Privacy Policy

Owner and Data Controller

Finca Gran Cerros S.C.
Buzón 58
Laja Prieta
Álora
Málaga, 29500, Spain

Email: hello@fincagrancerros.com

Types of Data Collected

This Website collects the following Personal Data, either directly or through third-party services:

• First name and last name
• Address and country
• Email address
• Telephone number
• Cookies and Usage Data

Full details on each type of Personal Data collected are provided in the relevant sections of this privacy policy or by specific explanation texts displayed prior to Data collection.

Personal Data is provided directly by Users when making enquiries, bookings, or contacting us, or collected automatically in the case of Usage Data.

Unless stated otherwise, all Data requested is required to provide our services. Failure to provide required Data may make it impossible to process an enquiry or booking.

Users who are uncertain about which Personal Data is mandatory are welcome to contact us.

Any use of Cookies or similar tracking tools by this Website serves the purpose of providing the service requested by the User, in addition to any other purposes described in this document and any applicable Cookie Policy.

Mode and Place of Processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification, or destruction of Personal Data.

Data processing is carried out using computers and IT-enabled tools, following organisational procedures strictly related to the purposes indicated in this policy.

In addition to the Owner, Personal Data may be accessible to trusted third parties involved in the operation of this Website and services, such as hosting providers, IT providers, email communication services, and payment processors, appointed where necessary as Data Processors.

An updated list of these parties may be requested at any time.

Legal Basis of Processing

The Owner processes Personal Data when one of the following applies:

• The User has given consent for one or more specific purposes
• Processing is necessary for the performance of a contract or pre-contractual obligations (e.g. enquiries or bookings)
• Processing is necessary for compliance with a legal obligation (including Spanish tourist registration requirements)
• Processing is necessary for the legitimate interests of the Owner, provided those interests do not override the rights of the User

The Owner will gladly clarify the specific legal basis for any processing upon request.

Place of Processing

Data is processed at the Owner’s operating offices and at the locations of authorised service providers.

Where Personal Data is transferred outside the European Union, such transfers are carried out in accordance with applicable data protection laws and appropriate safeguards.

Users may request further information about data transfers using the contact details provided above.

Retention Period

Personal Data is retained only for as long as necessary for the purposes for which it was collected.

Specifically:

• Data relating to enquiries and bookings is retained for the duration of the contractual relationship and as required by Spanish legal and regulatory obligations
• Guest registration data required by law is retained for the legally mandated period
• Marketing data is retained until consent is withdrawn

Once the applicable retention period expires, Personal Data is securely deleted.

Purposes of Processing

Personal Data is collected to allow the Owner to provide services, including:

• Responding to enquiries
• Managing bookings and stays
• Complying with legal and regulatory obligations
• Communicating with guests
• Improving website performance and user experience

Analytics

Google Analytics

This Website uses Google Analytics, a web analytics service provided by Google Ireland Limited.

Google Analytics collects data to track and analyse Website usage and prepare reports on Website activity.

Personal Data collected: Cookies and Usage Data
Place of processing: Ireland

Users may opt out of Google Analytics tracking through their browser settings or Google’s opt-out tools.

Managing and Sending Messages

This Website uses email communication services to manage enquiries and, where applicable, marketing communications.

Mailchimp (Inuit)

Mailchimp is used for managing subscriber email communications.

Personal Data collected: Email address, first name, last name
Place of processing: United States

Users may unsubscribe from marketing communications at any time.

The Rights of Users

Users have the right to:

• Withdraw consent at any time
• Object to the processing of their Data
• Access their Personal Data
• Request rectification or updating of inaccurate Data
• Restrict processing under certain circumstances
• Request erasure of their Personal Data where applicable
• Receive their Data in a structured, commonly used format
• Lodge a complaint with their competent data protection authority

Requests may be made using the contact details provided and will be addressed within one month.

Legal Obligations and Disclosure

Personal Data may be disclosed where required by law or by public authorities, including Spanish authorities responsible for tourist accommodation regulation.

Changes to This Privacy Policy

The Owner reserves the right to amend this privacy policy at any time by updating this page.

Confirmed bookings and existing data will continue to be governed by the policy in force at the time the Data was collected, unless otherwise required by law.

Users are encouraged to review this page periodically.

Definitions and Legal References

This privacy policy is prepared in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation).

This policy applies solely to this Website.