Privacy Policy

Mediterranean Soul Experience, S.L.

Last updated: [17/08/2026]
At Mediterranean Soul Experience, S.L., we are committed to protecting the privacy of our clients, travelers, users, and collaborators.

This Privacy Policy explains how we collect and process personal data when someone visits our website, requests information, makes a reservation, contracts our services, participates in an experience, or contacts us.
We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable regulations.

1. DATA CONTROLLER

Controller: Mediterranean Soul Experience, S.L.

Tax ID: B88691688
Registered office: C/ President Lluís Companys, 40, 3rd floor, 1st door
43860 L’Ametlla de Mar (Tarragona), Spain
Email: info@mediterranean-soul-experience.es
Telephone: +34 624057831 (Spanish, German, Romanian)
+34 624441674 (Spanish, Catalan, English, German, French)
Website: www.mediterranean-soul-company.es
Hereinafter, Mediterranean Soul Experience, the Agency, or the Company.

2. WHAT PERSONAL DATA DO WE PROCESS?

Depending on your relationship with Mediterranean Soul Experience, we may process the following categories of data:

2.1. Identifying data

• First and last name.

• Identity document or passport, when necessary.

• Date of birth, when necessary for the provision of certain services.

• Nationality, when necessary for contracting or providing the service.

2.2. Contact Information

• Email address
• Telephone number
• Postal address, when necessary for providing the service or for billing.

2.3. Booking and Travel Information

• Travel dates
• Destination
• Number of travelers
• Services booked
• Accommodation
• Activities and experiences booked
• Travel preferences
• Information necessary to organize and execute the contracted services.

2.4. Financial and Billing Information

We may process the data necessary to:
• manage payments;

• verify bank transfers received;

• identify a booking;

• issue invoices;

• manage refunds;

• maintain legally required accounting and tax records.

Mediterranean Soul Experience does not process payments with bank cards or use external payment platforms for bookings. Customers will pay exclusively by bank transfer to the account specified by Mediterranean Soul Experience.
Mediterranean Soul Experience will not request or store complete bank card details.

3. INFORMATION PROVIDED FOR SPECIAL NEEDS

To properly prepare certain experiences and, when necessary, ensure the correct provision and safety of the contracted services, Mediterranean Soul Experience may request information about the traveler’s special needs.

This information may include, depending on the case:

• food allergies;

• food intolerances;

• dietary needs;

• mobility or accessibility needs;

• specific needs for participating in certain activities;

• other circumstances whose communication is necessary to properly organize the trip.

Mediterranean Soul Experience will request only the information necessary to provide the service.

You will not need to provide medical diagnoses, medical histories, or other health information that is not relevant to organizing or safely conducting the activity.

For example, when a restaurant needs to know about a food allergy, it is sufficient to provide the information needed to prepare the service, without transmitting additional medical information the provider does not need.

4. HOW CAN THIS DATA BE PROVIDED?

Information regarding special needs may be provided:
• directly by the traveler to Mediterranean Soul Experience;

• through a specific form sent to the traveler;

• through a partner travel agency, when the booking has been managed by said agency;

• or through another secure channel established by the tour operator.

When a partner agency provides the data and not the traveler directly, Mediterranean Soul Experience will process it in accordance with applicable regulations and provide the data subject with the legally required information.

When necessary, the traveler will be informed of the origin and categories of the data received.

The Spanish Data Protection Agency (AEPD) states that, when data is not obtained directly from the data subject, the controller must provide information on its origin and the categories of data processed.

5. HEALTH DATA AND SPECIAL CATEGORIES

Some health-related information may constitute special categories of personal data under Article 9 of the GDPR.

Therefore, Mediterranean Soul Experience will apply enhanced security measures when processing this type of information.

As a general rule, when the processing of health-related data is based on consent, this consent must be explicit, specific, and informed.
The Spanish Data Protection Agency (AEPD) considers health-related data a specially protected category and indicates that its processing is generally prohibited unless one of the exceptions provided for in Article 9 of the GDPR applies, including explicit consent where appropriate.
Requesting information about special needs does not imply that Mediterranean Soul Experience will request a medical history.
Only the information necessary to:
• adapt a meal;

• communicate a relevant allergy to the provider;

• adapt an activity;

• facilitate accessibility;

• assess the necessary conditions for participating in an experience; • or adopt reasonable security measures.

6. PURPOSES OF PROCESSING

Mediterranean Soul Experience may process personal data for the following purposes:

6.1. Responding to information requests
Responding to inquiries made through:
• forms;

• email;

• telephone;

• social media, where applicable;

• or other contact channels.
Legal basis: adoption of pre-contractual measures and, where applicable, consent or legitimate interest.

