Privacy Policy
At Cortijo Andaluz we take data protection very seriously, in accordance with the GDPR and other applicable regulations.
1. Data Controller
Trading name: Cortijo Andaluz
Contact email: info@cortijoandaluzcds.com
Purpose of the website: tourist information and management of accommodation bookings.
2. What personal data we collect
When you visit this website or make a booking, we may collect:
- Full name
- Email address
- Phone number
- Dates of stay and number of guests
- Payment information (processed by secure external platforms)
- IP address, browser and site‑usage data (via cookies)
3. Purpose and legal basis of processing
Your data will be processed for the following purposes:
- Manage bookings and related communications
- Respond to information or contact requests
- Comply with legal obligations (billing, security, etc.)
- Improve the user experience on the website
The legal basis for processing is your explicit consent given when providing the data and, where applicable, compliance with legal obligations.
4. Recipients of the data
Your data may be processed by external service providers, such as the online booking engine, secure payment gateways, or web‑hosting services that operate on our behalf in accordance with our instructions.
Note on booking engine: Reservations are managed through an external system that encrypts payments and stores data securely.
5. Data retention period
We will retain your data:
- For as long as the contractual or commercial relationship lasts.
- For the periods required by law (e.g., for tax or accounting purposes).
- Until you request their deletion, provided there is no legal obligation to keep them
6. User rights
You can exercise the following rights by sending an email to info@cortijoandaluzcds.com
- Access your personal data
- Request rectification or deletion
- Restrict or object to processing
- Request the portability of your data
- Withdraw consent at any time
- If you believe your rights have not been respected, you can lodge a complaint with the
- Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures to keep your data safe, such as encrypted SSL connections, secure servers and service providers that comply with the GDPR.
8. Cookies
This site uses first‑ and third‑party cookies to enhance your browsing experience, analyse traffic and offer personalised content. You can configure or refuse non‑essential cookies when you enter the site. For full details, please see our Cookies Policy.
We reserve the right to modif.
We reserve the right to modify this Privacy Policy; any significant change will be communicated through the website.
