Privacy Policy

Effective Date: 03-04-2026

This Privacy Policy describes how Moralusa Experience (“we,” “us,” or “our”) collects, uses, processes, and protects the personal data of our clients and website visitors (“you” or “your”). As a retail travel agency based in Madrid, Spain, we are committed to complying with the General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

1. Data Controller

The entity responsible for processing your personal data is:

  • Company Name: Moralusa Experience
  • Address: Calle Colmenarejo, número 2, bloq 3, A, 1A
  • Email Address: contact@moralusaexperience.com 
  • Phone Number: +1 (516) 234-4418

2. Information We Collect

To provide our travel agency services, we may collect and process the following categories of personal data:

  • Identification and Contact Data: Full name, residential address (including country of residence), email address, and phone number.
  • Travel and Legal Documentation: Passport details, national identification numbers, and dates of birth, as required for accommodation bookings and legal compliance.
  • Financial Data: Payment card details and billing addresses necessary to process transactions.
  • Special Categories of Data (Sensitive Data): Information regarding dietary restrictions, food allergies, or specific mobility requirements. This data is collected solely to ensure your health and safety during gastronomic experiences and travel, and is processed only with your explicit consent.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and legal bases:

  • Service Provision: To book accommodations, transportation, tours, and travel insurance. Legal basis: Performance of a contract.
  • Communication: To send itineraries, invoices, and necessary pre-departure information. Legal basis: Performance of a contract.
  • Compliance: To fulfill legal obligations, such as standard guest registration requirements under Spanish law. Legal basis: Legal obligation.
  • Special Requirements: To accommodate dietary and mobility needs. Legal basis: Your explicit consent.

4. Data Sharing and Third-Party Disclosures

We do not sell your personal data. We only share your information with necessary third-party service providers to fulfill our contractual obligations to you. These include:

  • Hotels and accommodation providers.
  • Transportation and logistics companies.
  • Tour operators, wineries, and restaurants included in your itinerary.
  • Travel insurance providers.
  • Payment processing gateways.
  • Government or law enforcement authorities, only when legally required.

5. International Data Transfers

While Moralusa Experience is established in the European Economic Area (EEA), we frequently serve clients from the United States and other non-EEA countries. When communicating with you or transferring necessary booking data to service providers outside the EEA, we ensure appropriate safeguards are in place in compliance with GDPR requirements to maintain the security of your information.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including the duration of your travel and any subsequent period required by Spanish tax, commercial, or civil liability laws.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or destruction.

8. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the data we hold about you.
  • Right to Rectification: Request the correction of inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): Request the deletion of your data when it is no longer necessary for the purposes collected.
  • Right to Restrict Processing: Request a limitation on how we process your data.
  • Right to Data Portability: Request your data in a structured, commonly used format.
  • Right to Withdraw Consent: Withdraw your consent for the processing of sensitive data at any time.

To exercise any of these rights, please contact us at [Insert Contact Email]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.