Privacy Policy

Privacy Policy

Dance and Holidays Privacy Policy

Last Updated: September 3, 2026

1. Who We Are

This Privacy Policy explains how VBV VIAJES S.L., trading as Dance & Holidays (“Dance & Holidays”, “we”, “us” or “our”), collects and processes personal data when you visit our website, contact us, request information, make or manage a booking, participate in one of our trips or activities, or otherwise interact with us.

The data controller is:

2. Scope of This Policy

This Policy applies to personal data processed through our website, booking and enquiry forms, email, telephone, WhatsApp, social-media communications, payment and booking processes, customer support, trips, events and related services.

Third-party websites, social networks, payment services and travel suppliers may process personal data under their own privacy policies when they act as independent controllers. We encourage you to read their notices before providing information directly to them.

3. Personal Data We Collect

Depending on your relationship with us and the trip or service requested, we may process the following categories of personal data:

  • Identity and contact data: name, surname, date of birth, postal address, country of residence, email address, telephone number and preferred language.
  • Travel-document data: nationality, passport or identity-document information, visa information and other details strictly necessary to arrange the requested travel service.
  • Booking and travel data: selected trip, dates, room and roommate preferences, transport details, arrival and departure information, activities, special requests, booking history and communications relating to the trip.
  • Emergency-contact data: the name, relationship and contact details of the person you identify for emergencies. You must inform that person before providing their data to us.
  • Health and accessibility data: allergies, dietary needs where they reveal health information, accessibility requirements and relevant medical information that you voluntarily provide and that is necessary to assess or deliver an accepted request safely.
  • Payment and transaction data: billing details, amounts, payment status, transaction references, refunds and invoice information. Full card details are processed by the relevant payment provider and are not intended to be stored on our systems.
  • Communications and preference data: emails, messages, enquiries, complaints, survey responses, marketing preferences and records of consent or withdrawal.
  • Image and voice data: photographs, video or audio in which you appear, where their use requires and is based on your separate permission.
  • Incident, insurance and claims data: information needed to handle an incident, provide assistance, cooperate with insurers or authorities, or establish, exercise or defend legal claims.
  • Technical and usage data: IP address, device and browser information, log data, approximate location derived from the IP address, website interactions and cookie or similar-technology identifiers, subject to the choices available through our cookie settings.

Please do not send medical records, complete identity documents or other sensitive information unless we specifically request what is necessary and provide a secure or appropriate way to send it.

4. How We Obtain Personal Data

We normally obtain personal data directly from you when you visit the website, contact us, complete a form, communicate through WhatsApp or social media, make a payment, book a trip or participate in an activity.

We may also receive personal data from:

  • A lead booker, travel companion or person arranging a trip on your behalf.
  • Payment providers, where they confirm a transaction or refund.
  • Travel suppliers, event partners, insurers or assistance providers involved in your booking.
  • Referral or commercial partners where the transfer is lawful and you have been appropriately informed.
  • Public authorities or other lawful sources where necessary.

If you provide another person’s data, you confirm that you are authorised to do so and that you have made this Privacy Policy available to them. Wherever practicable, we will provide the relevant information directly to each traveller.

5. Why We Use Personal Data and Our Legal Bases

We process personal data only where we have a valid legal basis. The purposes and principal legal bases are:

  • Responding to enquiries and preparing an offer: taking steps at your request before entering into a contract.
  • Creating, administering and performing a booking: performing the travel contract, including communications, accommodation, transfers, activities, customer service, changes, cancellations and refunds.
  • Sharing necessary booking information with travel suppliers: taking pre-contractual steps and performing the contract requested by the traveller.
  • Processing payments and issuing invoices: performing the contract and complying with accounting, tax and other legal obligations.
  • Providing assistance, managing incidents and handling complaints or claims: performing the contract, complying with legal obligations, protecting vital interests in an emergency, and our legitimate interest in establishing, exercising or defending legal claims.
  • Preventing fraud and maintaining website, network and service security: compliance with legal obligations and our legitimate interest in protecting our customers, business and systems.
  • Improving services and obtaining non-essential website analytics: consent where cookies or similar technologies require it; otherwise, our legitimate interest in improving our services using appropriately limited or aggregated information.
  • Sending newsletters and promotional communications: your consent. You can withdraw it at any time without affecting the lawfulness of earlier processing.
  • Using photographs, video or voice for promotional purposes: separate, specific and optional consent identifying the intended channels and uses.
  • Complying with requests from courts, consumer, tourism, tax, data-protection, law-enforcement or other competent authorities: compliance with a legal obligation or, where applicable, performance of a task in the public interest.

