Rise & Shine Experience
Book

Legal

Privacy Policy

Last updated: April 2026

CLAN VENTURES, S.L., operating under the commercial name RISE & SHINE EXPERIENCE, is a travel agency specialising in the design and organisation of sports-focused experiences centred on cycling, swimming, and running.

Our experiences are tailored to the individual needs, goals, and preferences of each client and may include complementary services designed to enhance the overall experience.

To provide these services, we process personal data relating to users and clients. In compliance with our duty to inform data subjects, we have prepared this Privacy Policy to provide clear and comprehensive information regarding the scope and purpose of the personal data processing carried out by our travel agency.

This Privacy Policy has been drafted to ensure that any consent provided is fully informed and complies with Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD) and Regulation (EU) 2016/679 of 27 April (General Data Protection Regulation – GDPR).

Mandatory Provision of Data

As a general rule, the data requested through the Website forms are mandatory unless expressly stated otherwise, as they are necessary to fulfil the purposes for which they are collected.

If the User does not provide the requested information, or provides inaccurate or incomplete information, it may not be possible to process the relevant request. However, the User may continue to access and browse the Website freely.

User Responsibility

The User represents and warrants that they are over fourteen (14) years of age and that all personal data provided to CLAN VENTURES, S.L. are true, accurate, complete, and up to date.

The User shall be responsible for the accuracy of the information provided and undertakes to keep it updated so that it reflects their current circumstances.

Likewise, where the User provides personal data relating to third parties, the User warrants that those individuals have been informed of the matters contained in this Privacy Policy and that the User has obtained any necessary authorisation to provide such information to CLAN VENTURES, S.L. for the purposes described herein.

Source and Categories of Data

The personal data processed by RISE & SHINE EXPERIENCE originate from information provided directly by the User through the various forms available on the Website, from browsing activity collected through cookies or similar storage and retrieval technologies, and from information obtained through the User's device, subject to the consents granted to CLAN VENTURES, S.L.

Where a person provides personal data relating to third parties (for example, to manage reservations, include travel companions, or make bookings on behalf of others), that person guarantees that they are authorised to provide such information and that the relevant data subjects have been informed of the disclosure of their data to CLAN VENTURES, S.L.

In such cases, responsibility for the accuracy, legality, and legitimacy of the data rests solely with the person providing them.

The categories of personal data processed include:

  • Identification data (full name);
  • Contact information (email address, postal address, telephone number);
  • Passport, national identity card, or other identification documents where necessary for the provision of contracted services;
  • Financial and payment information once a booking or contract has been formalised.

All personal data are processed confidentially in accordance with the privacy and security policies implemented by CLAN VENTURES, S.L.

Data Controller

The Data Controller responsible for processing your personal data is:

CLAN VENTURES, S.L.
Commercial name: RISE & SHINE EXPERIENCE
Tax Identification Number (NIF): B25906991
Registered Address: Avenida Riera de Cassoles, 62, 2nd Floor, Door 1, 08012 Barcelona, Spain

You may contact us by:

Postal Mail: At the above address
Telephone: +34 681 609 575
Email: alain@riseandshineexperience.com

Purposes of Processing

RISE & SHINE EXPERIENCE processes personal data for the following purposes:

Provision of Contracted Services

To organise, manage, perform, and fulfil the services requested and contracted by the User. Only the data strictly necessary for this purpose will be collected and processed.

Communications Regarding Services

To communicate with Users through the contact channels provided, including email, telephone, mobile phone, and instant messaging services.

These communication channels may be used to provide information regarding bookings, service updates, modifications, operational notices, and other matters relevant to the contracted services.

Use of Images and Videos

To collect, use, and publish photographs and/or videos in which clients and, where applicable, employees may appear for promotional and corporate communication purposes, always based on the prior, explicit, and informed consent of the data subject.

Enquiries and Information Requests

To manage and respond to enquiries submitted through any communication channel made available by the agency. Where a User contacts RISE & SHINE EXPERIENCE solely to request information about services, personal data will be processed only to respond to the enquiry and provide the requested information. Only data strictly necessary for this purpose will be processed.

Commercial Communications

Existing clients of RISE & SHINE EXPERIENCE may receive information regarding similar products and services offered by the company.

Clients may object to receiving such communications at any time by contacting RISE & SHINE EXPERIENCE through the contact details provided in this Privacy Policy.

Website Functionality and User Experience

To manage data collected through cookies and similar technologies in order to ensure that website content is adapted to the User's preferences and to continuously improve the User experience.

