Northern Spain Travel
Operated by OBM Luxury Ventures S.L.

Last updated: 15 February 2026

Northern Spain Travel (“we”, “us”, “our”) is a trading name of OBM Luxury Ventures S.L., and we are committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, contact us, or use our bespoke travel design services. It complies with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection laws (LOPDGDD).

1. Who we are

Data Controller:

OBM Luxury Ventures S.L.
Trading as Northern Spain Travel
Calle iturkoa, 3, Bj-tr, 31013, berriozar, Navarra,
Spain

Email: info@northernspaintravel.com

OBM Luxury Ventures S.L. is the legal entity responsible for processing your personal data.

2. Information we collect

We collect personal data when you interact with Northern Spain Travel, including:

Information you provide directly

When you:

• Submit an enquiry through our website
• Request a bespoke travel itinerary
• Contact us via email or contact forms
• Subscribe to newsletters
• Engage our travel design services

We may collect:

• Full name
• Email address
• Phone number
• Country of residence
• Travel preferences and interests
• Travel dates
• Number of travellers
• Budget information
• Special requirements (dietary, accessibility, medical conditions relevant to travel)

Information required for travel arrangements

Where necessary to arrange travel services, we may collect:

• Passport details
• Date of birth
• Nationality
• Emergency contact information
• Travel insurance information (if provided)

We only collect information necessary to provide the requested services.

Automatically collected information

When you use our website, we may automatically collect:

• IP address
• Browser type and version
• Device type
• Website activity and usage patterns
• Pages visited and time spent

This helps us improve website performance and user experience.

3. How we use your personal data

We use your personal data to:

Provide travel design and booking services

• Respond to enquiries
• Design bespoke travel itineraries
• Arrange services with hotels, guides, and partners
• Deliver travel-related communications

Communicate with you

• Provide travel proposals
• Respond to questions or requests
• Send service-related information

Improve our services and website

• Analyse website performance
• Improve user experience
• Enhance our services

Marketing communications

If you opt in, we may send:

• Newsletters
• Travel inspiration
• Updates and offers

You can unsubscribe at any time.

4. Legal basis for processing

Under GDPR, we rely on the following legal bases:

• Consent — when you subscribe to marketing communications
• Contractual necessity — to provide travel services you request
• Legitimate interest — to operate and improve our services
• Legal obligation — to comply with applicable legal requirements

5. Sharing your personal data

We may share your personal data with trusted third parties where necessary to provide our services, including:

• Hotels and accommodation providers
• Local guides and experience providers
• Transport providers
• Booking platforms
• Payment processors
• IT and website service providers

We only share information necessary for service delivery.

We do not sell your personal data to third parties.

6. International data transfers

Some travel suppliers may be located outside the European Economic Area (EEA).

When this occurs, OBM Luxury Ventures S.L. ensures appropriate safeguards are implemented, including:

• Standard Contractual Clauses approved by the European Commission
• GDPR-compliant providers
• Secure data transfer methods

7. Data retention

We retain your personal data only as long as necessary:

• Enquiry data: up to 24 months
• Client and booking records: up to 6 years (for legal, tax, and accounting compliance)
• Marketing data: until you withdraw consent

After this period, data is securely deleted or anonymised.

8. Cookies

Our website uses cookies and similar technologies to:

• Ensure website functionality
• Improve performance
• Analyse usage
• Enhance user experience

You can manage cookie preferences through your browser settings.

A separate Cookie Policy provides full details.

9. Data security

OBM Luxury Ventures S.L. implements appropriate technical and organisational security measures, including:

• Secure servers
• Encrypted connections (SSL/HTTPS)
• Restricted access to personal data
• Secure storage systems

We take reasonable steps to protect your personal data from loss, misuse, or unauthorised access.

10. Your rights under GDPR

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, contact:

info@northernspaintravel.com

You also have the right to lodge a complaint with:

Spanish Data Protection Authority (AEPD)

11. Third-party websites

Our website may contain links to external websites.

OBM Luxury Ventures S.L. is not responsible for their privacy practices.

We encourage you to review their privacy policies.

12. Children’s privacy

Our services are not directed at individuals under 18.

We do not knowingly collect personal data from minors without parental consent.

13. Changes to this policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.

14. Contact

If you have any questions about this Privacy Policy or your personal data, contact:

OBM Luxury Ventures S.L.
Trading as Northern Spain Travel
Spain

Email: info@northernspaintravel.com