Privacy Policy

Last updated: March 13, 2025

Casa Ladera Andaluz ("Company", "We", "Us", or "Our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit https://andaluz.casa/ ("Website").

By using our Website, you consent to the collection and use of your personal data in accordance with this Privacy Policy.

1. Who We Are

2. Personal Data We Collect

a) Information You Provide Voluntarily

We collect the following personal data when you submit a form on our Website:

  • Booking Inquiry Form: Name, email address, requested booking details.
  • General Contact Form: Name, email address, and message content.

b) Automatically Collected Data (Usage Data)

When you visit our Website, we automatically collect:

  • IP address
  • Browser type and version
  • Device information (e.g., operating system, screen resolution)
  • Date and time of access
  • Pages visited and time spent on each page
  • Web vitals and performance metrics

This data is used for security, debugging, and website optimization.

c) Cookies & Tracking Technologies

We use a locale cookie to remember your language preference. This cookie does not track personal data or user behavior.

  • Locale Cookie: Stores your preferred language setting. Expires when you clear your browser cache.
  • Cloudflare Turnstile: Used for bot protection through IP address verification. Expires after 30 minutes.
  • Google Maps API: Enables the display of maps on our site and may collect IP addresses. These cookies are session-based.

We do not use analytics or marketing cookies.

3. Legal Basis for Processing Data (Article 6 GDPR)

We process your personal data based on:

  • (a) Contractual necessity – When you submit a booking inquiry.
  • (b) Legitimate interest – For security, fraud prevention, and ensuring website functionality.
  • (c) Consent – When you voluntarily submit personal data via our contact forms.

4. How We Use Your Data

We process your personal data for the following purposes:
✅ Responding to booking inquiries and general contact requests.
✅ Maintaining website functionality and security.
✅ Preventing fraudulent activities (Cloudflare Turnstile).
✅ Improving our Website and user experience.

We do not sell your data or use it for targeted advertising.

5. How Long We Keep Your Data

We store personal data only as long as necessary for the purposes outlined in this policy.

  • Contact Form Submissions: Retained for 6 months, then permanently deleted.
  • Booking Inquiry Data: Stored for 1 year, unless legal obligations require longer retention.
  • Server Logs (IP addresses): Maintained for 30 days for security monitoring, then automatically purged.

If you request deletion of your data, we will comply unless legal obligations require retention.

6. How We Share Your Data

Third-Party Services We Use

Your personal data may be shared with:

  • Cloudflare Turnstile (Cloudflare, Inc., USA) – Bot protection.
  • Google Maps API (Google Ireland Ltd.) – Displays maps on our Website.
  • Vercel Speed InsightsI (Vercel Inc, USA) – Collects web vitals and perfomance metrics.

Email Processing

When you submit a form on our Website, your name, email, and message are sent directly to our Gmail account via secure email transmission. We do not store this information on our web servers. Google (Google Ireland Ltd.) processes these emails, and Google's security and privacy policies apply.

International Data Transfers

Some third-party services process data outside the EU. For example, Google’s email infrastructure involves international data transfers. We ensure that such transfers comply with Standard Contractual Clauses (SCCs) under Article 46 GDPR.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access (Art. 15 GDPR) – Request a copy of your personal data.
  • Right to Rectification (Art. 16 GDPR) – Correct inaccurate or incomplete data.
  • Right to Erasure (Art. 17 GDPR) – Request deletion of your data ("right to be forgotten").
  • Right to Restrict Processing (Art. 18 GDPR) – Limit how we use your data.
  • Right to Data Portability (Art. 20 GDPR) – Receive your data in a machine-readable format.
  • Right to Object (Art. 21 GDPR) – Object to certain types of processing.
  • Right to Withdraw Consent – Withdraw consent at any time for processing based on consent.

To exercise these rights, contact us at: casa.ladera.andaluz@gmail.com

If you believe we are processing your data unlawfully, you may file a complaint with your local Data Protection Authority (DPA).

8. Security of Your Data

We use industry-standard encryption and security measures to protect your data. However, no online system is 100% secure.

If a data breach occurs, we will notify affected users and relevant authorities under Article 33 GDPR.

9. Children's Privacy

Our Website is not intended for children under 13 years old. We do not knowingly collect data from minors. If you believe a child has provided personal data, please contact us to remove it.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

Last updated: March 13, 2025

11. Contact Us

For any privacy-related inquiries, you can reach us at:

📧 Email: casa.ladera.andaluz@gmail.com
🌍 Website Contact Page: https://andaluz.casa/en/reservation/