses AI.Is it ready to meet its legal obligations?

AI is already part of marketing, bookings and operations. Now it is time to identify the obligations that apply, find the gaps and document how you use it.

From assessment to ongoing support

Three services. One legal roadmap for your AI.

Start with an audit, then agree the scope of implementation and ongoing support. Each proposal reflects your actual tools, data and AI uses.

01

Audit with compliance report

We review AI uses and the obligations affecting your organisation to identify gaps and prioritise action.

  • Inventory of tools, uses and data processed
  • Analysis of applicable obligations and risk levels
  • Compliance report with gaps and priorities
02

Implementation and documentation

We turn the report's findings into measures and documentation your team can apply in its daily work.

  • AI use policies and oversight protocols
  • Review of vendor clauses and documentation
  • Documentation of measures and responsibilities
03

Ongoing legal support

We support you as regulations, tools and AI uses change, so your documentation stays relevant.

  • Monitoring of relevant regulatory developments
  • Review of new uses or vendor changes
  • Documentation updates within the agreed scope

Obligations depend on the system, its use and the organisation's role. AI literacy and certain transparency obligations already apply; not every tourism tool is a high-risk system. Read the official AI Act timeline.

Gina Andrés (Georgina Andrés)

Technology and legal expertise

Meet the expert behind the legal work.

Gina Andrés

Lawyer specialising in data protection and regulatory compliance

Gina Andrés (Georgina Andrés) brings legal expertise to our AI compliance service. Her background includes legal advice on data protection, information society services and e-commerce.

Her legal expertise complements Growtur's experience in AI for tourism: understanding the legal framework and how your organisation works, within one service.

  • Data protection
  • Regulatory compliance
  • Legal advice

Destinations, institutions, associations and organisations

Public and associative sector: institutional policy, procurement clauses, transparency and training for staff and member businesses.

See the service

Business groups and companies

Chains, groups and tourism companies: corporate policy, shadow AI control, customer data protection and protection of sales agents.

See the service

Let's discuss your situation

Take the first step towards AI under control.

Tell us which tools you use and what you need to review: an audit, implementation or ongoing legal support. We will prepare a proposal tailored to your organisation.

The scope and terms are agreed in the proposal. The indicative self-check does not replace an audit or a legal opinion.

By submitting, you agree we process your data to reply to your enquiry.

Compliance also needs well-prepared teams.

Complement legal work with practical training. Our business course includes AI security and compliance alongside agents, GEO, CRM and data analysis.

Growtur × ITH Academy · New edition

Starts October 19, 2026

Expert AI Course for Tourism Companies

42 online hours to put AI to work in your business: from agents and security to new search positioning and campaigns.

6 modules · 42 hours · 100% online · ITH Academy + Growtur certificate

€315 + VAT

Up to 100% FUNDAE funding in Spain

  • AI security & compliance
  • New SEO/GEO positioning
  • ChatGPT Ads & 360° campaigns
  • CRM & customer loyalty
  • Processes with Gemini & Copilot
  • AI-powered data & decisions