Privacy
Last updated: May 2026
At Sonamu we treat your data with the same care we put into designing your trips. This document explains what data we collect, why and what rights you have over it.
Data controller
Sonamu operates under Sonamu Tour SL (tax ID B63987309), with registered office at Avenida Diagonal 571, 2nd floor, 08029 Barcelona, Spain. Contact email for privacy matters: info@sonamu.es.
What data we collect
Identification data: name, surname, email, phone. Travel data: passport, date of birth, preferences, dietary and accessibility requirements. Payment data: managed directly by a secure payment gateway, we do not store cards in our systems.
Technical data: IP address, browser, pages visited, collected via analytics cookies only if you accept them.
What we use them for
Manage your travel request (legal basis: contract performance). Communicate with you during the process (legal basis: contract performance). Meet legal tax and administrative obligations (legal basis: legal obligation).
Send you commercial communications if you have given explicit consent (legal basis: consent). You can withdraw it at any time.
Who we share them with
a secure payment gateway (payments), Resend (transactional emails), Supabase (encrypted database). All providers with signed DPAs and EU servers or equivalent transfer clauses.
We never sell data to third parties. We never use them for advertising profiling outside of explicit consent.
How long we keep them
Travel data: 5 years after trip completion (tax obligation). Commercial data: until you withdraw consent. Technical data: maximum 24 months.
Your rights
Access, rectification, deletion, opposition, limitation and portability. To exercise them, write to info@sonamu.es with a copy of your ID/passport. We respond within a maximum of 30 days.
If you consider that we are not addressing your rights properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).