Internal Reports and Statistical Analysis

To prepare reports, statistics, and internal analyses intended to improve services, optimise website functionality, and identify improper or fraudulent use of the Website.

RISE & SHINE EXPERIENCE does not carry out automated decision-making or profiling activities.

Instant Messaging Groups

To manage communications with Users through participation in messaging groups administered by RISE & SHINE EXPERIENCE (for example, WhatsApp groups) for the coordination, management, and communication of activities related to contracted services.

Legal Basis for Processing

The legal grounds for processing personal data are as follows:

Performance of a Contract

Processing necessary for the implementation of pre-contractual measures and the performance of contractual obligations, pursuant to Article 6(1)(b) GDPR.

Where personal data relating to health may be provided as ancillary information necessary for the proper delivery of services (for example, allergies, food intolerances, or similar conditions), processing shall be based on the User's explicit consent.

Responding to Enquiries

Processing of enquiries and information requests is based on the legitimate interest of RISE & SHINE EXPERIENCE pursuant to Article 6(1)(f) GDPR.

Use of Images and Videos

Processing of photographs and videos is based on the explicit, informed, and voluntary consent of the data subject.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Commercial Communications to Non-Clients

Commercial communications sent to individuals who are not clients are based on the consent provided by the User, which may be withdrawn at any time.

Commercial Communications to Existing Clients

Commercial communications relating to similar services offered by RISE & SHINE EXPERIENCE are based on the company's legitimate interest under Article 21.2 of Law 34/2002 and Recital 47 GDPR.

Users may object to such processing at any time.

International Data Transfers

International transfers of personal data are carried out where necessary for the performance of a contract or for pre-contractual measures requested by the User, in accordance with Article 49(1)(b) GDPR.

Failure to accept such processing may make it impossible to provide the requested services.

Cookies and Similar Technologies

Processing relating to cookies and similar technologies is based on the User's consent, which may be granted and withdrawn at any time.

Instant Messaging Groups

Participation in messaging groups managed by RISE & SHINE EXPERIENCE is based on the User's explicit consent.

If consent is withdrawn, the User may no longer participate in the relevant messaging groups.

Each consent granted for the purposes described above is independent. Withdrawal of one consent shall not affect the validity of any other consent previously granted.

Data Retention Periods

RISE & SHINE EXPERIENCE retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal obligations.

Specifically:

Commercial Relationship and Bookings

Personal data will be retained for the duration of the contractual relationship and thereafter for the applicable statutory limitation period, generally five (5) years.

Website Registration and User Accounts

Account data will be retained while the account remains active and subsequently for the applicable legal limitation period.

Enquiries and Requests

Information submitted through contact channels will be retained for as long as necessary to respond to the enquiry and thereafter for the applicable limitation period.

Commercial Communications

Data used for marketing communications will be retained until the User withdraws consent. For existing clients, data will be retained for a maximum of one year.

Cookies and Browsing Preferences

Data collected through cookies or similar technologies will be retained until the User withdraws consent or objects to processing, and in any event for a maximum period of one year.

Legal Obligations

Data required to comply with legal obligations will be retained for the periods established by applicable legislation.

Internal Reports and Analysis

Data used for internal reporting, analytics, service improvement, and fraud prevention will be retained only for as long as necessary to fulfil those purposes and thereafter for the applicable limitation period.

Messaging Groups

Data processed through messaging groups will be retained for as long as the User's consent remains valid and subsequently blocked for the applicable legal limitation period.

Recipients of Personal Data

RISE & SHINE EXPERIENCE may disclose personal data to the following recipients:

  • Public Authorities and Government Bodies, where required by law and based on compliance with a legal obligation.
  • Courts and Tribunals, where required by law and based on compliance with a legal obligation.
  • Third-party service providers involved in the delivery of contracted services, including accommodation providers, transfer providers, transport companies, sports equipment rental companies, and other suppliers whose participation is necessary for the fulfilment of the purposes described in this Privacy Policy. Such providers shall act as independent data controllers.

For operational reasons, and depending on the destination of the trip, some of these providers may be located outside the European Economic Area (EEA), resulting in international transfers of personal data.

Additionally, certain service providers may be established in countries that do not provide a level of data protection equivalent to that of the European Union.

In such cases, RISE & SHINE EXPERIENCE will implement appropriate safeguards and measures to ensure that personal data remain protected and processed securely.

