PRIVACY POLICY OF THE “LA ISLA SANTAMARÍA” ACCOMMODATION

This Privacy Policy describes how LA ISLA SANTAMARÍA PEGO SL (hereinafter “we”, “our” or “the company”) collects, uses, stores and protects your personal information when you use our services, visit our website or communicate with us by any means.

By using our website or making a booking with us, you accept the terms of this policy. If you do not wish us to process your data, please refrain from using our services and notify us via the email address indicated below.

1. Who is responsible for processing your data?

LA ISLA SANTAMARÍA PEGO SL
CIF: B21991534
Address: Carrer Nou 7, 03780 Pego (Spain)
Email: la.isla.santamaria.pego@gmail.com

2. What personal data do we collect?

We may collect the following categories of personal data, either because you provide them directly to us or through your use of our website:

Contact details: first name, last name, email address, phone number.
Booking details: dates of stay, number of guests, preferences, payment method (we do not store full card details).
Communication data: messages, inquiries, ratings or reviews you send us.
Technical and browsing data: IP address, browser type, operating system, visit duration, page load times, site interactions, and exit method.
Data collected through analytics tools: session information, purchase history, username and password (if applicable), and connection data.
Other identifiable information: comments, opinions, recommendations, and any other data you voluntarily provide.
Information during transactions: name, address, and email provided when making a booking or purchase. This information will be used solely for the purposes described.

We may also collect personal and non-personal data when you interact with our website, complete forms, participate in surveys, or communicate with us by any other means.

3. For what purposes do we process your data?

We collect and process your information for the following purposes:

To provide and operate our services, including managing bookings, payments, and customer service during your stay.
To provide ongoing customer assistance and technical support when necessary.
To communicate with you through general or personalized service-related notices, promotions (if you have given consent), or administrative matters.
To create aggregated statistical data to improve our services and website.
To comply with applicable laws and regulations (traveller registration, tax obligations, etc.).
If necessary, to contact you to resolve incidents, disputes, outstanding payments, satisfaction surveys, or other purposes related to compliance with our terms of use or applicable law.

We may contact you by email, phone, text messages, or postal mail.

4. Compliance with Royal Decree 933/2021

In accordance with Royal Decree 933/2021 of 26 October, the accommodation is legally required to record certain personal data from all guests and transmit them to the national SES.HOSPEDAJE platform of the Spanish Ministry of the Interior.

This measure is intended to guarantee public safety and applies to all individuals (natural or legal persons) contracting accommodation services in Spain.

Therefore, all guests are required to provide valid personal details when booking or checking in (full name, ID document, issuing country, arrival date, among others), which will be used exclusively for this legal purpose.

5. What is the legal basis for processing?

We process your personal data based on one or more of the following grounds:

Performance of a contract: to manage your booking, stay, or any service requested.
Explicit consent: for example, to send marketing communications or use cookies.
Compliance with legal obligations: such as traveller registration with the authorities.
Legitimate interest: to improve our services and ensure the security of the website.

6. Where is your data stored?

Our website is hosted on the Wix.com platform, which provides the infrastructure for managing our online services. Your data may be stored through Wix.com’s data storage, databases, and general applications. Wix stores your data on secure servers protected by firewalls. For more information, see the Wix.com Privacy Policy:
🔗 https://es.wix.com/about/privacy

All direct payments made through Wix.com comply with the standards set by PCI-DSS, managed by the PCI Security Standards Council (Visa, MasterCard, American Express, Discover), which ensure the secure handling of card data.

7. With whom do we share your data?

We only share your personal data when strictly necessary, for example:

With service providers (such as booking platforms or payment gateways) that help us operate our website or manage bookings.
With public authorities when required by law.

We never sell or rent your information to third parties.

We ensure that our providers comply with applicable data protection regulations and sign data processing agreements when appropriate.

8. How long do we keep your data?

We retain your data for as long as strictly necessary to fulfil the purposes for which it was collected and in accordance with applicable legal retention periods. For example, certain data must be kept for a minimum of 6 years for tax or accounting requirements.

9. Cookies

Our website uses cookies and similar technologies to enhance the user experience and analyse traffic. Upon entering the site, you are presented with a banner allowing you to accept or configure their use. If you do not accept, only cookies essential for site functionality will be used. For more information, please see our Cookie Policy or contact us.

10. Video surveillance (CCTV)

For security reasons and to protect people and facilities, some areas of the accommodation may be subject to video surveillance (CCTV). Images are stored temporarily, managed with restricted access, and are not shared with third parties unless required by law by the competent authorities.

11. What are your rights?

In accordance with the GDPR and Spanish legislation, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request the deletion of your data when no longer necessary.
Restrict or object to the processing of your data in certain circumstances.
Withdraw your consent at any time, where processing is based on it.
Request the portability of your data to another service provider.
File a complaint with the Spanish Data Protection Agency: www.aepd.es

If you wish to access, correct, modify, or delete any personal information we hold about you, you may contact us at:
📧 la.isla.santamaria.pego@gmail.com

12. How do we protect your information?

We implement appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, disclosure, alteration, or destruction. Our providers are contractually obliged to ensure the security of your data.

13. What if you no longer want us to process your data?

If at any time you wish us to stop processing your personal data, you may send us a written request to:
📧 la.isla.santamaria.pego@gmail.com

14. Changes to this policy

We reserve the right to modify this Privacy Policy at any time, so we recommend reviewing it frequently. Modifications and clarifications will take effect immediately upon their publication on the website.

If we make significant changes, we will inform you on this same page so you know what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.