6.2. Managing bookings and contracts

We will use the necessary data to:
• formalize bookings;

• manage contracts;

• organize trips and experiences;

• manage accommodations;

• coordinate activities;

• organize transportation;

• manage meals;

• coordinate suppliers;

• send confirmations;

• send travel-related documentation;

• manage modifications;

• manage cancellations;

• address issues.

Legal basis: performance of the contract or application of pre-contractual measures requested by the data subject.

6.3. Managing payments

The data will be used to:

• identify bank transfers;

• verify payments;

• associate them with a booking;

• manage outstanding payments;

• manage refunds;

• issue invoices.

Legal basis: performance of the contract and compliance with legal obligations.

6.4. Complying with legal obligations

The data may be processed when necessary to comply with:

• tax obligations;

• accounting obligations;

• commercial obligations;

• tourism obligations;

• consumer protection obligations;

• fraud prevention obligations;

• or any other applicable legal obligation.

Legal basis: compliance with a legal obligation.


6.5. Managing Claims and Incidents

Data may be used to address:

  • claims;
  • requests;
  • incidents;
  • post-trip inquiries;
  • procedures related to service provision.

Legal basis: performance of the contract, compliance with legal obligations, and legitimate interest where applicable.

6.6. Sending Marketing Communications

 

Mediterranean Soul Experience may send marketing communications about:

  • new trips;
  • experiences;
  • news;
  • events;
  • special offers;
  • content related to the Company’s business.

When necessary, we will send these communications only after obtaining the corresponding consent.

The user may withdraw their consent at any time.

Each marketing communication will also allow the user to unsubscribe from future communications.

6.7. Improving Services

 

We may use certain data to analyze and improve:

  • our services;
  • booking processes;
  • customer service;
  • experiences offered;
  • Organization of trips.

When processing is based on legitimate interest, we will respect the rights and freedoms of the data subjects.

  1. LEGAL BASIS FOR PROCESSING

     

Mediterranean Soul Experience will process personal data only when a valid legal basis exists.

The legal bases that may be applicable are:

  • Performance of a contract
  • Taking steps prior to entering into a contract
  • Compliance with a legal obligation
  • Consent of the data subject
  • Legitimate interest where applicable and after carrying out the corresponding balancing test

Not all processing requires consent. For example, data necessary to perform a contract may be processed based on the contractual relationship itself.

When processing requires consent, it will be requested in a differentiated manner and through a clear affirmative action.

  1. MANDATORY AND VOLUNTARY INFORMATION

     

When certain data is essential to formalize a reservation or execute a contract, the interested party will be informed that providing this data is necessary.

Failure to provide this data may prevent:

  • formalizing the reservation;
  • providing certain services;
  • managing accommodation;
  • organizing certain activities;
  • issuing documentation;
  • processing payments;
  • or complying with legal obligations.

Data that is not necessary for these purposes will be voluntary.

  1. DATA OF OTHER TRAVELERS

     

When a person makes a reservation for several travelers and provides third-party personal data, they must ensure they have a legitimate basis for providing that data and have informed the affected individuals when necessary.

Mediterranean Soul Experience may directly request certain data from travelers when necessary for the provision of the service or to comply with applicable legal obligations.

  1. COMMUNICATION OF DATA TO SUPPLIERS AND COLLABORATORS

     

To carry out the booked trips and experiences, Mediterranean Soul Experience may communicate only the strictly necessary data to the suppliers involved in providing the services.

These may include:

  • accommodations;
  • restaurants;
  • transportation companies;
  • guides;
  • activity companies;
  • chefs;
  • local professionals;
  • insurance companies;
  • tour operators;
  • collaborators necessary to carry out the experiences.

For example, when we need to provide proper catering services, we may share with the restaurant only the dietary information necessary to prepare the appropriate menu.

We will not communicate health information that the supplier does not need to provide the service.

Where applicable, suppliers acting as data processors will be subject to the obligations established in the GDPR.

  1. PARTNER TRAVEL AGENCIES

     

When a partner travel agency manages a booking, Mediterranean Soul Experience may receive from that agency the data necessary to carry out the trip.

This information may include:

  • identification data;
  • contact information;
  • booking details;
  • information necessary to organize the services;
  • and, when necessary and with an appropriate legal basis, information relating to special needs.

When the agency provides information relating to special needs, it must do so in compliance with applicable data protection regulations.

The legal relationship between Mediterranean Soul Experience and each partner agency will determine, in each case, the corresponding responsibilities regarding data processing.

  1. INTERNATIONAL TRANSFERS

     

Mediterranean Soul Experience does not intend to carry out international data transfers simply by virtue of contracting its services.

