Privacy Policy

Who we are

The data controller is La Molineta, La Molineta, Frigiliana, 29788 Málaga, Spain. For any privacy question or to exercise your rights, contact us at management@molineta.com.

What we collect

• Contact details you give us (name, email, phone) when you enquire or book.
• Booking details (dates, villa, number and identity of guests).
• Guest identity details required by Spanish law for registration with the authorities.
• Payment information — handled directly by Stripe; we receive confirmation of payment but never see or store your full card details.
• Website usage data (via analytics cookies) such as pages visited and device type.

How and why we use it

• To take and manage your booking and communicate with you about your stay (performance of our contract with you).
• To register guest details with the Spanish authorities, as we are legally required to do (legal obligation).
• To send marketing emails only where you have opted in, which you can withdraw at any time (consent).
• To run and improve our website and understand how it is used (our legitimate interests).

Who we share it with

We only share your data with trusted service providers who help us run our business, including:

• Stripe — secure payment processing.
• Beds24 — our booking and channel management system.
• Resend — sending booking and service emails.
• Mailchimp — sending newsletters, where you have opted in.
• Cloudflare and Google Analytics — website hosting, security, and usage analytics.
• The Spanish authorities (e.g. the Guardia Civil / National Police and SES.Hospedajes), as required by law for guest registration.

We do not sell your personal data to anyone.

International transfers

Some of our providers process data outside the European Economic Area. Where they do, appropriate safeguards (such as the EU Standard Contractual Clauses) are in place to protect your data.

How long we keep it

We keep booking and guest records for as long as needed to provide our service and to meet our legal, tax, and accounting obligations, after which they are securely deleted.

Your rights

You have the right to access, correct, or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent for marketing at any time. To exercise any of these, email management@molineta.com. You also have the right to complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Cookies

We use essential cookies to make the site work and analytics cookies to understand how it is used. You can control cookies through your browser settings.