Privacy policy

Villa Celestial (“we”, “us”) is committed to protecting your privacy and processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection laws.

This website exists solely to provide information about a privately owned estate and to facilitate discreet rental inquiries. It is not a booking platform and does not engage in marketing-based data processing.


Data Controller

The data controller responsible for processing personal data on this website is:

Villa Celestial
La Zagaleta, Spain
Email: info@villacelestial.es


Personal Data We Process

We process only personal data that you voluntarily provide when contacting us, which may include:

  • Name
  • Email address
  • Telephone number
  • Message content and inquiry details

No sensitive personal data is requested or intentionally processed.


Purpose and Legal Basis for Processing

Personal data is processed exclusively for the following purposes:

  • To respond to inquiries
  • To assess availability and suitability for a potential private rental
  • To communicate directly regarding your request

The legal basis for processing is Article 6(1)(b) GDPR (steps prior to entering into a contract) and, where applicable, Article 6(1)(f) (legitimate interest in responding to unsolicited inquiries).


Data Retention

Personal data is retained only for as long as necessary to handle the inquiry and any subsequent dialogue.
If no rental relationship is established, data is deleted within a reasonable period unless legal obligations require longer retention.


Data Sharing and Transfers

Personal data is:

  • Treated as strictly confidential
  • Never sold, marketed, or shared with third parties
  • Not transferred outside the EU/EEA

Disclosure may occur only if required by law or competent authorities.


Data Security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss, or misuse.


Cookies

This website uses only essential cookies required for basic functionality and security.
No profiling, tracking, analytics, or advertising cookies are used.


Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Request data portability where applicable

Requests can be made at any time by contacting us via the details above.

 

You also have the right to lodge a complaint with the relevant supervisory authority.