PRIVACY POLICY

1. Data Controller

The controller responsible for processing personal data collected through www.allein.es is:

ALLEIN, a project operated in collaboration with Imagina y Viaja

Website: www.allein.es
Email: info@allein.es
Telephone: +34 638 70 44 93

Address associated with travel management:

Calle Fernando el Católico, nº 5, 23680, Alcalá la Real, Jaén, Spain.

For the purposes of travel management, bookings, payments, invoicing, receipts, and tourism services, personal data may also be processed by Imagina y Viaja, the entity responsible for the legal and travel organization of the trips.

2. Personal Data We May Process

Through our website, forms, email, WhatsApp, social media channels, or any other communication method, we may process the following categories of personal data:

• Full name
• Email address
• Telephone number
• Age or date of birth
• City, province, or country of residence
• Instagram account or other social media profiles voluntarily provided by the user
• Festival or trip of interest
• Music preferences
• Previous festival or travel experience
• Information about whether the user travels alone, with a partner, or in a group
• Accommodation, transportation, or budget preferences
• Information necessary to assess compatibility with the group
• Information included in messages, applications, or forms
• Billing and payment details, where applicable
• Data relating to bookings, trips, tickets, flights, accommodation, transfers, or purchased services
• Technical browsing information, cookies, device information, browser data, IP address, and website usage behavior, subject to the user's consent preferences
• Data generated through marketing communications, newsletters, WhatsApp communications, CRM systems, advertising campaigns, or analytics tools

We do not intentionally request special categories of personal data unless voluntarily provided by the user or required for the management of a specific trip. In such cases, such data will only be processed when an appropriate legal basis exists and suitable security measures are in place.

3. Purposes of Processing

Personal data may be processed for the following purposes:

• Managing information requests
• Responding to messages received through forms, email, WhatsApp, Instagram, or other communication channels
• Evaluating applications for participation in ALLEIN trips and experiences
• Conducting manual reviews of applications
• Creating compatible groups based on age, energy, musical preferences, travel experience, festival interests, and general affinity
• Contacting interested individuals after they apply
• Providing information about pricing, conditions, availability, and next steps
• Managing bookings, payments, receipts, invoices, and travel documentation
• Coordinating flights, accommodations, transfers, tickets, insurance, activities, and services included in each package
• Creating WhatsApp groups or other communication channels to coordinate travel arrangements
• Sending informational, promotional, or commercial communications relating to festivals, experiences, trips, community activities, presales, updates, or ALLEIN content
• Managing newsletters, email marketing campaigns, social media campaigns, advertising audiences, and lead tracking
• Analyzing website usage and improving website performance
• Measuring advertising campaign effectiveness and content performance
• Complying with legal, tax, accounting, administrative, tourism, and consumer protection obligations
• Managing incidents, complaints, amendments, cancellations, or communications with suppliers
• Preventing fraud, misuse, or conduct contrary to community standards

4. Legal Basis for Processing

Personal data is processed under the following legal bases:

Consent

When the user:

• Completes forms
• Accepts the Privacy Policy
• Subscribes to communications
• Accepts non-essential cookies
• Voluntarily provides personal data

Pre-Contractual Measures

When the user requests information relating to a trip, experience, price quotation, availability, or booking.

Contract Performance

When the user confirms a booking, makes a payment, or purchases a trip or service.

Legal Obligation

When processing is necessary to comply with applicable tax, accounting, tourism, package travel, consumer rights, invoicing, or complaint-handling regulations.

Legitimate Interest

To:

• Manage communications with users
• Maintain website security
• Prevent misuse or fraud
• Improve products and services
• Document communications
• Defend legal rights and claims

5. Manual Review of Applications and Curated Groups

ALLEIN operates as a curated community. Consequently, submitting an application does not automatically grant the right to participate in any trip, group, or experience.

We may manually review information provided by users to assess compatibility with a specific trip, group, experience, average group age, music preferences, travel profile, availability, and the overall atmosphere of the community.

No decisions producing legal or similarly significant effects will be made solely through automated processing.