RISE & SHINE EXPERIENCE follows the guidelines issued by the European Data Protection Board (EDPB) and adopts appropriate technical and organisational measures to ensure a level of protection consistent with applicable data protection laws.

Where required under applicable legislation, the corresponding data protection agreements shall be executed in accordance with Article 28 of Regulation (EU) 2016/679 (GDPR).

Except in the circumstances described above, personal data will not be disclosed to third parties unless required by law.

Cybersecurity Notice

As part of our commitment to protecting the security of our clients and users, RISE & SHINE EXPERIENCE wishes to inform you that any request received electronically, whether by email, WhatsApp, or any other digital communication channel, purportedly originating from our company and relating to:

  • Changes to payment methods;
  • Requests for personal information;
  • Requests for contact details;
  • Bank account information;
  • Credit card information; or
  • Any other sensitive information,

should not be acted upon unless independently verified through an alternative communication channel directly with RISE & SHINE EXPERIENCE.

This measure is intended to minimise the risk of cyberattacks, fraud, identity theft, phishing attempts, or other security incidents that may affect our clients, users, or our organisation.

We encourage all users to exercise caution and notify us immediately of any suspicious communications.

Your Rights

Any individual has the right to obtain confirmation as to whether RISE & SHINE EXPERIENCE is processing personal data relating to them.

Data subjects may withdraw their consent at any time, provided that the processing is not necessary for the performance of a contract.

Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to its withdrawal.

You may exercise your rights of:

  • Access;
  • Rectification;
  • Erasure ("right to be forgotten");
  • Restriction of processing;
  • Data portability; and
  • Objection to processing,

at any time and free of charge by contacting:

Email: alain@riseandshineexperience.com

or by writing to:
CLAN VENTURES, S.L.
Avenida Riera de Cassoles, 62, 2nd Floor, Door 1
08012 Barcelona, Spain

Please include the reference: "EXERCISE OF DATA PROTECTION RIGHTS" and specify the right you wish to exercise together with sufficient information to identify yourself.

Requests will generally be answered within one (1) month of receipt.

Where necessary, taking into account the complexity and number of requests, this period may be extended by an additional two (2) months.

If you believe that your rights have not been adequately addressed, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or with any other competent supervisory authority in accordance with applicable data protection legislation.

Use and Publication of Images

RISE & SHINE EXPERIENCE may process and publish photographs and/or videos in which clients and employees may appear for the purpose of promoting its services and activities, including publication on:

  • The corporate website;
  • Social media platforms (including Instagram and similar platforms);
  • Promotional materials; and
  • Corporate communications.

For group trips and experiences, photographs and videos may be captured during activities for promotional purposes.

Such processing shall only take place where the data subject has previously provided explicit, specific, and informed consent through the corresponding image-use authorisation and, where applicable, image rights release.

Similarly, where clients voluntarily submit photographs or videos through channels such as WhatsApp or other communication platforms, and RISE & SHINE EXPERIENCE wishes to publish such content, prior explicit consent will be requested before any publication takes place.

The legal basis for this processing is the data subject's consent.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

RISE & SHINE EXPERIENCE shall adopt all reasonable measures to ensure that images are used appropriately and respectfully, safeguarding the rights and freedoms of the individuals concerned and preventing any improper or unlawful use.

Commercial and Promotional Communications

One of the purposes for which RISE & SHINE EXPERIENCE processes personal data is to send commercial and promotional communications relating to products, services, promotions, offers, events, and company news that may be of interest to Users.

Such communications will only be sent where:

  • The User has provided consent; or
  • The User is an existing client and has not objected to receiving such communications, in accordance with applicable law.

Users who wish to stop receiving commercial or promotional communications may do so at any time by:

Emailing: alain@riseandshineexperience.com

or clicking the unsubscribe link included in commercial communications where available.

Changes to this Privacy Policy

RISE & SHINE EXPERIENCE will review and update this Privacy Policy at least once per year and whenever required due to changes in legislation, regulatory guidance, or internal processing activities.

CLAN VENTURES, S.L. will ensure that this Privacy Policy is updated whenever there are changes to applicable legal requirements or to the way personal information is processed.

Acceptance and Consent

The User acknowledges that they have been informed of the conditions relating to the protection of personal data and accepts the contents of this Privacy Policy.

By providing personal data through this Website and/or contracting services offered by RISE & SHINE EXPERIENCE, the User confirms that they have read, understood, and accepted this Privacy Policy.