Privacy policy

1. Data controller

• Controller: Juana Provenzal March
• Tax ID (NIF/CIF): 78194075D
• Registered address: Sant Jordi, 50 — 07460 Pollença, Illes Balears (España)
• Email: andreu_moragues@hotmail.com

2. Data we process

We only process the data you voluntarily provide through the website forms:

• Contact form: name, email address, phone number and the content of your message.
• Booking request: name, email address, phone number, country, check-in and check-out dates, number of guests and notes.
• Browsing data: IP address and usage data collected through analytics cookies, only if you give your consent.

3. Purpose and legal basis

Purpose	Legal basis (GDPR Art. 6)
Responding to enquiries received via the contact form	Consent of the data subject
Managing and confirming booking requests	Performance of a contract or pre-contractual measures
Complying with tax and traveller registration obligations	Legal obligation
Analysing website usage (analytics)	Consent of the data subject

4. Retention period

Enquiry data is retained for as long as needed to handle the enquiry and, thereafter, for a maximum of 12 months. Booking-related data is retained for the duration of the contractual relationship and subsequently for the applicable statutory limitation periods (6 years for commercial and tax obligations).

5. Recipients

We do not share your data with third parties except where legally required. The following providers act as data processors as necessary to deliver the service:

• Web hosting and email provider (servers located within the European Union).
• Google Ireland Ltd. — reCAPTCHA (form spam protection) and Google Analytics (with your consent only).

The use of Google services may involve international data transfers to the USA, covered by the EU-US Data Privacy Framework.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw your consent, by writing to andreu_moragues@hotmail.com stating the right you wish to exercise.

If you believe the processing does not comply with the applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

7. Security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including HTTPS encryption of communications and access control to management systems.

8. Cookies

This site uses cookies. Full details are available in our cookies policy.