Reset Password

Privacy Policy

Last Updated: [Insert Date, e.g., August 2026]

Welcome to [Insert Villa Name / Website Name] (“we,” “our,” or “the Villa”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, book a stay at our villa in Spain, or interact with us, in strict compliance with the General Data Protection Regulation (GDPR) and Spanish organic law (LOPDGDD).

1. Data Controller (Who We Are)

For the purposes of the GDPR, the data controller responsible for your personal information is:

  • Owner/Company Name: [Insert Your Name or Company Name]
  • Tax Identification Number (NIF/NIE/CIF): [Insert Number]
  • Property Registration Number: [Insert Andalusian/Valencian/etc. Tourism License Number]
  • Contact Email: [Insert Email Address]
  • Contact Phone: [Insert Phone Number]

2. The Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data: Full name, date of birth, gender, nationality, passport or national identity card (DNI/NIE) number.
  • Contact Data: Email address, phone number, and home billing address.
  • Financial Data: Payment card details or bank account details (processed securely via encrypted third-party payment gateways).
  • Booking History: Dates of your stay, number of guests, and any special requests or preferences.
  • Technical & Usage Data: IP address, browser type, and cookies tracking how you interact with our website.
  • Security & Property Data: License plate numbers (for authorized gate entry, if applicable), and temporary video recordings from exterior security cameras.

3. Why We Collect Your Data (Legal Basis for Processing)

Under the GDPR, we only process your data if we have a legal justification to do so:

  1. Performance of a Contract: To manage your inquiries, process your booking, process payments, and ensure the villa is prepared for your stay.
  2. Legal Obligation (Spanish Law):
    • In compliance with Real Decreto 933/2021, we are legally required to collect identity information from all guests over the age of 14 (Parte de Entrada de Viajeros) and report these details to the Spanish authorities (Policía Nacional or Guardia Civil) within 24 hours of arrival.
    • To comply with local Spanish tax regulations, invoicing laws, and municipal tourist taxes (where applicable).
  3. Legitimate Interests: To protect our property from damage or unauthorized entry via exterior security cameras, and to monitor decibel noise levels to ensure compliance with local community noise ordinances.

4. Smart Home & Security Devices

To ensure the safety of our guests, neighbors, and the property, the Villa utilizes the following smart home features:

  • Exterior Security Cameras / Smart Doorbells: Fixed cameras are located strictly at exterior entry points (such as the main gate, driveway, or front door) to monitor property security. Footage is recorded locally, overwrites automatically within 30 days, and is only reviewed in the event of a security breach or property damage. There are absolutely no cameras inside the villa or in private outdoor areas like patios or pool decks.
  • Noise Monitoring Devices: The property may be equipped with a smart noise sensor (e.g., Minut or NoiseAware). This device measures decibel levels only. It does not record audio, voice, or conversations. It is used solely to prevent excessive noise that violates local community bylaws.

5. Data Sharing & Third Parties

We do not sell your personal data. We only share your data with trusted partners required to run our business or comply with the law:

  • Spanish Authorities: The Policía Nacional or Guardia Civil, as strictly mandated by Spanish security laws.
  • Service Providers: Our local property management team, authorized cleaning staff, and secure third-party payment processors (e.g., Stripe, PayPal).
  • Booking Platforms: If you booked through a channel like Airbnb, VRBO, or Booking.com, data is shared between us to coordinate your stay.

6. International Data Transfers

If you are visiting from outside the European Economic Area (EEA), your data may be processed outside the EEA. We ensure that any third-party service providers we use (such as website hosting or email systems) comply with standard EU contractual clauses or equivalent safety frameworks to guarantee your data remains secure.

7. How Long We Keep Your Data

We only store your information for as long as necessary to fulfill the purposes we collected it for:

  • Guest Registration Forms (Partes de Viajeros): Must be safely retained for 3 years to satisfy Spanish police requirements.
  • Financial & Invoice Records: Retained for up to 5 years to comply with Spanish tax laws.
  • CCTV Video Footage: Automatically deleted or overwritten within 30 days.
  • General Inquiries: Deleted after 12 months if no booking is made.

8. Your Legal Rights Under GDPR

As an EU resident or visitor, you hold specific rights regarding your personal data:

  • Access: You can request a copy of the data we hold about you.
  • Correction: You can ask us to fix inaccurate or incomplete information.
  • Erasure (“Right to be Forgotten”): You can ask us to delete your data, provided we are not legally obligated to keep it (e.g., Spanish police logs).
  • Restriction & Objection: You can object to or limit certain types of data processing.
  • Data Portability: You can request a digital copy of your data to transfer elsewhere.

To exercise any of these rights, please email us at [Insert Your Contact Email]. We will respond to your request within 30 days.

9. Right to Lodge a Complaint

If you believe your data has been handled incorrectly under Spanish or EU law, you have the right to file a formal complaint with the Spanish Data Protection Authority:

Agencia Española de Protección de Datos (AEPD)

  • Website: aepd.es
  • Address: C/ Jorge Juan, 6, 28001 – Madrid, Spain