Where we rely on legitimate interests, we consider the necessity and proportionality of the processing and balance those interests against your rights and reasonable expectations. You may request further information about this assessment and may object as explained below.

6. Health, Allergy and Accessibility Information

Information concerning health is a special category of personal data. Where you ask us to process allergies, medical information or accessibility needs in order to arrange a service, we will request your explicit consent for the specified purpose unless another legal exception applies.

Providing this information is normally optional. However, if information is objectively necessary to assess or safely fulfil a special request and it is not provided, we may be unable to confirm that request or provide the affected service.

We will limit this information to what is necessary, restrict access to persons who need it, and share only the relevant details with the suppliers responsible for delivering the requested service. In a genuine emergency, we may process or disclose necessary information to protect your or another person’s vital interests where permitted by law.

7. Marketing Communications

We will send newsletters or promotional messages by email, telephone, WhatsApp or an equivalent electronic channel only where a valid legal basis allows it and, where required, after obtaining your prior consent.

Marketing consent is separate from acceptance of a booking and is not required to purchase a trip. You may unsubscribe at any time by using the link included in an email, following the instructions in the message, or contacting info@danceandholidays.com. Withdrawal will not affect essential booking or service communications.

8. Photographs, Video and Voice

Participation in a trip or activity does not by itself authorise Dance & Holidays to use your identifiable image or voice for advertising or promotional purposes.

Where consent is required, we will request it separately and explain the intended purposes, media, geographical scope and duration. Refusing or withdrawing promotional consent will not affect the main travel service. Withdrawal prevents new uses based on consent, but it may not require the withdrawal of materials already lawfully printed or uses supported by another valid legal basis.

You should tell us promptly if you do not wish to appear in organised photographs or recordings so that reasonable measures can be taken. Images independently created and published by other travellers or third parties are outside our control.

9. Who May Receive Personal Data

We disclose only the information reasonably necessary for the relevant purpose. Recipients may include:

  • Hotels, accommodation providers, transport companies, guides, instructors, restaurants, venues, event organisers and other travel-service suppliers.
  • Payment gateways, banks and other payment or refund providers.
  • Insurers, insurance intermediaries, assistance companies and claims handlers.
  • Website hosting, information-technology, cybersecurity, cloud-storage, email, communications, customer-management and booking-service providers acting under appropriate contractual obligations.
  • Professional advisers, including accountants, auditors and lawyers, where necessary and subject to professional confidentiality.
  • Consumer, tourism, tax, judicial, law-enforcement, data-protection or other competent authorities where disclosure is required or permitted by law.
  • A purchaser, investor or professional adviser involved in a genuine corporate restructuring, subject to appropriate confidentiality and data-protection safeguards.

Travel suppliers may act as independent controllers for the services they provide. Their own privacy information may therefore also apply. We do not sell or rent personal data to third parties for their own marketing.

10. International Data Transfers

Dance & Holidays offers international travel. When a trip takes place outside the European Economic Area (“EEA”), it may be strictly necessary to send limited traveller information to hotels, transport providers, event organisers or other suppliers in the destination country.

Where personal data is transferred outside the EEA, we will use the mechanism applicable to the circumstances, such as:

  • A European Commission adequacy decision.
  • European Commission Standard Contractual Clauses or another safeguard recognised by applicable law.
  • Where no adequacy decision or appropriate safeguard is available, a limited and occasional transfer that is strictly necessary to perform the travel contract or take requested pre-contractual steps, as permitted by Article 49 of the GDPR.
  • Your explicit consent in the exceptional cases where the GDPR permits reliance on consent after you have been informed of the possible risks.

You may contact us to request information about the destination of a transfer and the safeguards used. Laws and levels of protection in a destination country may differ from those in the EEA.

11. Cookies and Similar Technologies

Strictly necessary technologies may be used to operate and secure the website. Analytics, advertising, social-media or other non-essential cookies and similar technologies will be activated only after the legally required consent has been obtained.

The cookie banner must provide a genuine choice to accept, reject or configure non-essential cookies. Consent may be withdrawn at any time through the cookie-settings mechanism. Further information about the technologies, providers, purposes and duration must be provided in the separate Cookie Policy.

12. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable legal, accounting and claims periods. The principal criteria are:

  • Enquiries that do not result in a booking: normally for up to 12 months after the last meaningful contact, unless a longer period is justified or you request earlier deletion.
  • Bookings and travel contracts: during the contractual relationship and afterwards for the periods needed to meet legal obligations and establish, exercise or defend claims. Contractual records may be retained for up to five years after they become enforceable.
  • Invoices, accounting records and business documentation: the information required by law may be retained for six years, without prejudice to the applicable four-year tax limitation period or any longer period required in a particular case.
  • Health, allergy and accessibility information: normally until the end of the relevant trip and for no longer than 30 days afterwards, unless an incident, complaint, legal obligation or claim requires the relevant information to be retained for longer.
  • Marketing data: until consent is withdrawn or the purpose ends. Minimal suppression information may then be retained to ensure that the opt-out is respected.
  • Image or voice permissions: for the period and uses described when consent is requested, or until withdrawal for future consent-based uses.
  • Cookie and technical data: for the period stated in the Cookie Policy. Cookie choices should be renewed at appropriate intervals and normally no later than 24 months.
  • Complaints, incidents and legal claims: until the matter is finally resolved and the relevant limitation periods have expired.

When data is no longer required, it will be deleted, anonymised or securely blocked where Spanish law requires blocked retention.

13. Security and Personal Data Breaches

We apply technical and organisational measures appropriate to the nature of the data and the level of risk. These measures include, where appropriate, access controls, confidentiality obligations, secure authentication, backup and recovery procedures, security updates, data minimisation, supplier controls and incident-management procedures.

No method of transmission or storage is completely risk-free. If a personal data breach occurs, we will assess it, document it and notify the competent authority and affected persons where and within the periods required by the GDPR.

14. Your Data-Protection Rights

Subject to the conditions and limitations established by law, you may exercise the following rights:

  • Access: obtain confirmation of whether we process your data and receive a copy and related information.
  • Rectification: correct inaccurate or incomplete personal data.
  • Erasure: request deletion where the legal conditions are met.
  • Restriction: request that processing be limited in the legally specified circumstances.
  • Objection: object to processing based on legitimate interests and object at any time to direct marketing.
  • Portability: receive certain data in a structured, commonly used and machine-readable format and request its transmission where technically feasible.
  • Withdrawal of consent: withdraw consent at any time without affecting processing carried out lawfully before withdrawal.
  • Automated decisions: not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except where the law permits it with appropriate safeguards.

Dance & Holidays does not currently make decisions based solely on automated processing that produce legal or similarly significant effects for travellers.

To exercise a right, email info@danceandholidays.com or write to the registered office, clearly identifying the right requested. We may request information reasonably necessary to confirm your identity. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive. We will respond within one month, subject to the lawful extension available for complex or numerous requests.

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), Calle Jorge Juan 6, 28001 Madrid, Spain, through www.aepd.es. Where another European supervisory authority is competent, you may also contact that authority.

15. Required and Optional Information

Fields identified as required are necessary to respond to your request, enter into or perform a booking, meet a legal obligation, or safely provide an accepted service. If required information is not provided, we may be unable to process the request or booking.

Marketing consent, promotional image consent and non-essential cookie consent are optional and must not be bundled with acceptance of the travel contract. Health data is also optional unless particular information is objectively necessary to assess or provide a special service requested by you.

16. Children and Minors

Our ordinary booking service is directed to adults. Where a trip permits a minor to participate, their data must be provided by or with the authorisation of a parent or legal guardian and will be limited to what is necessary for the booking, safety and performance of the service.

We do not knowingly use a minor’s personal data for direct marketing or promotional image purposes without the legally required authorisation.

17. Changes to This Privacy Policy

We may update this Policy to reflect changes in our processing, suppliers, services or legal obligations. The current version and its effective date will be published on this page. Where a change materially affects your rights or a current booking, we will provide additional notice when required.

An update to this Policy does not retrospectively create a new consent or legal basis. Where fresh consent is required, it will be requested separately.

18. Contact Us

For privacy questions, complaints or data-protection rights requests, please contact:

  • Attention: Privacy Enquiries – VBV VIAJES S.L.
  • Email: info@danceandholidays.com.
  • Postal address: Calle Haití 2, 1st floor, 08023 Barcelona, Spain.

This English version is provided for international visitors. A Spanish version should also be made available. For dealings with Spanish authorities, the Spanish version will be the reference version, without limiting any mandatory rights applicable to the individual.