Privacy Policy
What we do with the details you send us, why we are allowed to, how long we keep them and what you can ask us to do with them at any time.
1. Who is responsible for your data
The controller of your personal data is Villa Palmview, CIF B42687939, Camí de la Fontana 39, 03730 Jávea (Xàbia), Alicante, Spain — a tourist accommodation registered with the Comunitat Valenciana under licence number VT-439839A.
For anything relating to this policy or to your data, write to sales.villapalmview@gmail.com, call +34 711 061 570 or send a message to WhatsApp +34 711 061 570.
2. What we collect
Apart from the guest registration that the law imposes on us (section 3), we collect only what you hand us yourself. Through the enquiry form on this website that is:
- your name;
- your e-mail address;
- your telephone number (optional);
- your arrival and departure dates;
- the size of your group;
- the package you selected;
- whatever you choose to write in the free message field.
If you write to us by e-mail, call us or message us on WhatsApp instead, we process the data contained in that conversation. We do not buy personal data from third parties, we do not enrich it, and we do not build profiles.
3. Guest registration required by law
As a registered vivienda turística we are obliged by Royal Decree 933/2021 to record the identity of every guest staying at the villa and to transmit those details to the Spanish Ministry of the Interior through the SES.HOSPEDAJES platform.
- Purpose
- Complying with the statutory duty of tourist accommodation to register and report the details of its guests.
- Legal basis
- Compliance with a legal obligation, Art. 6(1)(c) GDPR, in conjunction with Royal Decree 933/2021.
- Data concerned
- Name and surname, identity document or passport number, date of birth, nationality, and the payment details the decree requires us to record.
- Recipient
- Ministerio del Interior (SES.HOSPEDAJES platform).
- Retention
- Three years, as the decree prescribes.
Providing these details is a legal requirement, not a choice: without them we may not lawfully hand over the keys.
4. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry, checking availability and sending you a quotation | Steps taken at your request prior to a contract, and our legitimate interest in replying to people who contact us (Art. 6(1)(b) and 6(1)(f) GDPR) |
| Agreeing and carrying out a rental of the villa | Performance of a contract to which you are a party (Art. 6(1)(b) GDPR) |
| Keeping the invoicing and accounting records the law obliges us to keep | Compliance with a legal obligation (Art. 6(1)(c) GDPR) |
Providing your data is not a statutory requirement, but without at least a name, an e-mail address and your dates we cannot answer an enquiry.
5. How long we keep it
Enquiry data is kept for 24 months after our last contact with you and is then deleted. Where tax or accounting law obliges us to keep a document longer — an invoice, for instance — we keep that document for the statutory period and nothing beyond it.
6. Who else sees it
The website and its enquiry form run on Netlify (Netlify Forms), which acts as our processor and handles your data only on our instructions and under a data processing agreement. Part of this processing also takes place outside the European Economic Area. Any such transfer is covered by the European Commission's Standard Contractual Clauses and/or by the EU-US Data Privacy Framework, supplemented by the technical measures Netlify applies to data in transit and at rest.
Beyond that, your data may be shared with our accountant and, where legally required, with the competent authorities. We never sell your data and never rent it out. Advertising measurement only happens with your consent, as described in section 7.
Booking tool (Smoobu). Availability, prices and online bookings on this site run through Smoobu GmbH (Berlin, Germany), our channel and booking manager. If you book or request a quote through the booking tool, the data you enter there (name, contact details, dates, group size, payment status) is processed by Smoobu on our behalf under a data processing agreement; the booking tool itself is loaded from Smoobu’s servers. See Smoobu’s privacy policy.
Chat. The chat on this site is answered by an automated assistant that runs on Cloudflare Workers (Cloudflare, Inc.) and an AI language model. Your messages are sent to that service to generate an answer and are not stored beyond the request; nothing you type in the chat reaches us unless you send it via the “Send to the owners” form. Do not enter payment details in the chat.
7. Cookies, statistics and the cookie banner
This website uses two kinds of tools: statistics that need no consent, and advertising and usability tools that only run after you allow them in the cookie banner. You can change your choice at any time via “Cookie preferences” in the footer.
Without consent: Plausible Analytics
Visitor statistics are measured with Plausible Analytics, a European, privacy-first tool that uses no cookies, stores nothing on your device, collects no personal data or traceable IP addresses and does not follow you across other websites. All it tells us is aggregated: how many people visited a page, roughly which country they came from and which page sent them here. No consent is required for this.
Only with your consent: Google Ads, OpenAI and Microsoft Clarity
- Google Ads conversion measurement (Google Ireland Ltd.). Lets us see whether a visit that started from one of our ads led to a booking request. Sets the cookie
_gcl_au(90 days) and uses Google’s consent mode: until you allow it, Google receives only anonymous, aggregated signals. See Google’s privacy policy. - OpenAI conversion measurement (ChatGPT Ads) (OpenAI). Shows us whether a visit that started from one of our ads in ChatGPT led to a request. Sets the first-party cookie
__opprefand only loads after you allow cookies. See OpenAI’s privacy policy. - Microsoft Clarity (Microsoft Ireland Operations Ltd.). Records anonymised sessions (clicks, scrolling, heat maps) so we can see where the site is unclear and improve it. Sets the cookies
_clckand_clsk(up to 12 months); form fields and personal details are masked before recording. See Microsoft’s privacy statement.
The legal basis for all three is your consent (art. 6(1)(a) GDPR and art. 22.2 LSSI-CE). Declining changes nothing about how the site works. All three providers may transfer data to the United States; those transfers are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
Instagram gallery. If the Instagram gallery on our site is switched on, it is served by Behold (behold.so) and the images come from Instagram’s content servers (Meta). Loading it means those parties receive your IP address and basic browser data; they are separate controllers for that processing. We set no cookies of our own for it. See behold.so/privacy and Instagram’s privacy policy.
8. Your rights
Under the GDPR you may at any time ask us for:
- access — a copy of the data we hold about you;
- rectification — correction of anything inaccurate or incomplete;
- erasure — deletion of your data where we no longer need it;
- restriction — a freeze on processing while a dispute is resolved;
- portability — your data in a structured, machine-readable format;
- objection — to processing based on our legitimate interest.
A single e-mail to sales.villapalmview@gmail.com is enough. We answer within one month. If we cannot establish who you are, we may ask for proof of identity before acting. Exercising these rights is free of charge.
9. Complaints
If you believe we handle your data incorrectly, please tell us first — most things are settled in a single message. You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the supervisory authority of the country in which you live or work.
10. Security
Traffic to and from this site is encrypted (HTTPS). Access to enquiries is limited to the people who need it to answer you and is protected by strong, individual credentials.
11. Changes
If this policy changes, the new version appears on this page with a new date. Material changes affecting guests with a current booking are communicated by e-mail.
Last updated: 7 September 2026
These pages are published in five languages. In the event of any difference of interpretation between the versions, the Spanish text prevails.