Privacy Policy
Casa Lavender Frigiliana
Last updated: October 2026
At Casa Lavender Frigiliana, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us or make a reservation. This Privacy Policy applies in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation.
1. Data Controller
The data controller responsible for the processing of your personal data is: Jan Schönfeld – AndalusiaHome.com CASA LAVENDER Frigiliana Plaza de la Constitution 9 Frigiliana, Spain Email: casalavender9@gmail.com Property Registration Details Property Registration Number: ESFCTU000029013000000000000000000000000 Tourist Registration Number: VTAR/MA/05182 Property #: 5796326ha For privacy-related questions or requests concerning your personal data, please contact us at the email address above.
2. Personal Data
We Collect Depending on how you use our website and services, we may collect: first and last name; email address; telephone number; booking and accommodation details; arrival and departure dates; number of guests; information provided through contact forms; information necessary for guest registration and legal reporting; payment and billing information where applicable; correspondence between you and us; technical information such as IP address, browser type, device type and information about your interaction with our website; information collected through cookies and similar technologies. We only collect and process personal data that is necessary for the relevant purpose.
3. How We Use Your Personal Data
We may use your personal data to: process and manage accommodation reservations; communicate with you regarding your reservation and stay; respond to enquiries submitted through our contact form; provide check-in and guest registration services; comply with legal, accounting, tax and regulatory obligations; process payments where applicable; provide customer support; maintain and secure our website; understand how visitors use our website; measure the effectiveness of our advertising and marketing; improve our website, services and guest experience.
4. Legal Basis for Processing
Depending on the circumstances, we process personal data on the following legal bases: Performance of a contract – where processing is necessary to process or manage your reservation and provide the accommodation services you have requested. Legal obligation – where we are required to process or retain information under applicable law, including accounting, tax and guest-registration requirements. Legitimate interests – where processing is necessary for the security, administration and improvement of our services, provided that these interests do not override your rights. Consent – where you have voluntarily provided consent for optional processing, including certain analytics, advertising and marketing cookies. Where processing is based on consent, you may withdraw your consent at any time.
5. Booking Data and Smoobu
Our website and direct booking system are provided through Smoobu GmbH, a software provider for vacation-rental businesses. When you make a reservation through our website, the personal data you provide, including your contact details and booking information, are processed through Smoobu in order to process the reservation and provide the requested services. Smoobu GmbH Pappelallee 78/79 10437 Berlin Germany Smoobu acts as a service provider/data processor for the relevant booking and website functions. For more information about Smoobu's own data protection practices, please see the Smoobu Privacy Policy.
6. Google Analytics
We use Google Analytics to understand how visitors use our website and to measure website traffic and performance. Google Analytics may use cookies and similar technologies to collect information about website visits, such as pages viewed, approximate location, device and browser information and interactions with the website. We use Google Analytics for statistical and analytical purposes and to improve our website and services. Where required by applicable law, Google Analytics will only be activated after you have provided the relevant consent through our cookie settings.
7. Meta Pixel
We may use the Meta Pixel, provided by Meta Platforms Ireland Limited, to measure the effectiveness of our advertising campaigns and understand interactions with our website. The Meta Pixel may collect information about website visits and actions performed on the website and may use cookies or similar technologies. This information may be used to measure advertising performance, create audiences and improve the relevance and effectiveness of our advertising. Where required by applicable law, the Meta Pixel will only be activated after you have provided the relevant consent through our cookie settings.
8. Cookies
Our website uses cookies and similar technologies. Some cookies are necessary for the technical operation, security and functionality of the website and may be used without consent where permitted by applicable law. Other cookies, including certain analytics and advertising cookies, may require your consent. You can manage your cookie preferences through the cookie settings provided on our website. Where applicable, you can withdraw your consent at any time.
9. Contact Form
If you contact us through a contact form, we process the information you provide, such as your name, email address, telephone number and message, in order to respond to your enquiry. We use this information only for the purpose of handling your enquiry and any necessary follow-up communication, unless another legal basis permits further processing.
10. Payments
If you make a payment through our website, payment information may be processed by the relevant payment service provider. Where possible, payment card details are processed directly by the payment provider and are not stored by us. The processing of payment information may also be subject to the privacy policy of the relevant payment provider.
11. Guest Registration and Legal Obligations
When you stay at Casa Lavender, we may be required to collect and provide certain guest information to competent authorities in accordance with applicable Spanish legal requirements. Such processing is based on our legal obligations and is limited to the information required by law.
12. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected. Booking, accounting, tax and legally required guest information may be retained for longer periods where required by applicable law. When personal data is no longer required, it will be deleted or securely anonymised where appropriate.
13. Data Sharing
We may share personal data with trusted service providers where necessary to operate Casa Lavender and provide our services. These may include: Smoobu GmbH – booking and property-management software; payment service providers; guest-registration and legally required authorities; website and technical service providers; Google – analytics services; Meta Platforms – advertising and measurement services. We do not sell your personal data.
14. International Data Transfers
Some of the service providers we use may process personal data outside the European Economic Area. Where personal data is transferred outside the EEA, we take appropriate measures to ensure that such transfers comply with applicable data protection legislation.
15. Your Rights
Subject to applicable legal conditions, you have the right to: request access to your personal data; request correction of inaccurate or incomplete data; request deletion of your personal data; request restriction of processing; object to certain processing; request data portability; withdraw consent where processing is based on consent. You may exercise your rights by contacting: casalavender9@gmail.com You also have the right to lodge a complaint with the competent data protection supervisory authority.
16. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no method of transmission or storage over the internet can be guaranteed to be completely secure.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or the way we process personal data. The latest version will always be published on this website.