Privacy policy

1. Who is responsible for your personal data?

Cortijo MaSy is privately rented by:

Marco Baars and Sylvia Huizinga Barriada la Mela 2 04271 La Mela, Almería Spain

Accommodation registration number: VTAR/AL/01356

Email: info@cortijomasy.nl Phone/WhatsApp: +34 711 07 83 27

Marco Baars and Sylvia Huizinga are responsible for the processing of personal data in connection with Cortijo MaSy as described in this Privacy Policy.

2. What personal data do we process?

Depending on how you contact us or use our services, we may process, among other things, the following data:

- first and last name; - address, postal code and place of residence; - email address; - telephone number; - arrival and departure date; - expected time of arrival; - number of guests; - information you provide yourself in a message or booking request; - booking and payment information; - details of selected additional services; - date on which the applicable terms were accepted; - data necessary for the legally required guest registration.

We ask you not to provide unnecessary sensitive personal data via the contact form or the chatbot.

3. Booking requests and reservations

When you submit a booking request directly with Cortijo MaSy, we process the data necessary to:

- handle your request; - administer availability and stay; - communicate with you; - process payments and any refunds; - handle the reservation administratively and financially; - meet our legal obligations.

For an ordinary booking request, we collect the personal data of the main booker and the number of guests. The legally required identification details of the other guest(s) may be collected later separately via the designated check-in procedure.

4. Legal guest registration and Check-in Scan

For guests staying at Cortijo MaSy, certain data must be registered when this is required under the applicable Spanish regulations.

For this purpose, use may be made of Check-in Scan or a comparable specialised service.

Via this procedure, identification and other legally required guest data may be processed.

We ask guests to provide passport, identity document or comparable sensitive identification data only via the designated secure check-in procedure and not via the ordinary contact form or the chatbot.

5. Payments

For payments, Cortijo MaSy may use Stripe or another designated payment service provider.

When you pay via an external payment service, the data necessary for the payment is processed by that payment service provider in accordance with its own privacy policy.

Cortijo MaSy receives the information necessary to determine the status and administrative processing of the payment.

6. Contact

When you contact us, we may process your name, email address, telephone number and the content of your message in order to answer your question and communicate with you.

The contact form on the website may open your email program to send the message directly to Cortijo MaSy.

7. Newsletter

When you voluntarily subscribe to the newsletter, we process your email address and, when you provide it, your first name.

These data are used exclusively for the newsletter and related communication for which you have given permission.

For the technical processing and sending of the newsletter and emails, use may be made of external service providers, including Mailchimp and Resend.

You may withdraw your consent for the newsletter at any time via the unsubscribe option in the email or by contacting us.

Withdrawing consent does not affect the lawfulness of the processing prior to the withdrawal.

8. Chatbot

A digital assistant/chatbot may be available on the website to answer questions about Cortijo MaSy.

When you use the chatbot, the messages you enter and technical data necessary for the operation of the service may be processed in order to answer your question and, where necessary, enable follow-up.

Do not provide any passport data, identity documents, payment card data or other unnecessary sensitive personal data via the chatbot.

9. Website analytics and Google Analytics

Cortijo MaSy may use Google Analytics 4 (GA4) to gain insight into the use and functioning of the website.

Google Analytics is only activated after you have given permission for analytical cookies/tracking via the cookie banner.

The GA4 Measurement ID used for Cortijo MaSy is:

G-0JFLFGCR25

If you do not give permission for analytical tracking, GA4 should not be activated via our consent settings.

More information about the tracking technologies used and your choices can be found in the separate cookie policy.

10. Marketing tracking

Marketing tracking is only used when there is an applicable legal basis and, where required, consent.

At this time, no Meta Pixel is active on the Cortijo MaSy website.

If additional marketing tracking is activated in the future, the privacy and cookie policy must be updated where necessary.

11. Purposes and legal bases

We process personal data only when a valid legal basis exists for doing so.

Depending on the processing, this may be necessary:

- to handle a booking request or to perform the reservation agreement; - to comply with legal obligations, including applicable guest registration and administrative obligations; - on the basis of your consent, for example for the newsletter and analytical tracking; - for legitimate interests, for example for necessary communication, security, fraud prevention and the proper functioning of our services, insofar as your rights and interests do not outweigh these.

12. With whom may data be shared?

Insofar as necessary, personal data may be processed or shared with service providers we use for the provision of our services.

This may include, among other things:

- hosting and technical infrastructure; - booking and accommodation management; - Check-in Scan or a comparable guest registration service; - Stripe or another payment service provider; - Mailchimp; - Resend; - Google Analytics after consent; - suppliers that technically support the website, chatbot or communication infrastructure; - competent authorities when we are legally obliged to provide data.

Service providers receive data only insofar as this is necessary for their respective function.

13. International transfer

Some technical service providers may process personal data outside the European Economic Area.

When this applies, the transfer must take place on the basis of a transfer mechanism permitted under the applicable privacy legislation, such as an adequacy decision or appropriate contractual safeguards.

14. Retention periods

Personal data are not retained for longer than necessary for the purpose for which they were collected and insofar as necessary to comply with applicable legal, tax, administrative or other obligations.

The specific retention period may therefore vary per type of data.

When data are processed exclusively on the basis of consent and that consent is withdrawn, further processing for that purpose is terminated, unless another legal basis requires the retention or processing.

15. Security

We take reasonable technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration or disclosure.

However, no electronic processing or internet connection can guarantee absolute security.

16. Your privacy rights

Insofar as the applicable privacy legislation so provides, you may, among other things, have the right to:

- request access to your personal data; - have incorrect data corrected; - request deletion of data; - request restriction of processing; - object to certain processing; - request data portability; - withdraw previously given consent.

A request may be sent to:

info@cortijomasy.nl

We may request additional information when this is reasonably necessary to verify your identity.

17. Filing a complaint

If you believe that your personal data are not being processed correctly, you may contact us so that we can assess your question or complaint.

In addition, insofar as applicable, you have the right to file a complaint with the competent supervisory authority for data protection.

In Spain, this is the Agencia Española de Protección de Datos (AEPD).

18. External websites and services

The website may contain links to third-party websites or services.

Cortijo MaSy is not responsible for the privacy policy or data processing of independent external websites and service providers. For that, please consult the privacy policy of the relevant provider.

19. Changes

This Privacy Policy may be amended when our services, systems used or legal obligations change.

The current version is made available via the Cortijo MaSy website.

20. Contact

For questions about this Privacy Policy or the processing of personal data:

Cortijo MaSy Marco Baars and Sylvia Huizinga Barriada la Mela 2 04271 La Mela, Almería Spain

Email: info@cortijomasy.nl Phone/WhatsApp: +34 711 07 83 27