Skip to content
Tell us your plan

Privacy policy

The owner’s tax ID and address (highlighted) still need to be added, and these texts reviewed by an adviser before publishing.

Soul of the Sahara complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Here is a clear and simple explanation of how we handle your data.

1. Who is responsible for your data?

Soul of the Sahara. Data controller: Kaissa Lattab · Tax ID (NIF) [NIF]
Address: [full address], Spain
Email: info@soulofthesahara.com
Phone and WhatsApp: +34 603 510 597

2. What data do we collect?

We only ask for the data we need to prepare your proposal:

  • Name
  • Agency, project or organisation, if you write on its behalf, and type of client
  • Trip details: route, number of people, dates, format and comments
  • The contact details you write to us from (WhatsApp number or email)

The form on this website does not send or store any data: it prepares a message that you choose to send via WhatsApp. If you book, we will also ask for the data needed for the booking and the visa (for example, a copy of your passport, date of birth and nationality). We only process health, dietary or mobility information if you give it to us so we can adapt the trip, with your explicit consent.

3. What do we use your data for?

  • To answer your request and prepare your proposal and quote.
  • To manage the booking and organise the trip together with the organising agency and the local agency at the destination, and for administration and invoicing.
  • Marketing communications: only with your consent will we send you news about new routes and departures. If you are already a client, we may also send you information about trips similar to those you have booked. You can unsubscribe at any time by replying to the message or writing to info@soulofthesahara.com.

4. Business contacts

If you are a business contact at a travel agency or retreat organisation that we work with or that has asked us for information, we may email you about our routes.

  • Source of the data: your own request for information or the business relationship with your company.
  • Data we process: name, position, company, and business email and phone.
  • Legal basis: our legitimate interest (Art. 6.1.f GDPR) and, for marketing emails, Article 21 of the Spanish LSSI.
  • You can object and unsubscribe at any time by replying to the message or writing to info@soulofthesahara.com.
  • We keep this data until you unsubscribe.

5. What is the legal basis for processing your data?

  • Answering your request and preparing the quote: steps taken at your request before entering into a contract (Art. 6.1.b GDPR).
  • Managing the booking, organising the trip, administration and invoicing: performance of the contract and compliance with legal obligations (Art. 6.1.b and 6.1.c GDPR).
  • Health, dietary or mobility information you give us: your explicit consent (Art. 9.2.a GDPR).
  • Marketing communications: your consent (Art. 6.1.a GDPR and Art. 21 of Law 34/2002, LSSI). If you are a client, our legitimate interest in telling you about similar services (Art. 21.2 LSSI).
  • Business contacts: our legitimate interest (Art. 6.1.f GDPR). See section 4.

You can withdraw your consent at any time, without affecting the lawfulness of earlier processing, by writing to info@soulofthesahara.com.

6. How long do we keep your data?

Data from your request is kept for as long as needed to deal with it and, if you book, for the duration of the business relationship; it is then kept blocked for the periods required by law. Passport copies are deleted when the trip ends, unless the law requires us to keep them. Data for marketing communications is kept until you unsubscribe or withdraw your consent.

7. Who do we share your data with?

To prepare and carry out your trip, we share the necessary data with:

  • The licensed Spanish travel agency that organises and contracts the trip. We will tell you which one in the proposal, before you book.
  • The local agency in Djanet (Algeria), which provides the services at the destination and handles the paperwork needed for the visa.

We do not share your data with any other third parties unless required by law. We use service providers who act as data processors and only access data to provide their service: web hosting (Cloudflare) and email and internal management tools (for example, Google Workspace). If you write to us on WhatsApp, that service is provided by WhatsApp (Meta) under its own terms.

8. International transfers

To carry out your trip, some of your data must be sent to the local agency in Algeria, a country without an adequacy decision from the European Commission. This transfer is based on its being necessary to perform the contract you request (Art. 49.1.b GDPR) and is limited to the essential data. Some of the providers listed (Cloudflare, Google and Meta) may process data outside the European Economic Area, mainly in the United States, with the safeguards provided by the GDPR: the EU-US Data Privacy Framework, where the provider is certified, or the standard contractual clauses approved by the European Commission.

9. What are your rights?

You have the right to access, rectify and erase your data, to restrict or object to its processing and to data portability, by writing to info@soulofthesahara.com. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Cookies

This website does not use advertising or tracking cookies, either its own or third-party. Fonts are hosted on this website. If visitor statistics are enabled, they are collected in aggregate, anonymous form, without cookies. When you tap a WhatsApp link you leave this website and that service’s terms apply.

11. Security and changes

Soul of the Sahara applies the technical and organisational measures needed to ensure the security, confidentiality and integrity of your data, and may update this policy to reflect legal changes. We will let you know about any significant change.