1. Data controller
- André Snijder and Vanessa Witteman, owners of Casa Monte Zen.
- For questions about this policy or your data: casamontezen@outlook.com.
2. What data we collect
- Booking request: name, email address, phone number, preferred arrival and departure dates, number of adults and children, date of birth of the lead guest, composition of the travel party, and any remarks you provide.
- Contact: the data you provide when you reach out to us by email or WhatsApp.
- Automatically: anonymised usage statistics via Google Analytics (only with your consent) and technical data for spam protection via Google reCAPTCHA.
3. Purposes and legal basis
- Handling and answering your booking request or question — basis: performance of (steps leading to) a contract.
- Checking whether a booking complies with our house rules regarding travel parties — basis: legitimate interest (protection of the property and neighbours).
- Protecting our forms against misuse and spam — basis: legitimate interest.
- Understanding website use to improve the site — basis: your consent (cookie banner).
- We never use your data for other purposes without informing you.
4. Cookies and analytics
- We only place analytical cookies (Google Analytics 4, with IP anonymisation) after you have given consent via the cookie banner.
- Decline? The website works fully, but nothing is measured.
- You can change your choice at any time via your browser settings.
5. Sharing with third parties
- EmailJS — to send your booking request to our mailbox.
- Google — for Analytics and reCAPTCHA.
- Vercel — for hosting the website.
- These parties process data solely on our behalf. We never sell your data.
- Some of these services may process data outside the EU; this is done under appropriate safeguards (standard contractual clauses).
6. Retention periods
- We keep booking data for as long as necessary for handling and as required by the statutory (tax) retention obligation.
- We do not keep correspondence longer than necessary.
- After that, we delete your data.
7. Your rights
- You have the right to access, rectify, erase, restrict and transfer your data, and the right to object or withdraw your consent.
- To exercise these, email casamontezen@outlook.com.
- If you disagree with how we handle your data, you can lodge a complaint with the Spanish supervisory authority (Agencia Española de Protección de Datos, www.aepd.es).
8. Security
- The website runs entirely over a secure connection (HTTPS).
- We take appropriate measures to protect your data against loss or unauthorised access.
9. Changes
- We may update this privacy policy. The most current version is always available on this page.