Privacy
Data controller
Gertrud Rappl · NIF X0353072E
Calle Estrella de Mar 1 · Los Abrigos · 38618 Granadilla de Abona · España
info@estrelladelmar.es
Enquiries via the website
When you send an enquiry, we process the data you provide (e.g. name, email address, requested dates and message) in order to respond. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR).
Bookings and customer data
If a rental is concluded, we process the data required for the rental contract (first and last name, address, phone, email, booking period and apartment). The legal basis is performance of the contract (Art. 6(1)(b) GDPR), compliance with legal obligations such as guest registration with the authorities (Art. 6(1)(c) GDPR) and our legitimate interest in the proper administration of the rental (Art. 6(1)(f) GDPR).
Marketing (with consent only)
If you have expressly consented, we occasionally send you information about availability and offers (e.g. New Year greetings with available dates). The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time with effect for the future — informally by email to info@estrelladelmar.es or via the unsubscribe notice in every message. Without consent, no marketing is sent.
Recipients / processors
To provide the website and process enquiries we use carefully selected service providers with whom data processing agreements are in place:
- Vercel – website hosting
- Supabase – database (EU region)
- Resend – email delivery (EU region)
- Sentry – error monitoring (EU region)
Data is shared with other third parties only where necessary to perform the contract or comply with legal obligations. Where data is processed outside the EU, this is based on appropriate safeguards (e.g. EU standard contractual clauses).
Cookies and analytics
This website uses no tracking or advertising cookies. For anonymous analytics we use Vercel Web Analytics without cookies and without building a personal profile. In the internal administration area only a strictly necessary session cookie is used for login.
Retention period
Enquiry data is deleted once it is no longer required for processing. Contract and customer data is retained for the duration of the business relationship and within statutory retention periods. Consent-related marketing data is stored until withdrawal.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, contact the address above. You also have the right to lodge a complaint with a supervisory authority — in Spain the Agencia Española de Protección de Datos (AEPD, www.aepd.es).