Privacy policy
This policy explains which personal data are processed when you visit this website or stay at Blanca Rosa, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
- Controller
- Lidia Dix
- Address
- Avinguda Vicente Blasco Ibáñez, 11, 03130 Santa Pola (Alicante), España
Visiting this website
This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), acting as our processor. To deliver the pages and protect the site against attacks, Cloudflare processes technical data such as your IP address, the date and time of access, the page requested and your browser type.
- Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).
- International transfers: Cloudflare is certified under the EU-US Data Privacy Framework and uses the European Commission's Standard Contractual Clauses.
- We do not use analytics, advertising or tracking tools. Fonts are served from our own website.
Google map
The map in the location section is only loaded if you click "Show map". Your browser then connects to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which receives your IP address and may set cookies. Google may transfer data to the USA under the EU-US Data Privacy Framework.
- Legal basis: your consent, given by clicking the button (Art. 6(1)(a) GDPR). If you do not click, no data is sent to Google.
- More information in Google's privacy policy (opens in a new tab).
Contacting us
If you write to us by email or WhatsApp, we use your data only to reply and, where relevant, to prepare your stay (Art. 6(1)(b) GDPR). WhatsApp is a service of WhatsApp Ireland Limited and subject to its own privacy policy. We delete messages once they are no longer needed, unless the law requires us to keep them.
Bookings
Bookings are made through Airbnb or Booking.com, which process your data as independent controllers under their own privacy policies. We receive the data needed for your stay from the platform and use it to perform the accommodation contract (Art. 6(1)(b) GDPR).
Guest registration
Spanish Royal Decree 933/2021 requires us to collect the identity details of every guest and report them to the Ministry of the Interior. This processing is based on a legal obligation (Art. 6(1)(c) GDPR). The data are kept for the period that law requires (three years) and are only passed to the competent authorities.
Recipients
We do not sell or share your data. They are only received by our web host (Cloudflare), by Google if you load the map, and by authorities where the law requires it.
Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time by contacting the controller. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es (opens in a new tab)) or with the authority in your country.
No automated decision-making or profiling takes place.
See also our cookie policy.