Privacy Policy

1. General Information
The protection of your personal data is very important to us. With this Privacy Policy, we inform you about which personal data we collect, how we process such data, and which rights you are entitled to under the General Data Protection Regulation (GDPR) and the Spanish Data Protection Act LOPDGDD (Ley Orgánica 3/2018).

2. Data Controller
The Balearian – Villas & Concierge
Owner: Florian Settele (Autónomo)
Calle Alber 64
07008 Palma de Mallorca
Spain
Email: info@thebalearian.com

A data protection officer is not legally required.

3. Purposes and Legal Bases of Processing
We process personal data exclusively in accordance with the GDPR and the Spanish LOPDGDD.

a) Enquiries and communication
Legal basis: Art. 6(1)(b) GDPR.

b) Booking enquiries and contractual processing
Legal basis: Art. 6(1)(b) GDPR.

c) Use of property management systems (e.g. vOffice)
Legal basis: Art. 6(1)(b) GDPR.
Processing is carried out under a data processing agreement pursuant to Art. 28 GDPR.

d) Legal obligations (e.g. statutory reporting duties)
Legal basis: Art. 6(1)(c) GDPR.

e) Marketing and legitimate interests
Legal basis: Art. 6(1)(f) GDPR.
Where required, processing is carried out only on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

4. Categories of Personal Data
In particular, the following categories of personal data may be processed:
- Name and address
- Email address and telephone number
- Booking and stay-related data
- Identification documents (statutory reporting requirements)
- Payment information
- IP address as well as device and browser data

5. Recipients of Personal Data
Your personal data may be disclosed to:
- Property owners and property managers
- Service providers (e.g. property management systems)
- Public authorities where legally required

Data is only disclosed where this is necessary for contract performance or to comply with legal obligations.

6. Data Retention
Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations.

7. Your Rights as a Data Subject
You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)

To exercise your rights, an informal request to the contact details above is sufficient.

8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority.
The competent authority in Spain is:

Agencia Española de Protección de Datos (AEPD)
www.aepd.es

9. Cookies
Our website uses technically necessary cookies.
Analytics and marketing cookies are only used with your prior consent.

10. Web Analytics and Online Advertising
Where web analytics or advertising services (e.g. Google Analytics, Google Ads) are used, this is done exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

11. Social Media
We maintain online presences on social networks such as Instagram, Facebook and LinkedIn.
Personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR.
The privacy policies of the respective platform operators apply in addition.

12. Data Security
We implement appropriate technical and organisational security measures, in particular SSL encryption, to protect your data against loss, manipulation or unauthorised access.

13. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect legal, technical or organisational changes.

Status: January 2026