Privacy Policy

1. Data Controller

Identity: Hacienda Molino Nuevo
Address: [DIRECCIÓN COMPLETA]
NIF/CIF: [NÚMERO DE IDENTIFICACIÓN FISCAL]
Email: info@haciendamolinonuevo.es
Phone: +34 669450631

2. Personal Data We Collect

We collect the following personal data when you make a booking or contact us:

• Identification data: First and last name
• Contact data: Email, phone
• Booking data: Dates, event type, number of guests
• Payment data: Processed securely by Stripe (we do not store card data)
• Browsing data: IP address, cookies (see Cookie Policy)

3. Purpose of Processing

We process your personal data for the following purposes:

• Manage your booking and process payment
• Send you confirmations and communications related to your booking
• Respond to your enquiries and requests
• Comply with our legal and tax obligations
• Improve our services and your user experience (if you have given consent)
• Send you commercial communications (only if you have given express consent)

4. Legal Basis

The legal basis for processing your data is:

• Performance of contract: To manage your booking and provide our services
• Consent: For sending commercial communications and non-essential cookies
• Legitimate interest: To improve our services and prevent fraud
• Legal obligation: To comply with tax and accounting obligations

5. Data Recipients

Your data may be shared with:

• Stripe: For secure payment processing (located in the US, with adequate safeguards under the GDPR)
• Email providers: For sending communications
• Public authorities: When required by law

We do not sell or share your data with third parties for commercial purposes.

6. International Transfers

We use Stripe for payment processing, whose servers are located in the United States. Stripe complies with the GDPR and holds the necessary certifications to guarantee an adequate level of protection for your personal data.

7. Data Retention

We will retain your data for the following periods:

• Booking data: 5 years from the end of the service (tax obligation)
• Marketing contact data: Until you withdraw consent
• Browsing data: As specified in the Cookie Policy

8. Your Rights

In accordance with the GDPR, you have the following rights:

• Access: Know what personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request the deletion of your data (right to be forgotten)
• Objection: Object to the processing of your data
• Restriction: Request the restriction of processing
• Portability: Receive your data in a structured format
• Withdraw consent: At any time, without retroactive effect

To exercise these rights, send an email to info@haciendamolinonuevo.es indicating the right you wish to exercise and attaching a copy of your ID.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you consider that your rights have been violated: www.aepd.es

9. Security

We implement technical and organisational security measures to protect your personal data, including:

• SSL/TLS encryption for all communications
• Secure payment processing through Stripe (PCI-DSS certification)
• Restricted access control to personal data
• Regular backups

10. Modifications

We reserve the right to modify this Privacy Policy to adapt it to legislative changes or changes in our services. In the event of significant changes, we will inform you through our website or by email.