Privacy Policy

1. Data Controller

The data controller responsible for this website is:

2. Data We Collect

We collect the following personal data only when you voluntarily submit our contact form:

• Full name
• Email address
• Phone number (optional)
• Message content

Legal basis: Your explicit consent given at the time of form submission (Article 6(1)(a) GDPR).

3. Purpose of Processing

We use the submitted data exclusively to respond to your inquiry about our vacation rental management services. We do not use your data for marketing, profiling, or any other purpose.

4. Data Storage and Transmission

We do not store your personal data in any database. When you submit the contact form, your data is forwarded to our inbox via Resend, an email delivery service. We retain only the email exchange that is necessary to answer your inquiry.

5. Third-Party Service Providers

We use the following third-party services that may process personal data as part of operating this website:

6. Data Retention

Form submission data is not stored in a database. Email exchanges are retained only for as long as necessary to handle your inquiry, and are subject to our email provider's standard retention policies.

7. Your Rights

Under the GDPR and Spanish data protection law, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure — 'right to be forgotten' (Art. 17 GDPR)
• Right to restrict processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time without affecting prior processing (Art. 7(3) GDPR)

To exercise any of these rights, please contact: info@alzahra.es

8. Supervisory Authority

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Spanish data protection authority:

AEPD – Agencia Española de Protección de Datos — https://www.aepd.es