Data Controller
Luxia Experience SLU
NIF: B22515480
Address: Carrer de Lepant, 253, L’Eixample, 08013 Barcelona
Email: info@luxiaexperience.com
Last updated: October 2025
Hereinafter referred to as “Luxia Experience”.
2. Purpose of Data Processing
Personal data provided through the website, email, WhatsApp, or any other communication channel are processed for the following purposes:
- Managing inquiries, requests, or bookings.
- Organizing and coordinating premium experiences and services (accommodation, transfers, events, gastronomy, etc.).
- Maintaining necessary communication with clients, partners, and suppliers.
- Complying with legal, fiscal, or contractual obligations.
- Ensuring privacy and confidentiality of all client information.
3. Legal Basis
The legal basis for data processing is:
- User consent, given voluntarily when contacting Luxia Experience.
- Performance of a contract or requested service.
- Legal obligations applicable to Luxia Experience.
4. Data Categories
The personal data that may be processed include:
- Identification: name, surname, nationality, date of birth, passport or ID number.
- Contact details: postal address, email, phone number, social or messaging platforms.
- Service-related information: accommodation, travel preferences, dietary or mobility requirements.
- Billing or payment details where applicable.
5. Confidentiality and Security
Luxia Experience ensures the highest level of confidentiality and privacy of all personal data.
No identifying, travel, or location data will be shared with unauthorized third parties.
Access to data is strictly limited to authorized personnel and trusted suppliers, all bound by confidentiality and data processing agreements in compliance with the EU General Data Protection Regulation (GDPR).
Luxia Experience applies appropriate technical and organizational measures to prevent loss, alteration, unauthorized access, or disclosure of personal data.
6. Data Sharing and International Transfers
Data will not be shared with third parties except when strictly necessary to provide the contracted service or when legally required.
If data must be shared with suppliers (villa owners, chauffeurs, chefs, event companies, etc.), Luxia Experience ensures that these providers act as data processors under legally binding confidentiality and GDPR compliance agreements.
Hostinger (hosting provider) stores the website’s data on servers located within the European Economic Area (EEA) and complies with GDPR.
7. Email and WhatsApp Communications
Luxia Experience may communicate with clients via email, WhatsApp, or phone for service coordination purposes only.
These tools may involve data transfers to third-party platforms (e.g., Meta Platforms for WhatsApp).
Luxia Experience uses these channels responsibly and never for bulk marketing purposes.
8. Data Retention
Data are retained only for as long as necessary to fulfill the purposes collected and to comply with legal or contractual obligations.
Afterward, all data are securely deleted.
9. User Rights
Users may exercise their rights of:
- Access – to know what data we process.
- Rectification – to correct inaccurate or incomplete data.
- Erasure – to request deletion.
- Restriction and objection – to limit or oppose processing.
- Portability – to receive a structured copy of their data.
Requests may be sent to info@luxiaexperience.com with proof of identity attached.
Users also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
10. Policy Updates
Luxia Experience may update this Privacy Policy from time to time to reflect changes in law or internal processes.
The updated version will always be available on this page, with the revision date clearly indicated.