Guatazales
Book now
Language
ES EN FR
Vive Guatazales

Privacy Policy

Last updated: July 2026. Draft prepared in accordance with the GDPR and the Spanish LOPDGDD, pending legal review before launch.

At Guatazales we handle your personal data with the utmost care and transparency. This policy explains who the data controller is, what data we collect, for what purpose and on what legal basis, with whom we share it, how long we keep it and how you can exercise your rights.

1. Data controller

  • Owner: Miguel Ángel Campoy Corbalán
  • Tax ID (NIF): 77722144S
  • Address: calle Perú 13, 1 · 30180 Bullas (Murcia), Spain
  • Email: [email protected]
  • Phone / WhatsApp: +34 643 87 52 52
  • Website: vive.guatazales.es

2. Data we process and its origin

We only process the data you provide us through the website:

  • Identification and contact data: first name, surname, postal address, email and phone number.
  • Order and booking data: products purchased, experiences or stays booked, shipping and billing address and purchase history.
  • Payment data: processed directly by certified payment gateways. We do not store your full card details.
  • Browsing data: obtained through cookies and similar technologies, as set out in our Cookie Policy.

3. Purposes, legal basis and retention

  • Managing your purchases and bookings (order processing, shipping, experience and stay bookings, invoicing and customer support). Legal basis: performance of a contract. Retention: for the duration of the commercial relationship and thereafter for the applicable legal periods (up to 6 years for commercial and tax obligations).
  • Managing your user account and the Río de la Miel Club (private area, points, passport and favourites). Legal basis: performance of a contract and your consent. Retention: for as long as you keep the account active; you may request its deletion at any time.
  • Sending you commercial communications and the newsletter (news, offers and Guatazales content), only if you have subscribed. Legal basis: your consent. Retention: until you withdraw consent or unsubscribe.
  • Handling your enquiries sent via the form, email or WhatsApp. Legal basis: your consent and our legitimate interest in assisting you. Retention: as long as needed to resolve your request.
  • Complying with legal obligations (tax, accounting and consumer law). Legal basis: legal obligation.
  • Analytics and marketing via cookies. Legal basis: your consent, manageable from the cookie notice. See our Cookie Policy.

4. Recipients and processors

We do not sell or rent your data to third parties. We only share it when necessary to provide the service or by legal obligation:

  • Payment gateways: Stripe Payments Europe, Ltd., PayPal (Europe) S.à r.l. et Cie, S.C.A. and Redsys Servicios de Procesamiento, S.L., to process payments securely (PCI-DSS certified environment).
  • Shipping and courier companies: to deliver your orders.
  • Web hosting provider: which hosts the site and its database on servers located in the European Union.
  • Google Ireland, Ltd. (Google Analytics) and Meta Platforms Ireland, Ltd. (Meta Pixel), only if you accept analytics and marketing cookies.
  • Public authorities and courts, where there is a legal obligation.

5. International transfers

As a general rule, your data is processed within the European Economic Area. The use of Google Analytics and Meta Pixel may involve transfers to the United States; such transfers are covered by the EU–US Data Privacy Framework and/or by the standard contractual clauses approved by the European Commission. These tools are only activated if you consent to the corresponding cookies.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw your consent, without affecting the lawfulness of prior processing.

To exercise them, write to [email protected] or by post to the address given in section 1, identifying yourself and stating the right you wish to exercise. We will respond within the legally established time frames.

7. Complaints to the supervisory authority

If you believe we have not processed your data correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.

8. Security

We apply appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of your data and to prevent its alteration, loss or unauthorised access, taking into account the state of the art and the risks of processing.

9. Minors

The website and its services are intended for adults. We do not knowingly collect data from children under 14 without the consent of their parents or guardians.

10. Changes to this policy

We may update this Privacy Policy to adapt it to legislative developments or changes to our services. Any modification will be published on this same page, indicating the date of the last update.

Message us on WhatsApp