Privacy policy

This policy describes what personal data we collect, what we use it for and which rights you have.

Data controller

Juan Ortega Saceda, owner of the rented apartment. Contact email: hola@alicante.feldescloud.com.

Data we collect

Data you provide in the booking form: name, email, phone (optional), country, dates and number of guests, free-text message. After confirming a booking: ID document (required by Spanish hospitality law) and payment details.

Purpose and legal basis

To process your booking request (basis: pre-contractual contract execution), to comply with legal obligations (traveller registry, taxes), and, only if you give explicit consent, to send occasional offers about the apartment itself.

Retention

Unfinished requests: 6 months. Confirmed bookings: legally required time (traveller registry 3 years, accounting 6 years). After that data is deleted or anonymised.

Data sharing

We do not share your data with third parties for commercial purposes. Data is shared with public administration only when required by law (police traveller registry) and with the bank processing the payment.

Your rights

You can access, correct, delete, object to or port your data by writing to hola@alicante.feldescloud.com. You also have the right to file a complaint with the Spanish Data Protection Agency (aepd.es).

Cookies, analytics and technical logs

This website does not use advertising or analytics cookies. Umami (v2.15.1) is self-hosted and sets no cookies. It records visited pages and URL query parameters, the referring page, and technical data (browser, operating system, device, screen size, language, and approximate location). It uses the request IP to derive location, but Umami does not store the IP. A session identifier is calculated from technical data with a salt that rotates at the start of each month. Booking interaction events include language, nights and guest count, whether the name, email or message fields are filled in, and the request outcome or status code; they do not include the contents of those fields, stay dates, or phone number. No automatic purge is configured for the Umami database: records remain until manually deleted. Redeeming a valid guest-guide QR code sets the technical guest_guide cookie (HttpOnly, Secure, SameSite=Strict), which expires after 30 days to maintain private access. For security and troubleshooting, the entry proxy records the source IP, date and time, path, method, response, browser, and referring page. Files rotate daily and the configuration keeps 14 rotations; some historical files from earlier formats remain outside that rotation and may be older. Nginx separately sends logs to an internal system with IPv4 truncated to /24, IPv6 omitted, and approximate country, city, and ASN data; those logs are kept for 7 days. We do not use these data for advertising.