top of page

VILLA LUCUMA

PRIVACY POLICY

Effective Date: February 1st, 2025

At Kantuvillas, we are committed to protecting your privacy and ensuring that your personal data is handled in compliance with applicable laws, including the General Data Protection Regulation (GDPR) and the UK Data Protection Act. This policy explains how we collect, use, and protect your personal information when you use our website (www.kantuvillas.com), contact us via WhatsApp Business, or engage with our services.

1. Data Controller

The entity responsible for processing your personal data is:

Inversiones Andagua SLU
📍 Address: C. Orense 2, 28292 Galapagar
📧 Email: fuerteventura@kantuvillas.com

If you have any questions about this policy or your data, you can contact us at the email above.

2. What Data We Collect

We collect the following types of personal data:

  • Identification Data: Name, surname, email, phone number.

  • Booking Information: Check-in and check-out dates, number of guests, special requests.

  • Payment Data: Billing details (processed securely through third-party payment providers; we do not store credit card information).

  • Communication Data: Messages exchanged with our team via email, website forms, or WhatsApp Business.

  • Technical Data: IP address, browser type, and device information.

We do not collect sensitive personal data unless explicitly required for legal purposes (e.g., passport details for regulatory compliance).

3. Purpose of Processing and Legal Basis

We process your personal data for the following purposes:

PurposeLegal Basis

To manage and confirm bookingsPerformance of a contract

To process payments securelyLegal obligation

To respond to inquiries and provide customer support (web & WhatsApp)Legitimate interest

To send promotional offers (if consent is given)Consent

To comply with legal and tax obligationsLegal obligation

4. Use of WhatsApp Business

Kantuvillas uses WhatsApp Business as a customer service and booking communication tool. By contacting us via WhatsApp, you agree to the processing of your data as outlined in this Privacy Policy.

Data collected through WhatsApp:

  • Phone number

  • Name (if provided in WhatsApp profile)

  • Messages exchanged

Purpose of processing WhatsApp data:

  • Responding to customer inquiries

  • Managing booking requests

  • Providing support before, during, and after the stay

Storage & Security:

  • WhatsApp messages are encrypted end-to-end, but Meta (WhatsApp's parent company) may process data according to its privacy policy.

  • We do not share chat data with third parties, except when required by law.

Your rights regarding WhatsApp messages:

  • You may request the deletion of your conversation by sending “Delete my data” to our WhatsApp number.

5. Sharing Your Data

We only share your data when necessary for service fulfillment and legal compliance. This includes:

  • Payment providers: To process transactions securely.

  • Service providers (cleaning, maintenance, check-in staff): To facilitate your stay.

  • Legal authorities: If required by law.

We do not sell or rent your personal data to third parties.

6. International Data Transfers

Since our management services are operated from multiple locations, we may transfer your data outside the European Economic Area (EEA). When we do so, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or ensuring our partners comply with GDPR.

7. Data Retention

We retain your personal data only for as long as necessary:

  • Booking records: 5 years (for legal and tax obligations).

  • Customer inquiries without a booking: 12 months.

  • WhatsApp conversations: 6 months unless the user requests deletion.

  • Marketing communications: Until you withdraw your consent.

Once the retention period expires, we securely delete or anonymize your data.

8. Your Rights Under GDPR and UK GDPR

As a data subject, you have the following rights:

  • Right to Access: Request a copy of your personal data.

  • Right to Rectification: Correct inaccurate or incomplete data.

  • Right to Erasure (‘Right to be Forgotten’): Request data deletion under certain conditions.

  • Right to Restriction: Limit how we process your data.

  • Right to Data Portability: Receive your data in a structured format.

  • Right to Object: Object to processing for marketing purposes.

  • Right to Withdraw Consent: If you previously consented to marketing, you can opt out anytime.

To exercise these rights, contact us at [Insert Email].

9. Security Measures

We implement strict security protocols to protect your personal data against unauthorized access, alteration, or loss. This includes:

  • SSL encryption for data transmission.

  • Access control measures for staff handling your data.

  • Regular security audits to ensure compliance.

10. Cookies and Tracking Technologies

We use cookies to improve your browsing experience. You can manage cookie settings in your browser. For more details, visit our Cookie Policy [Insert Link].

11. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. Any modifications will be posted on this page with an updated “Effective Date.”

12. Contacting Supervisory Authorities

If you believe we have not handled your data properly, you have the right to file a complaint with:

  • Spain: Agencia Española de Protección de Datos (AEPD) (www.aepd.es)

  • UK: Information Commissioner's Office (ICO) (www.ico.org.uk)

However, we encourage you to contact us first so we can address your concerns.

By using our website and WhatsApp services, you agree to this Privacy Policy.

For any questions, feel free to contact us at fuerteventura@kantuvillas.com

bottom of page