Privacy Policy
What we do with the details you send us, why we are allowed to, how long we keep them and what you can ask us to do with them at any time.
1. Who is responsible for your data
The controller of your personal data is Villa Palmview, CIF B42687939, Camí de la Fontana 39, 03730 Jávea (Xàbia), Alicante, Spain — a tourist accommodation registered with the Comunitat Valenciana under licence number VT-439839A.
For anything relating to this policy or to your data, write to sales.villapalmview@gmail.com, call +34 711 061 570 or send a message to WhatsApp +32 475 27 12 42.
2. What we collect
Apart from the guest registration that the law imposes on us (section 3), we collect only what you hand us yourself. Through the enquiry form on this website that is:
- your name;
- your e-mail address;
- your telephone number (optional);
- your arrival and departure dates;
- the size of your group;
- the package you selected;
- whatever you choose to write in the free message field.
If you write to us by e-mail, call us or message us on WhatsApp instead, we process the data contained in that conversation. We do not buy personal data from third parties, we do not enrich it, and we do not build profiles.
3. Guest registration required by law
As a registered vivienda turística we are obliged by Royal Decree 933/2021 to record the identity of every guest staying at the villa and to transmit those details to the Spanish Ministry of the Interior through the SES.HOSPEDAJES platform.
- Purpose
- Complying with the statutory duty of tourist accommodation to register and report the details of its guests.
- Legal basis
- Compliance with a legal obligation, Art. 6(1)(c) GDPR, in conjunction with Royal Decree 933/2021.
- Data concerned
- Name and surname, identity document or passport number, date of birth, nationality, and the payment details the decree requires us to record.
- Recipient
- Ministerio del Interior (SES.HOSPEDAJES platform).
- Retention
- Three years, as the decree prescribes.
Providing these details is a legal requirement, not a choice: without them we may not lawfully hand over the keys.
4. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry, checking availability and sending you a quotation | Steps taken at your request prior to a contract, and our legitimate interest in replying to people who contact us (Art. 6(1)(b) and 6(1)(f) GDPR) |
| Agreeing and carrying out a rental of the villa | Performance of a contract to which you are a party (Art. 6(1)(b) GDPR) |
| Keeping the invoicing and accounting records the law obliges us to keep | Compliance with a legal obligation (Art. 6(1)(c) GDPR) |
Providing your data is not a statutory requirement, but without at least a name, an e-mail address and your dates we cannot answer an enquiry.
5. How long we keep it
Enquiry data is kept for 24 months after our last contact with you and is then deleted. Where tax or accounting law obliges us to keep a document longer — an invoice, for instance — we keep that document for the statutory period and nothing beyond it.
6. Who else sees it
The website and its enquiry form run on Netlify (Netlify Forms), which acts as our processor and handles your data only on our instructions and under a data processing agreement. Part of this processing also takes place outside the European Economic Area. Any such transfer is covered by the European Commission's Standard Contractual Clauses and/or by the EU-US Data Privacy Framework, supplemented by the technical measures Netlify applies to data in transit and at rest.
Beyond that, your data may be shared with our accountant and, where legally required, with the competent authorities. We never sell your data, never rent it out, and never use it for advertising.
7. Cookies and statistics — and why there is no cookie banner
This website sets no tracking, advertising or profiling cookies. Visitor statistics are measured with Plausible Analytics, a European, privacy-first analytics tool that:
Instagram gallery. If the Instagram gallery on our site is switched on, it is served by Behold (behold.so) and the images come from Instagram’s content servers (Meta). Loading it means those parties receive your IP address and basic browser data; they are separate controllers for that processing. We set no cookies of our own for it, and we receive no personal data from it. When the gallery is switched off, a fixed selection of our own photos is shown and nothing is loaded from third parties. See behold.so/privacy and Instagram’s privacy policy.
- uses no cookies and stores nothing on your device;
- collects no personal data and no IP addresses that can be traced back to you;
- does not track you across other websites and builds no cross-site profile.
All Plausible tells us is aggregated: how many people visited a page, roughly which country they came from and which page sent them here. Because none of this involves storing information on your device or processing personal data, no consent is required and this site therefore shows no cookie banner.
8. Your rights
Under the GDPR you may at any time ask us for:
- access — a copy of the data we hold about you;
- rectification — correction of anything inaccurate or incomplete;
- erasure — deletion of your data where we no longer need it;
- restriction — a freeze on processing while a dispute is resolved;
- portability — your data in a structured, machine-readable format;
- objection — to processing based on our legitimate interest.
A single e-mail to sales.villapalmview@gmail.com is enough. We answer within one month. If we cannot establish who you are, we may ask for proof of identity before acting. Exercising these rights is free of charge.
9. Complaints
If you believe we handle your data incorrectly, please tell us first — most things are settled in a single message. You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the supervisory authority of the country in which you live or work.
10. Security
Traffic to and from this site is encrypted (HTTPS). Access to enquiries is limited to the people who need it to answer you and is protected by strong, individual credentials.
11. Changes
If this policy changes, the new version appears on this page with a new date. Material changes affecting guests with a current booking are communicated by e-mail.
Last updated: 27 July 2026
These pages are published in five languages. In the event of any difference of interpretation between the versions, the Spanish text prevails.