Privacy policy
Last updated: 21 October 2026.
Data controller
Apartaments Perlamarval S.L.U. · tax ID B46957593 · Paseo de Neptuno, 24, planta 1, puerta 1, 46011 Valencia, Spain · info@apartamentsperlamar.com · +34 601 206 828.
What data we process and why
Contact form: name, email, phone (optional), dates and message, to answer your enquiry. Basis: your consent and pre-contractual steps (art. 6.1.a and b GDPR).
Newsletter: your email, to send you at most one offer email per quarter after you confirm (double opt-in). Basis: consent, which you can withdraw at any time via the link in every email.
Booking requests: first name, surname, email, phone, country, comments, apartment, dates and number of guests, to manage your request and your stay (art. 6.1.b) and to meet the legal guest registration obligation (Royal Decree 933/2021, art. 6.1.c). We keep them on our server and in Guesty, our booking system.
Payment: you enter your card details in a secure GuestyPay form (Guesty’s payment processor, PCI-DSS certified) shown inside our page. They never pass through our server and we never see them. You are only charged if we accept the booking (art. 6.1.b).
Offers when booking: if you tick the offers box, we add you to the newsletter with the same double email confirmation (art. 6.1.a). It is optional and does not affect your booking.
Cookies and consent: we store a random identifier, the date and your choice to prove consent (art. 7.1). Google analytics only if you accept it.
Security: to stop form abuse we use Cloudflare Turnstile and store a hashed summary of the IP address, never the IP itself. Basis: legitimate interest in protecting the site (art. 6.1.f).
How long
Enquiries: 12 months. Booking requests on our server: 24 months. Newsletter: until you unsubscribe; unconfirmed sign-ups are deleted after 7 days. Cookie consent records: 25 months. Booking and guest registration data: the periods required by law (3 years for guest registration) and applicable tax rules.
Who processes data on our behalf
Guesty Inc. and its payment processor GuestyPay (booking management, payments and guest communication), with servers in the USA.
OVHcloud (server hosting, in Canada, a country with an EU adequacy decision).
IONOS (email) and Resend (automated email delivery).
Cloudflare (Turnstile bot protection) and Google Ireland Ltd. (Google Analytics 4 and Google Maps, only with your consent).
Where a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision (including the EU-US Data Privacy Framework) or standard contractual clauses.
We do not sell or share your data with third parties, except where required by law (for example, guest registration with the authorities).
Your rights
You can request access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to info@apartamentsperlamar.com. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Children
This site is not aimed at children under 14. Bookings must be made by adults.
