Privacy policy
This is an English translation for information purposes. In case of discrepancy, the Spanish version prevails.
This policy explains how the personal data you provide through this website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
Paul Christoforou y Nicola Christoforou (NIE X5538949C (Paul Christoforou) y NIE X4616821P (Nicola Christoforou)), Calle Olivos 15, 08810 Sant Pere de Ribes (Barcelona). Contact: info@villassitges.com.
What data we process and why
| Purpose | Data | Legal basis |
|---|---|---|
| Answering enquiries sent via the form, email, phone or WhatsApp | Name, email, phone, dates, group size and message | Consent (art. 6.1.a GDPR) |
| Handling a possible booking at your request | As above | Pre-contractual measures (art. 6.1.b GDPR) |
No automated decisions are made and no profiles are created.
Retention
Data is kept for as long as needed to answer your enquiry and, if a booking is made, for the applicable legal periods. Enquiries that do not lead to a booking are deleted within one year at the latest.
Recipients
Data is not shared with third parties unless required by law. The technology providers that supply web hosting and email may access the data as data processors, under contract and with the safeguards required by the GDPR. There are no international transfers.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@villassitges.com and stating which right you wish to exercise.
If you believe your data has not been processed correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
This website uses an encrypted connection (HTTPS), and appropriate technical and organisational measures are applied to protect your data.
Last updated: 16/09/2026