Privacy Policy

1. Data controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), we inform you that the personal data you provide will be processed by:

• Data controller: ALOJAMIENTOS INTERVEJER, S.L.
• Tax ID (CIF): B67829101
• Address: C/ Rosario 25, 11150 Vejer de la Frontera, Cádiz, Spain
• Email: hola@manzanillavejer.com
• Phone: +34 722 768 647

2. Purpose of processing

At ALOJAMIENTOS INTERVEJER, S.L. we process the information provided by data subjects for the following purposes:

• Booking management: Processing and managing accommodation bookings made at Manzanilla Hospedería Boutique.
• Handling of enquiries: Responding to enquiries and information requests received through contact forms, email, or phone.
• Invoicing: Issuing invoices and complying with legal and tax obligations.
• Commercial communications: Sending information about our services, offers, and promotions, provided that the user has given express consent.
• Service improvement: Statistical analysis of website usage to improve our services.
• Legal compliance: Meeting applicable legal obligations, including the traveller registry required by current regulations.

3. Legal basis

The legal basis for processing your data is:

• Performance of a contract: Processing data to manage bookings and provide the accommodation service.
• Consent of the data subject: Sending commercial communications and the use of non-essential cookies.
• Legal obligation: Compliance with tax obligations and the traveller registry under accommodation regulations.
• Legitimate interest: Improving our services and handling enquiries.

4. Data retention

The personal data provided will be kept:

• Booking data: For the time necessary to manage the booking and, subsequently, during the legal limitation periods (5 years for tax obligations).
• Contact data: While the commercial relationship is maintained or until the data subject requests its deletion.
• Traveller registry: In accordance with the periods established by accommodation regulations (3 years).
• Commercial communications: Until the data subject withdraws their consent.

5. Recipients

Your data may be communicated to:

• Public administrations: To comply with legal obligations (Tax Agency, National Police for traveller registry).
• Banking entities: For the management of payments and collections.
• Service providers: Acting as data processors (IT services, booking management, web analytics), with whom we have signed the corresponding processing agreements.

No international data transfers will be made outside the European Economic Area, except to providers with adequate safeguards (such as Google LLC, adhering to the EU-US Data Privacy Framework).

6. Data processors

To provide the service we engage the following data processors:

• Stripe Payments Europe Ltd. (Ireland) — Payment processor for gift voucher purchases. Receives the data necessary to process the payment (amount, transaction identifier, card details). Stripe applies its own GDPR compliance safeguards and Standard Contractual Clauses (SCCs).
• Cloudflare Inc. (United States, under SCC) — CDN and edge compute provider serving the website and the gift voucher shop. Processes IP addresses for security and delivery purposes.
• Transactional email provider (currently being selected) — Receives the email addresses of the buyer and recipient in order to deliver the purchase confirmation and the voucher code. The specific provider will be identified in this policy once the actual voucher delivery flow is finalised.

7. Rights of data subjects

Any person has the right to obtain confirmation as to whether ALOJAMIENTOS INTERVEJER, S.L. is processing personal data concerning them. Data subjects have the right to:

• Access: Know what personal data we are processing.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
• Objection: Object to the processing of your data in certain circumstances.
• Restriction of processing: Request the restriction of processing in certain cases.
• Portability: Receive your data in a structured, commonly used format.
• Withdrawal of consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise your rights by sending a written communication to C/ Rosario 25, 11150 Vejer de la Frontera, Cádiz, Spain, or to the email hola@manzanillavejer.com, indicating "Data Protection" in the subject line and attaching a copy of your identity document.

You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with current regulations.

8. Security measures

ALOJAMIENTOS INTERVEJER, S.L. has adopted the necessary technical and organisational measures to ensure the security and integrity of the data, as well as to prevent its alteration, loss, processing, or unauthorised access, taking into account the state of technology, the nature of the stored data, and the risks to which it is exposed.

The measures adopted include:

• Encryption of communications using HTTPS protocol.
• Access control to information systems.
• Regular backups.
• Staff training in data protection.

9. Minors' data

Manzanilla Hospedería Boutique is an adults-only establishment. We do not admit guests under 18 years of age and therefore do not knowingly collect personal data from minors.

If you become aware that a minor has provided us with personal data, please contact us so that we can delete it immediately.

10. Modifications to the privacy policy

ALOJAMIENTOS INTERVEJER, S.L. reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as to industry practices.

In such cases, the changes introduced will be announced on this page with reasonable advance notice before they come into effect. We recommend that you review this policy periodically.

11. Contact

If you have any questions about this Privacy Policy or about the processing of your personal data, you can contact us through:

• Email: hola@manzanillavejer.com
• Phone: +34 722 768 647
• Postal address: C/ Rosario 25, 11150 Vejer de la Frontera, Cádiz, Spain