All application reviews involve human intervention.

ALLEIN and Imagina y Viaja reserve the right not to accept applications where:

• Availability does not exist
• The applicant is not compatible with the group
• Organizational reasons exist
• Safety concerns arise
• Community coexistence may be affected
• Any other reasonable circumstance linked to the experience applies

6. Data Sharing

Personal data may be shared with:

• Imagina y Viaja for the legal, travel, contractual, and financial management of trips
• Website technology providers
• Hosting, domain, email, and website maintenance providers
• Form management, CRM, automation, and lead management platforms
• Email marketing and newsletter providers
• Analytics and measurement platforms
• Advertising platforms such as Google, Meta, Instagram, TikTok, or similar services
• Payment service providers, including bank transfers, card processing services, Stripe, Redsys, Bizum, payment links, or other payment systems
• Financial institutions and banks
• Airlines, hotels, accommodation providers, transportation companies, festival promoters, insurance companies, destination management companies, partner agencies, and other suppliers required to organize the trip
• Tax, accounting, legal, and administrative advisors
• Public authorities, regulators, courts, or tribunals where legally required

7. Third-Party Tools

ALLEIN may use proprietary or third-party tools to deliver services, improve user experience, manage forms, analyze traffic, measure campaigns, send communications, process payments, automate workflows, or perform marketing activities.

These tools may include:

• Hosting and domain providers
• WordPress, IONOS, or other website management systems
• Google Analytics
• Google Tag Manager
• Google Ads
• Meta Pixel, Facebook Ads, and Instagram Ads
• TikTok Pixel and similar advertising tools
• CRM platforms
• Email marketing platforms such as Mailchimp, Brevo, Klaviyo, or equivalent providers
• WhatsApp Business
• External form services such as Typeform, Tally, Google Forms, or similar tools
• Stripe, Redsys, Bizum, bank transfers, card processing services, payment links, and other payment systems
• Calendars, automation tools, analytics services, embedded maps, videos, social media integrations, and plugins

The specific tools used may vary over time.

Where such tools require non-essential cookies, the relevant consent will be obtained through the cookie banner or cookie preference center.

8. International Data Transfers

Certain analytics, advertising, CRM, email marketing, social media, and payment service providers may be located outside the European Economic Area (EEA) or process data in third countries.

In such cases, ALLEIN will seek to work with providers offering appropriate safeguards under the GDPR, including:

• Standard Contractual Clauses (SCCs)
• Adequacy Decisions
• Additional technical and organizational measures
• Other legally recognized transfer mechanisms

9.Data Retention

Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected.

In particular:

• Application and form data may be retained while there is a legitimate interest in participating in ALLEIN experiences and for a reasonable period to facilitate future communications, unless the user requests its deletion.
• Newsletter subscriber data will be retained until the user withdraws consent or unsubscribes.
• Data related to bookings, payments, invoices, or travel arrangements will be retained for the periods required by applicable tax, accounting, tourism, consumer protection, and liability regulations.
• Data necessary to manage claims, disputes, or legal actions may be retained for the period during which liabilities may arise.

10. Marketing Communications

Users may receive promotional, informational, or marketing communications relating to ALLEIN, festivals, trips, experiences, content, presales, available places, updates, or similar offers, provided that consent has been given or another lawful basis exists.

Users may unsubscribe at any time by:

• Sending an email to info@allein.es, or
• Using the unsubscribe mechanisms included in communications.

11. WhatsApp and Travel Groups

To coordinate trips, experiences, and community activities, ALLEIN may use WhatsApp, WhatsApp Business, Telegram, or similar communication tools.

Participation in WhatsApp groups may allow other members to view the user's:

• Name
• Profile picture
• Telephone number
• Messages

By agreeing to join such groups, users acknowledge and accept this circumstance.

If a user does not wish to participate in a group, they may notify ALLEIN so that reasonable alternative communication options may be considered, where compatible with the organization of the trip.

