Privacy statement

1. General information
Protecting your personal data is important to us. With this privacy policy, we inform you which personal data we collect, how we process it and what rights you have under the General Data Protection Regulation (GDPR) and the Spanish Data Protection Act LOPDGDD (Ley Orgánica 3/2018).

2. Responsible person
The Balearian — Villas & Concierge
Owner: Florian Settele (Autónomo)
Calle Alber 64
07008 Palma de Mallorca
spain
email: info@thebalearian.com

A data protection officer is not required by law.

3. Purposes and legal bases of processing
We process personal data exclusively in accordance with the GDPR and LOPDGDD.

a) Contact requests and communication
Legal basis: Art. 6 para. 1 lit. b DSGVO.

b) Booking inquiries and contract processing
Legal basis: Art. 6 para. 1 lit. b DSGVO.

c) Use of property management systems (e.g. VOffice)
Legal basis: Art. 6 para. 1 lit. b DSGVO.
Order processing in accordance with Art. 28 GDPR.

d) Legal obligations (e.g. reporting requirements)
Legal basis: Art. 6 para. 1 lit. c GDPR.

e) Advertising and legitimate interest
Legal basis: Art. 6 para. 1 lit. f DSGVO.
‍
If necessary, processing is only carried out on the basis of your consent in accordance with Article 6 (1) (a) GDPR.

4. Categories of personal data
In particular, the following are processed:
- Name, address
- email address, telephone number
- Booking and stay details
- ID data (legal reporting requirements)
- Payment information
- IP address and device and browser data

5. Recipients of personal data
Your data can be sent to:
- Owners and managers of accommodation
- service providers used (e.g. property management systems)
- public authorities as part of legal obligations

Data will only be passed on to the extent necessary to fulfill the contract or due to legal requirements.

6. Storage period
Personal data is only stored for as long as is necessary for the respective purposes or as long as there are legal storage requirements.

7. Your rights as a data subject
You have the right to:
- Information in accordance with Art. 15 GDPR
- Correction in accordance with Art. 16 GDPR
- Deletion in accordance with Art. 17 GDPR
- Restriction of processing in accordance with Art. 18 GDPR
- Data portability in accordance with Art. 20 GDPR
- Objection to processing in accordance with Art. 21 GDPR

To exercise your rights, it is sufficient to send an informal message to the contact address given above.

8. Right to lodge a complaint with the supervisory authority
You have the right to complain to a data protection supervisory authority.
Responsible in Spain is:

Spanish Data Protection Agency (AEPD)
www.aepd.es

9. cookies
Our website uses technically necessary cookies.
Analytical and marketing cookies are only used with your prior consent.

10. Web analysis and online advertising
If analysis or advertising services (e.g. Google Analytics, Google Ads) are used, this is done exclusively on the basis of your consent in accordance with Article 6 (1) (a) GDPR.

11. Social media
We maintain online presences on social networks such as Instagram, Facebook and LinkedIn. Personal data is processed on the basis of legitimate interests in accordance with Article 6 (1) (f) GDPR. In addition, the data protection regulations of the respective platform operators apply.

12. data security
We use appropriate technical and organizational security measures, in particular SSL encryption, to protect your data from loss, manipulation or unauthorized access.

13. Changes to this privacy statement
This privacy policy may be amended to take account of legal, technical or organizational changes.

As of January 28, 2026