In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD), Fora-Vila Sa Pobla S.L. informs you about the processing of your personal data.
1. Data Controller
Identity:
Fora-Vila Sa Pobla S.L.
Tax ID (CIF): B57825994
Registered address: C/ Madò Buades, 12,
07420 Sa Pobla, Illes Balears, España
Contact email:
info@foravilarentals.com
2. What data we process and why
In order to provide vacation rental services, Fora-Vila Sa Pobla S.L. processes the personal data you provide when making a booking, requesting information or subscribing to our newsletter. Fields marked as mandatory are required to formalise the booking or access the requested services; without them, the service cannot be provided.
If, during the booking or enquiry process, personal data of individuals other than the person making the request must be included, you must inform them in advance of the contents of this policy.
The purposes of processing and their legal bases are as follows:
- Booking management and service provision:
processing bookings, managing payment, maintaining the contractual or pre-contractual relationship and sending communications regarding booking status.
Legal basis: Art. 6(1)(b) GDPR — performance of a contract.
- Administrative, tax and billing management:
compliance with accounting, tax and commercial obligations.
Legal basis: Art. 6(1)(c) GDPR — legal obligation.
- Customer service and enquiry management:
responding to information requests and handling incidents.
Legal basis: Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures.
- Newsletter and commercial communications:
sending newsletters, news, promotions and commercial offers by electronic means, only to those who have given their express and separate consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to its withdrawal.
Legal basis: Art. 6(1)(a) GDPR — consent of the data subject.
- Website usage statistics and analysis:
conducting surveys and market trend analyses to improve our services.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest of Fora-Vila Sa Pobla S.L. in the continuous improvement of its services.
- Traveller registration and reporting to authorities:
collection and reporting of data required by applicable regulations on tourist accommodation, including Royal Decree 933/2021, to the competent authorities through the designated systems.
Legal basis: Art. 6(1)(c) GDPR — compliance with a legal obligation.
- Guest communications via electronic channels:
managing communications related to the booking, arrival, check-in, incidents, assistance during the stay and check-out, via email, telephone, WhatsApp, booking platforms or other channels provided by the data subject.
Legal basis: Art. 6(1)(b) GDPR — performance of a contract, and Art. 6(1)(f) GDPR — legitimate interest in ensuring proper guest care.
Fora-Vila Sa Pobla S.L. does not request or retain full copies of guests' national ID cards, passports or identity documents for the purpose of traveller registration, limiting itself to collecting only the data strictly required by applicable regulations.
Fora-Vila Sa Pobla S.L. processes data in a lawful, fair, transparent, adequate, relevant, limited, accurate and up-to-date manner, and undertakes to delete or rectify without delay any data that proves to be inaccurate.
3. Who we share your data with
In order to provide the contracted services, Fora-Vila Sa Pobla S.L. may share your data with:
- Accommodation owners and providers:
only the data strictly necessary to manage the stay, access to the accommodation, incidents, maintenance or other operational matters related to the booking will be shared with accommodation owners and providers.
- Public authorities:
when required by applicable regulations (e.g., traveller registration).
- Technology service providers (data processors):
providers that process personal data on behalf of Fora-Vila Sa Pobla S.L. act as data processors and are subject to the corresponding data processing agreements, in accordance with Article 28 of the GDPR:
- Redsys (Red de Sistemas de Pago Electrónico, S.L.):
card payment processing. Spanish company domiciled in Spain.
- Google LLC:
web analytics services (Google Analytics) and mapping (Google Maps).
- Sentry (Functional Software, Inc.):
technical error monitoring for the website.
Failure to provide data to the aforementioned entities may make it impossible to provide the requested service.
4. International data transfers
Some of the service providers mentioned above are based in the United States. These transfers are carried out with the following safeguards:
- Google LLC and its affiliates:
certified under the EU-US Data Privacy Framework, declared adequate by the European Commission by Decision of 10 July 2023.
- Sentry (Functional Software, Inc.):
transfer covered by Standard Contractual Clauses (SCCs) approved by the European Commission, pursuant to Art. 46(2)(c) GDPR.
5. Retention periods
Personal data will be retained for the following periods:
- Contractual and booking data:
6 years from the end of the contractual relationship, in accordance with Art. 30 of the Spanish Commercial Code.
- Tax and billing data:
4 years, in accordance with the Spanish General Tax Law.
- Contact and enquiry data:
3 years from the last interaction.
- Newsletter and commercial communication data:
until the data subject withdraws their consent.
- Traveller registration data:
for the period legally required by applicable regulations on tourist accommodation and public security.
After these periods, data will be securely deleted or anonymised.
6. Your rights
In accordance with the GDPR and LOPD-GDD, you may exercise the following rights:
- Access:
know what personal data we hold about you.
- Rectification:
request the correction of inaccurate or incomplete data.
- Erasure:
request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
- Restriction of processing:
request that the use of your data be restricted in certain circumstances.
- Data portability:
receive your data in a structured, commonly used format, or request its transfer to another controller.
- Objection:
object to the processing of your data, particularly when it is based on legitimate interest.
- Withdrawal of consent:
where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please contact us in writing:
- Email:
privacy@foravilarentals.com
- Postal address:
Fora-Vila Sa Pobla S.L., C/ Madò Buades, 12, 07420 Sa Pobla,
Illes Balears, España
Furthermore, if you consider that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the competent supervisory authority: the
Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan, 6, 28001 Madrid, and accessible via its electronic office at
www.aepd.es.
7. Cookies policy
This website uses its own and third-party cookies. For detailed information on the types of cookies used, their purpose and how to manage them, please consult our
Cookies Policy.
8. Security and updates
Fora-Vila Sa Pobla S.L. has implemented the necessary technical and organisational measures to ensure the security and integrity of personal data and prevent its alteration, loss, processing or unauthorised access.
This privacy policy may be updated to adapt to legislative changes or changes in the services provided. We recommend that you consult it periodically.
Last updated: May 2026.