Privacy Policy

Last updated: March 26, 2026This is the Privacy Policy of Villa Oro Blanco (hereinafter referred to as "we", "us", or "our"), accessible via https://villaoroblanco.com. We operate as a private lessor of our holiday villa in Pinoso, Spain.

We are committed to protecting your privacy and ensuring that your personal data is handled securely and in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect, why we collect it, and how we protect it.

1. Personal Data We Collect

When you visit our website, make an inquiry, or book a stay at our villa (either directly or through an external booking platform), we may process the following personal data:

Contact details: Name, email address, phone number, and home address.
Booking details: Dates of your stay, number of guests, costs incurred, and any special requests.
Identity documents (Required by Spanish law): Passport or ID card details of all guests aged 14 and older. To collect and process this data securely, we use the certified platform Chekin (Chekin Solutions S.L.). Before your arrival, you will receive a secure link to complete this mandatory online check-in.
Payment information: Bank details or transaction history (we do not store credit card details directly).
Technical data: IP address, browser type, and cookies (via Google Analytics, only after your explicit consent).

2. How We Obtain Your Data

We receive your personal data in two ways:

Directly from you: When you fill out our contact form, place a direct booking on our website, or enter your details into the Chekin system.
Via external booking platforms: When you book our villa through platforms such as Booking.com, Airbnb, Micazu, or similar channels. These platforms forward your contact and booking details to our central booking system via a secure integration.

3. Why We Use Your Personal Data (Legal Basis)

We process your personal data for the following specific purposes:

Execution of the booking agreement: To process your reservation, send booking confirmations, and handle payments.
Legal obligation (Spanish Law): According to Spanish Royal Decree 933/2021, we are legally required to register all guests staying at tourist accommodations with the Spanish authorities.
Legitimate interest: To answer your questions, handle inquiries via our contact form, or improve our website.
Consent: For analytical cookies (Google Analytics) to understand how visitors use our website, but only if you accept them via our cookie banner.

4. Data Retention: How Long Do We Keep Your Data?

We do not store your data longer than necessary for the purposes stated above:

Inquiries without booking: Max. 6 months after the last contact.
Booking records and identity data: Saved for 5 years to comply with Spanish tax and police administration legal obligations.
Analytical data: Max. 14 months via Google Analytics.

5. Sharing Data with Third Parties

We never sell your data. We only share your information with trusted partners and authorities when necessary for business operations or legal requirements:

Lodgify (Codebay Solutions Ltd.): Our central Property Management System (PMS) and the host of our website. Lodgify securely stores your booking and contact details.
Chekin (Chekin Solutions S.L.): We share your booking details with Chekin to facilitate your online check-in. The identity data you provide through Chekin is securely transmitted directly to the Spanish authorities and police.
Local property managers: Only your name and phone number, so they can arrange the key handover and assist you during your stay.

6. Cookies

Our website uses cookies. Essential cookies are loaded automatically to make the website function correctly. Analytical cookies (such as Google Analytics) are only activated after you actively give permission via our cookie banner. You can change your cookie preferences at any time through your browser settings.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

The right to access the personal data we hold about you.
The right to correct or update incorrect data.
The right to delete your data (unless we are legally required to keep it, such as for Spanish police records).
The right to withdraw your consent at any time (e.g., for cookies).

8. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: [email protected]