Privacy Policy

Controller of data processing:

privateHOLIDAY – Ihre VermittlungsAgentur
Apartado 31
38360 El Sauzal, Tenerife, Spain
E-Mail: info@private-holiday.eu

The protection of your privacy is very important to us. Below we provide detailed information about how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal information. Each time the website is accessed, the web server automatically stores a server log file (requested file, IP address, date and time, amount of data transferred, requesting provider). This access data is evaluated exclusively to ensure trouble-free operation and to improve our offering (Art. 6 para. 1 sentence 1 lit. f GDPR) and is deleted no later than seven days after the end of your visit.

Hosting is provided by a third-party provider as part of data processing on behalf of others. All data collected within the scope of this website are processed on its servers.

2. Data collection for inquiry and booking

We collect personal data (name, e-mail, telephone, travel period, number of persons, message) when you voluntarily provide it to us as part of a booking inquiry, an instant booking, or contacting us. Mandatory fields are marked as such. We use this data in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract performance and processing your inquiries. After full processing, your data will be restricted for further processing and deleted after the expiration of the retention periods under tax and commercial law.

3. Data transfer to landlords

For the performance of the contract (Art. 6 para. 1 sentence 1 lit. b GDPR), we pass on your booking and contact data to the landlord of the respective holiday property, insofar as this is necessary to carry out your stay. The landlord is informed of new inquiries and bookings by e-mail and, if applicable, SMS. Payments (deposit, remaining amount) are made by bank transfer or PayPal directly to the recipient named in the booking confirmation; the privacy policy of the respective payment service provider applies.

4. E-mail dispatch

Confirmations, payment reminders, review reminders and newsletters are sent via an e-mail dispatch service provider as part of data processing on behalf of others. In doing so, the e-mail address and the content of the message are transmitted to the service provider.

5. Newsletter

If you subscribe to our newsletter, we use your e-mail address and, if applicable, your preferred island to send you information about new holiday properties and offers based on your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). Subscription is carried out using the double opt-in procedure: the newsletter is only sent after confirmation of the link in the confirmation e-mail. You can unsubscribe at any time via the link in each e-mail or by sending us a message; after unsubscribing, we delete your e-mail address.

6. Review reminders

After your stay, you will receive an e-mail from us asking you to review the holiday property (Art. 6 para. 1 sentence 1 lit. f GDPR). You may object to this use at any time.

7. Cookies and local storage

This website does not use tracking or advertising cookies. Data necessary for the operation of the site (selected language, favorites list, recently viewed properties, last search, chat session, confirmation of the privacy notice) are stored exclusively locally in your browser (LocalStorage) and are not transmitted to us. You can delete this data at any time via your browser settings.

8. Map display (OpenStreetMap)

To display the location of the holiday properties, we use map tiles from OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) as well as the Nominatim service for address geocoding. When a map is accessed, your IP address is transmitted to these services. The legal basis is our legitimate interest in a clear presentation (Art. 6 para. 1 sentence 1 lit. f GDPR). Privacy information: https://wiki.osmfoundation.org/wiki/Privacy_Policy

9. Chat assistant (AI)

A chat assistant is available on our website, which answers questions about properties, islands and bookings. Your chat inputs are transmitted to an AI service provider (OpenAI) for the purpose of providing a response. Please do not enter any sensitive personal data in the chat. The legal basis is your consent through use of the chat (Art. 6 para. 1 sentence 1 lit. a GDPR).

10. Guest registration with the Spanish authority

Due to the Spanish registration law for recording guests of holiday accommodation, certain personal data are requested at the time of booking or arrival. This data is passed on exclusively for recording purposes to the respective landlord and the competent authority (Guardia Civil / Policía Nacional) and is not otherwise used.

11. Your rights

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, to request information about your personal data processed by us;
pursuant to Art. 16 GDPR, to request the rectification of inaccurate data or the completion of your data;
pursuant to Art. 17 GDPR, to request the erasure of your data, insofar as no statutory retention obligations oppose this;
pursuant to Art. 18 GDPR, to request restriction of processing;
pursuant to Art. 20 GDPR, to receive your data in a structured, commonly used and machine-readable format;
pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority.

Right to object: If we process data on the basis of legitimate interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time.

If you have any questions regarding the collection, processing or use of your personal data, please contact the contact details stated in the Legal Notice.

Google Analytics

Only with your consent given via the cookie banner, this website uses Google Analytics 4, a web analytics service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies and records e.g. pages visited, time on site, device type and the truncated (anonymised) IP address. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time via “Cookie settings” in the footer. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. More: https://policies.google.com/privacy