Legal

Privacy Policy

Legal & Privacy Policy

This Privacy Policy explains how Gracia House collects, uses, and protects personal data when you visit our website or submit an inquiry via our contact form. We value your privacy and transparency.

Last updated: January 8, 2025

  1. Data Controller

    Gracia House operates this website and acts as the data controller for any personal data submitted through the site's inquiry system.

  2. What Data We Collect & How We Store It

    We do not maintain a user database or create user accounts on this website. When you fill out our contact form, the website simply generates an email that is sent directly to us.

    We collect only the information you voluntarily provide to make a booking inquiry:

    • Name
    • Email address
    • Phone number (optional)
    • Arrival and departure dates
    • Message (any specific questions or requests)

  3. Purpose and Legal Basis

    We process this data solely to communicate with you regarding your potential stay.

    • To respond to inquiries: Processing is necessary to take steps at your request prior to booking (Article 6(1)(b) GDPR).
    • Consent: By voluntarily sending us a message with your details, you consent to us replying to that inquiry.

  4. Third-Party Processors

    We do not sell or share your data. We use standard technical services to operate:

    • Email Hosting (Google/Gmail): Our email service is provided by Google. Your message is stored securely on Google's servers as an email thread. Google relies on Standard Contractual Clauses to ensure data protection.
    • Google Maps: Our website embeds Google Maps. When you view the map, Google may receive your IP address and device information to deliver the map tiles.

  5. Data Retention

    We keep our email correspondence only for as long as necessary to answer your inquiry or manage your reservation. Once the conversation is concluded or the booking period has passed, we do not archive your personal data in any other system.

  6. Cookies

    We do not use marketing or analytics cookies. The only technical data exchanged is strictly necessary for the website and the embedded map to function correctly.

  7. Your Rights

    Under the GDPR, you have the right to request access to, correction of, or deletion of the personal data contained in our email correspondence. To exercise these rights, please submit a request via the contact form available on this website.

Back to home