However, certain suppliers or partners necessary to provide a service may be located outside the European Economic Area.

When a data communication involves an international transfer, Mediterranean Soul Experience will apply the safeguards provided for in the GDPR.

These may include:

  • an adequacy decision by the European Commission;
  • standard contractual clauses;
  • or other legally recognized mechanisms.

Where appropriate, the data subject will be provided with additional information about the transfer and the applicable safeguards.

  1. RETENTION PERIOD

     

Personal data will be retained for the time necessary to fulfill the purposes for which it was collected.

Once the contractual relationship has ended, certain data may be retained for the legally required periods to:

  • comply with tax and accounting obligations;
  • comply with commercial obligations;
  • address potential claims;
  • exercise or defend legal actions;
  • comply with obligations arising from tourism activity.

We will retain data used for commercial communications until the data subject withdraws consent or objects to its use for that purpose, unless another legal basis allows retention. Data relating to special needs will be kept only as long as strictly necessary for the purpose for which it was collected and will then be deleted or no longer used, unless a legal obligation justifies its retention.

  1. SECURITY

     

Mediterranean Soul Experience will implement appropriate technical and organizational measures to protect personal data against:

  • loss;
  • destruction;
  • alteration;
  • unauthorized access;
  • improper disclosure;
  • and other unlawful processing.

The level of security will be adapted to the nature and risks of each processing activity.

The Company will pay particular attention to the protection of any information that may constitute a special category of data.

  1. DATA SUBJECT RIGHTS

The data subject may exercise, when the legally established requirements are met, the following rights:

Right of access

To know what personal data we process and obtain information about its processing.

Right to rectification

To request the correction of inaccurate or incomplete data.

Right to erasure

To request the deletion of their data when legally appropriate.

Right to object

To object to certain processing of their data.

Right to restriction of processing

Request that the processing of your data be temporarily restricted in the cases provided for by law.

Right to data portability

Receive certain personal data in a structured format and, where appropriate, request its transmission to another controller.

Right to withdraw consent

When processing is based on consent, the data subject may withdraw it at any time.

Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.

  1. EXERCISE OF RIGHTS

     

Your rights may be exercised free of charge by sending a request to:

Mediterranean Soul Experience, S.L.
C/ President Lluís Companys, 40, 3rd Floor, 1st Door
43860 L’Ametlla de Mar (Tarragona), Spain
Email: info@mediterranean-soul-experience.es

The request must clearly indicate the right you wish to exercise.

When necessary to protect the data subject against unauthorized access, Mediterranean Soul Experience may request additional information to verify the applicant’s identity.

The Spanish Data Protection Agency (AEPD) recommends including information on exercising rights in the information provided to the data subject from the moment their data is collected.

  1. COMPLAINT TO THE SUPERVISORY AUTHORITY

     

If the data subject believes that their rights have not been respected, they may file a complaint with the competent supervisory authority.

In Spain, the supervisory authority is:

Spanish Data Protection Agency (AEPD)

Data subjects can consult the procedures and complaint channels available on the AEPD’s official website.

  1. AUTOMATED DECISIONS AND PROFILING

     

Mediterranean Soul Experience does not intend to make decisions based solely on automated processing that produce legal effects or significantly affect the data subject.

Nor does it intend to create profiles that produce legal effects or similar significant effects. If this changes, the interested party will be provided with the information required by applicable regulations.

  1. MINORS

     

When a booking includes minors, Mediterranean Soul Experience will process their data only when necessary to provide the contracted services or comply with applicable legal obligations.

When current legislation requires valid consent to process a minor’s data, the conditions established by that legislation will apply.

  1. COOKIES

     

The website may use cookies and similar technologies.

The Cookie Policy provides detailed information about the cookies used, their purposes, duration, providers, and how to manage consent.

  1. PRIVACY POLICY UPDATES

     

Mediterranean Soul Experience may update this Privacy Policy when necessary to adapt it to:

  • legislative changes;
  • regulatory changes;
  • modifications to the services;
  • new data processing activities;
  • technological changes;
  • or new needs of the Company.

The current version will always be the one published on this website.

The date of the last update will appear at the beginning of the document.

  1. CONTACT

     

For any questions related to the processing of personal data, you can contact:

MEDITERRANEAN SOUL EXPERIENCE, S.L.

Tax ID: B88691688

C/ President Lluís Companys, 40, 3rd Floor, 1st Door

43860 L’Ametlla de Mar (Tarragona), Spain

Email: info@mediterranean-soul-experience.es

Telephone: +34 624 057 831 (Spanish, German, Romanian)

+34 624 441 674 (Spanish, Catalan, English, German, French)

Last updated: [17/08/2026]

Language