Privacy policy

What data we process when you write to us, book or visit the website, why, and what your rights are, under the General Data Protection Regulation (RGPD) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

Owner
Chulilla Rural Agroturismo S.L.
Tax ID (CIF)
B40569618
Registered office
C/ Maestro Amblar, 62, 46167 Chulilla (Valencia)

What data we process and why

Enquiries by WhatsApp, phone or email. Your name, your contact details and whatever you tell us, so we can reply. The legal basis is your consent and, if you ask about a stay, taking steps prior to entering into a contract.

The website’s WhatsApp assistant doesn’t store anything: the name and reason you type are only used to prepare the message you choose to send from WhatsApp. From then on, WhatsApp (Meta) processes the data under its own policy.

Bookings. Booking data (name, contact details, dates, guests and payment) to manage your stay. The legal basis is the contract. Bookings are made at reservas.lamuelarural.com, run on the Rental Ninja platform, which acts as data processor. Payment data is handled by the booking engine’s payment gateway; we don’t store your card details.

Guest register. The law requires tourist accommodation to record guests’ identity details and report them to the Spanish Ministry of the Interior (Organic Law 4/2015 and Royal Decree 933/2021, Real Decreto 933/2021). The legal basis is that legal obligation.

Website statistics. If you accept analytics cookies, we use Google Analytics to find out how many people visit the website and which pages they find useful. Google receives pseudonymised browsing data (pages viewed, device, approximate city). The legal basis is your consent, which you can withdraw at any time from the cookie policy.

Google Search Console. We use it to see how the website appears in Google search. It only provides aggregated search statistics: it doesn’t set cookies or collect data about visitors to the website.

How long we keep it

  • Enquiries: as long as needed to reply to you and, at most, one year.
  • Bookings and invoices: the periods required by tax and commercial law, up to six years.
  • Guest register: three years, as required by Royal Decree 933/2021.
  • Google Analytics data: 14 months.

Who we share it with

Only the providers we need to deliver the service, under a data processing agreement: the website hosting, Rental Ninja (bookings) and Google (statistics, only with your consent). Also the authorities when the law requires it, as with the guest register. We don’t sell or pass on your data.

Google may process data in the United States. It is certified under the EU-US Data Privacy Framework, which the European Commission considers an adequate safeguard.

Your rights

You can request access to, rectification or erasure of your data, object to or restrict its processing, request its portability and withdraw your consent. Email us at the address shown above, stating which right you wish to exercise.

If you think we haven’t handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), at www.aepd.es.

Minors

Bookings can only be made by adults.

Security and changes

We apply technical and organisational measures to protect your data, and the website uses an encrypted connection (HTTPS). If we change this policy, we’ll publish the new version here.

Last updated: November 2026.