Privacy policy

Last updated 30 September 2026. This is a translation; the Spanish version prevails.

This policy explains which personal data are processed when you visit this website or stay at Blanca Rosa, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

Controller
Lidia Dix
Address
Avinguda Vicente Blasco Ibáñez, 11, 03130 Santa Pola (Alicante), España

Visiting this website

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), acting as our processor. To deliver the pages and protect the site against attacks, Cloudflare processes technical data such as your IP address, the date and time of access, the page requested and your browser type.

  • Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).
  • International transfers: Cloudflare is certified under the EU-US Data Privacy Framework and uses the European Commission's Standard Contractual Clauses.
  • We do not use analytics, advertising or tracking tools. Fonts are served from our own website.

Google map

The map in the location section is only loaded if you click "Show map". Your browser then connects to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which receives your IP address and may set cookies. Google may transfer data to the USA under the EU-US Data Privacy Framework.

Contacting us

If you write to us by email or WhatsApp, we use your data only to reply and, where relevant, to prepare your stay (Art. 6(1)(b) GDPR). WhatsApp is a service of WhatsApp Ireland Limited and subject to its own privacy policy. We delete messages once they are no longer needed, unless the law requires us to keep them.

Bookings

Bookings are made through Airbnb or Booking.com, which process your data as independent controllers under their own privacy policies. We receive the data needed for your stay from the platform and use it to perform the accommodation contract (Art. 6(1)(b) GDPR).

Guest registration

Spanish Royal Decree 933/2021 requires us to collect the identity details of every guest and report them to the Ministry of the Interior. This processing is based on a legal obligation (Art. 6(1)(c) GDPR). The data are kept for the period that law requires (three years) and are only passed to the competent authorities.

Recipients

We do not sell or share your data. They are only received by our web host (Cloudflare), by Google if you load the map, and by authorities where the law requires it.

Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time by contacting the controller. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es (opens in a new tab)) or with the authority in your country.

No automated decision-making or profiling takes place.

See also our cookie policy.