Privacy Policy
We are pleased about your interest in our website. Protecting your personal data is important to us. Below we inform you in accordance with Art. 13 GDPR about which data we process, for what purposes, and what rights you have.
1. Controller
Energia Experto Andalusia S.L
Camino de la Fusta 2
Urbanización Nuevo Melilla
11130 Chiclana de la Frontera (Cádiz)
Spain
Phone: +34 655 610 517
E-mail: [email protected]
VAT ID: ESB22891329
2. Data Protection Officer (DPO)
We have not appointed a Data Protection Officer unless we are legally required to do so.
3. Purposes and Legal Bases
We process personal data in particular for the following purposes:
- Providing the website (technical operation and security)
- Handling enquiries (e.g., via e-mail/phone)
- Direct booking and contract performance (reservation, communication, billing)
- Payment processing (Stripe or bank transfer)
4. Access Data / Server Log Files
When you use the website for informational purposes only, our hosting provider/server automatically collects information in so-called server log files, e.g. IP address, date and time of access, requested page/file, referrer URL, browser/device information. Processing is carried out to ensure the technical provision, stability and security of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
5. Contact
If you contact us by e-mail or phone, we process your details (e.g., name, contact data, content of your request) in order to handle your enquiry and, if necessary, follow-up questions.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures/contract) or Art. 6(1)(f) GDPR (general communication).
6. Direct Booking / Contract Performance
For direct bookings, we process the data necessary to carry out the booking and the stay, typically: name, contact details, travel dates, number of guests, messages/special requests, payment status and necessary billing data.
Legal basis: Art. 6(1)(b) GDPR (contract or pre-contractual measures).
7. Payment Processing
7.1 Payment via Stripe
If you pay via Stripe, the payment is processed by the payment service provider Stripe. The data required for payment (e.g., amount, currency, payment status and, where applicable, card data/payment details) is transmitted to Stripe and processed there. We usually receive confirmations/status information regarding the payment.
Legal basis: Art. 6(1)(b) GDPR (contract performance).
7.2 Payment via Bank Transfer
If you pay by bank transfer, we process in particular contact data, booking/invoice data and payment information (e.g., amount, date, reference) to the extent necessary to allocate and process the payment.
Legal basis: Art. 6(1)(b) GDPR (contract performance).
8. Recipients / Categories of Recipients
We only share personal data if this is necessary for contract performance, required by law, or you have consented. Possible recipients include:
- Payment service provider (Stripe) for card payments
- IT/hosting providers (for operation and maintenance of the website)
- Tax/advisory service providers (where necessary to comply with legal obligations)
9. Storage Period
We store personal data only as long as necessary for the stated purposes. In addition, we store data where we are subject to statutory retention obligations.
10. Cookies and Similar Technologies
We may use cookies and similar technologies that are necessary for the technical operation, booking functionality and payment processing. For non-essential cookies (e.g., marketing/tracking), if used, we obtain your prior consent via a cookie/consent banner. You can withdraw your consent at any time with effect for the future.
11. Your Rights
Under the GDPR you have, in particular, the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing. Where processing is based on consent, you can withdraw consent at any time.
12. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD).
13. Security
We implement appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access.
14. Last Update
Last update: [Month/Year]