PRIVACY POLICY
In compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), KOA EXPERIENCE S.L. is committed to protecting your privacy and ensuring the lawful, fair, and transparent processing of your personal information.
If you have any questions regarding your privacy or the processing of your personal data, you can contact us at: info@koaexperience.com
1. Data Controller
KOA EXPERIENCE S.L.
CIF (Tax ID): B93677854
Address: C/ Jacinto Benavente, nº 11, 5-4, 29601 Marbella, Málaga, Spain
Email: info@koaexperience.com
Phone: +34 676 06 26 02
2. Purpose of Data Processing
We only collect and process personal data that is strictly necessary to provide our services as a travel agency and related tourism activities.
Your data may be processed for the following purposes:
To manage travel bookings, reservations, and payments.
To prepare and send travel proposals or quotations.
To issue invoices and manage administrative or accounting tasks.
To respond to inquiries, requests, or complaints.
To send commercial and promotional communications (only when you have given your express consent).
To comply with legal obligations related to taxation, accounting, and consumer protection.
To improve the quality and personalization of our services.
No automated decisions will be made without human intervention, unless you have expressly authorized it.
3. Legal Basis for Processing
Your personal data is processed under the following legal grounds:
Consent: when you voluntarily provide your data (e.g., when making a reservation or subscribing to our newsletter).
Contract performance: when processing is necessary to manage your booking or travel service.
Legal obligation: when we must comply with applicable laws (e.g., tax or tourism regulations).
Legitimate interest: for administrative management, fraud prevention, or service improvement.
If you do not provide the required personal data, we may be unable to provide certain services.
4. Data Retention
Your data will be kept for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law.
Once these purposes are fulfilled, data will be securely deleted or anonymized unless you request its erasure earlier in accordance with your rights.
5. Data Recipients and Transfers
Your data may be shared with:
Service providers that assist us in operating our website, managing bookings, payments, or marketing.
Collaborating travel partners or suppliers involved in delivering the contracted travel services.
KOA EXPERIENCE S.L. requires all third parties to sign data processing agreements ensuring compliance with European data protection laws.
These providers may only use your data to provide contracted services on our behalf — they are not permitted to use it for their own purposes or to disclose it to others.
If any international data transfer outside the European Economic Area (EEA) occurs, KOA EXPERIENCE will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
6. Your Rights
As a data subject, you have the following rights under the GDPR:
Right of Access: to know what personal data we hold about you.
Right of Rectification: to request correction of inaccurate or incomplete data.
Right of Erasure (“Right to be Forgotten”): to request deletion of your data when it is no longer needed.
Right to Object: to object to data processing based on legitimate interest or for marketing purposes.
Right to Restriction: to request limitation of processing in certain circumstances.
Right to Data Portability: to receive your data in a structured, commonly used, and machine-readable format and transmit it to another controller.
Right to Withdraw Consent: at any time, without affecting the lawfulness of prior processing.
To exercise these rights, please send a written request to:
info@koaexperience.com
Please include:
Your full name and contact details.
A copy of your ID or passport (or a valid electronic signature).
The specific right you wish to exercise.
Any supporting documents, if relevant.
If acting through a representative, you must provide a document proving representation.
We will respond within the legally established period. If your request is incomplete, we will contact you to provide the missing information.
If you disagree with our response or believe your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
The exercise of your rights is completely free of charge.
7. Security Measures
KOA EXPERIENCE implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
These measures include the use of secure servers, encryption technologies, restricted access, and staff training on data protection.
All staff members are background-checked and trained to work responsibly with minors and young participants in educational and travel programs.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your browsing experience, analyze traffic, and personalize content.
You can configure or disable cookies at any time through your browser settings.
For detailed information, please see our Cookies Policy.
9. Updates to this Policy
We may update this Privacy Policy periodically. The latest version will always be available at koaexperience.com/privacy-policy.
If we make significant changes, we will notify users through the website or via email when appropriate.
10. Contact
For any questions, concerns, or to exercise your rights, please contact:
📧 info@koaexperience.com
📍 KOA EXPERIENCE S.L.