12. User Rights

Users may exercise the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to object
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent

To exercise these rights, users may contact:

info@allein.es

Requests should specify which right the user wishes to exercise and, where necessary, provide reasonable proof of identity.

Users also have the right to lodge a complaint with the relevant data protection authority if they believe the processing of their personal data does not comply with applicable regulations.

For users in Spain, complaints may be submitted to the Spanish Data Protection Agency (AEPD).

13. Minors

ALLEIN's services, trips, and experiences are intended exclusively for individuals aged 18 years or older.

By submitting an application or booking a trip, the user declares that they are of legal age and possess sufficient legal capacity to participate in experiences, enter into contracts, and accept the applicable terms and conditions.

14. Security

ALLEIN and Imagina y Viaja implement reasonable technical and organizational measures designed to protect personal data against:

• Loss
• Misuse
• Unauthorized access
• Alteration
• Disclosure

However, no website, computer system, or internet transmission can guarantee absolute security.

15. Updates to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect legal, technical, operational, or commercial changes.

The current version shall always be the version published on www.allein.es.

COOKIE POLICY

1. What Are Cookies?

Cookies are small files that are downloaded onto a user's device when they access certain websites.

They enable the storage and retrieval of information about browsing activity, devices, preferences, and interactions with the website.

Similar technologies may also be used, including:

• Pixels
• Tags
• Identifiers
• Local storage technologies
• SDKs (Software Development Kits)
• Tracking technologies

2. Types of Cookies Used by ALLEIN

The website www.allein.es may use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the proper functioning of the website.

They allow:

• Navigation
• Security features
• Session management
• Content loading
• Form functionality
• Delivery of services requested by the user

These cookies do not require consent.

Preference Cookies

These cookies allow the website to remember certain information so that users can access the website with specific settings, such as:

• Language preferences
• Region settings
• Website configuration
• Browsing preferences

Analytics and Performance Cookies

These cookies help us understand how users interact with the website, including:

• Pages visited
• Time spent on the website
• Forms used
• Traffic sources
• Performance of content

These cookies may be provided by ALLEIN or by third parties such as Google Analytics and similar services.

Advertising and Marketing Cookies

These cookies allow us to:

• Create advertising audiences
• Measure marketing campaigns
• Display personalized advertisements
• Perform remarketing activities

They may be used through platforms such as:

• Google
• Meta
• Facebook
• Instagram
• TikTok
• Other advertising networks

Social Media and Embedded Content Cookies

These cookies may be installed when users interact with embedded content such as:

• Instagram posts
• YouTube videos
• TikTok content
• Social sharing buttons
• Maps
• Other third-party content

Payment and Security Cookies

When payment gateways or payment links are used, such as:

• Stripe
• Redsys
• Bizum
• Card payment processors

technical, anti-fraud, or security cookies may be used to complete and secure the transaction.

3. Consent

When accessing the website for the first time, users will be presented with a cookie banner allowing them to:

• Accept all cookies
• Reject all non-essential cookies
• Configure cookie preferences by category

Users may modify or withdraw their consent at any time through the cookie settings panel available on the website.

Non-essential cookies will not be installed until the user has provided consent.

4. Third-Party Cookies

The website may use cookies or technologies provided by third parties, including:

• Google
• Meta
• Instagram
• Facebook
• TikTok
• Stripe
• Redsys
• WhatsApp
• YouTube
• Vimeo
• IONOS
• WordPress
• CRM platforms
• Form management tools
• Email marketing platforms
• Analytics services
• Advertising platforms
• Automation and measurement tools

Each provider processes data in accordance with its own privacy and cookie policies.

5. How to Disable Cookies

Users may block, delete, or restrict cookies through their browser settings.

However, disabling strictly necessary cookies may affect the functionality of certain areas of the website and prevent some services from operating correctly.

6. Updates to the Cookie Policy

This Cookie Policy may be updated whenever:

• The cookies used by the website change
• Third-party services are added, removed, or modified
• Applicable legal requirements change
• The website's technical configuration is updated

The current version will always be the version published on www.allein.es.