At Villa Paula we respect your privacy and are committed to protecting the personal data of everyone who visits this website, requests information or makes a booking. This policy explains what data we collect, for what purpose, how long we keep it and what rights you have under the General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

Data controller

Owner: Villa Paula
Tax ID (NIF/CIF): 27370286X
Address: Camí del Racó 7, 46940 Manises, Valencia, España
Phone / WhatsApp: +34 635 67 68 88
Email: villapaula@villapaula.es
Website: https://villapaula.es

What data we collect and why

Enquiries and bookings

When you write to us through the website contact form or on WhatsApp, we process the data you voluntarily provide (name, email address, phone number and the content of your message) in order to answer your enquiry and manage your possible booking. The legal basis is the performance of pre-contractual measures at your request and, where applicable, the performance of the accommodation contract.

If you make a booking, your data (name, contact details, dates of stay and, where applicable, payment details) is also managed through our booking engine Octorate, which acts as data processor. The legal basis is the performance of the accommodation contract and compliance with legal obligations (for example, the guest registration required of tourist accommodation in Spain).

Browsing and analytics

We use Google Analytics and Google Ads to understand how the website is used and to measure the effectiveness of our advertising, including tracking clicks on WhatsApp and contact form submissions. These tools are only activated if you give your consent through the cookie banner. You can see exactly which cookies we use, for what purpose and for how long in our Cookie Policy, and review or withdraw your consent at any time from the banner itself.

Comments

If you leave a comment on the website, we collect the data shown in the comment form, as well as your IP address and browser user agent, to help us detect spam. An anonymised string (hash) created from your email address may be provided to the Gravatar service to check whether you use it; the Gravatar privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture will be visible to the public alongside your comment.

Who we share your data with

We do not sell or transfer your data to third parties for their own commercial purposes. We share data only with the providers that work for us (data processors), including:

• Google Ireland Limited (Google Analytics and Google Ads), based in the European Union; processing may involve data transfers to the United States covered by the European Union standard contractual clauses.
• Octorate, as booking management engine.
• WhatsApp / Meta Platforms Ireland Limited, when you contact us via WhatsApp.
• 10Web, as the website’s technical hosting provider.

We will only disclose your data to law enforcement or public bodies where there is a legal obligation to do so, such as the guest registration for tourist accommodation.

Retention period

We keep your data for as long as there is a relationship with you (enquiry or booking) and, afterwards, for the periods required by law to deal with any administrative, tax or civil liability. Browsing and analytics data is kept as indicated in our Cookie Policy.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to us at villapaula@villapaula.es or to the postal address above, enclosing a copy of a document proving your identity. If you consider that we have not properly dealt with your request, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minors

Our services are intended for adults. We do not knowingly collect data from minors without the consent of their parents or legal guardians.

Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration.

Changes to this policy

We may update this privacy policy to reflect legal changes or changes to our services. The date of the last update is shown at the end of this page.

Last updated: 4 September 2026.

This translation is provided for your convenience. In case of any discrepancy, the Spanish version prevails.