Privacy policy
How personal data is handled on this site
This policy explains what data the site collects, for what purpose, who processes it and which rights apply. All processing complies with the GDPR and the Spanish data protection law (LOPDGDD).
Data controller
Villa Los Pichies. For any query and to exercise the rights listed below, please get in touch through the contact form on the website.
Data collected
The data sent through the contact form: name, email, phone (optional), type of booking, arrival and departure dates, duration, number of people and message.
Purpose
To reply to enquiries and booking requests received through the contact form and to manage the relationship with the data subject until the enquiry or the stay is finalised.
Legal basis
The consent of the data subject, given by accepting this policy before submitting the form, and the pre-contractual measures taken at their request.
Retention
Data is kept as long as needed to answer the enquiry. If the enquiry leads to a booking, it is also kept for the legally required periods (invoicing, accounting or tax obligations). Once those periods expire, the data is erased or blocked.
Recipients and processors
Form messages are sent through Web3Forms (Web3Forms Inc., USA), received at the owner's email service and the website is hosted on Vercel (Vercel Inc., USA). When a video is played, the YouTube player in enhanced privacy mode (Google LLC, USA) receives the IP address and may set its own cookies. On the Location page, OpenStreetMap Foundation (United Kingdom) receives the IP address to serve the map tiles. These providers act as data processors or independent controllers. Transfers may involve international data transfers outside the European Economic Area, covered by the European Commission's Standard Contractual Clauses or other appropriate safeguards. Data is not shared for commercial purposes or with any third parties other than those above.
Rights
The rights of access, rectification, erasure, objection, restriction and portability can be exercised through the contact form on the website. It is also possible to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Last updated: 2 October 2026