Privacy policy
Thank you for your interest in Villa Crone. This policy explains which personal data we process when you visit this website, book with us or contact us – and which rights you have. It is based on the EU General Data Protection Regulation (GDPR) and the Spanish data protection act (LOPDGDD).
1. Controller
Villa Crone SL
Urbanización El Drago 23
38311 La Orotava
Santa Cruz de Tenerife
Spain
Tax ID (CIF): B56774359
Email: info@villacrone.com
WhatsApp / phone: +49 163 695 5246
For any question about data protection, please write to info@villacrone.com.
2. Visiting the website and server logs
When you open the website, our hosting provider processes technically necessary data: IP address, date and time, page requested, referrer, browser and operating system. This is required to deliver the website, keep it running reliably and protect it against attacks (Art. 6(1)(f) GDPR). Logs are kept only as long as needed for these purposes. We have a data processing agreement with our hosting provider.
3. Cookies and consent
We use technically necessary cookies, for example for the cart, the booking process and your language setting (Art. 6(1)(b) and (f) GDPR). Any other cookies and external services are only used with your consent (Art. 6(1)(a) GDPR). Your choices are managed by our cookie banner (Complianz). You can change or withdraw your consent at any time via “Manage consent” at the bottom of the page. Details are in our cookie policy.
4. Booking a stay
When you book with us, we process your name, billing address, email address, optionally your phone number, the booking details (property, dates, number of guests, price) and the payment status. We need this data to handle your booking and to look after you before and during your stay (Art. 6(1)(b) GDPR). Invoices and booking records are kept for as long as commercial and tax law requires (Art. 6(1)(c) GDPR). A customer account is optional and can be deleted at any time on request.
5. Guest registration under Spanish law
As a provider of tourist accommodation, we are legally required to record certain data of every guest (including name, identity document, nationality, date of birth and length of stay) and to transmit it to the competent Spanish authorities (Real Decreto 933/2021). The legal basis is Art. 6(1)(c) GDPR. We keep this data only for the period required by law.
6. Payment
Payments are processed by the payment service provider Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland). Depending on the payment method you choose (card, Apple Pay, Google Pay, Klarna, SEPA Direct Debit and others), your payment data, name, email address, amount and technical data are transmitted to Stripe. Stripe may also process data in the USA; such transfers are covered by the EU-US Data Privacy Framework or EU Standard Contractual Clauses. Card details never reach our server.
If you pay with Klarna, your order and contact data are transmitted to Klarna Bank AB (publ), Stockholm, Sweden. Klarna may carry out identity and credit checks for this payment method under its own responsibility; Klarna’s privacy notice applies. For Apple Pay and Google Pay, the terms of Apple and Google also apply.
The legal basis is Art. 6(1)(b) GDPR.
7. Availability management
To prevent double bookings, we synchronise occupied dates with our channel manager Smoobu (Smoobu GmbH, Berlin, Germany) and the booking platforms on which we also list our properties. The legal basis is Art. 6(1)(b) and (f) GDPR.
8. Contact by email, WhatsApp and forms
When you write to us, we process the information you provide (for example name, email address, phone number and your message) in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR). This also applies to enquiries about the sale of Villa Infinity Sky via the “Request the sales dossier” form, where we additionally store the link through which you arrived.
If you contact us via WhatsApp, your data is also processed by WhatsApp Ireland Limited (Dublin, Ireland) and its parent company Meta, partly in the USA. We have no influence on this. Please use email for confidential information.
9. Discount code by email and newsletter
On some pages you can enter your email address to receive a personal discount code. We store your email address, the code and the time of the request (Art. 6(1)(b) GDPR). We only send newsletters with offers if you have expressly ticked the box for it (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email or with a short message to us.
10. Reminders about unfinished bookings
If you enter your email address at checkout but do not complete the booking, we store your email address, your name (if provided) and the contents of your cart and remind you of your open booking with up to three emails. This is based on our legitimate interest in helping you with a booking you have started (Art. 6(1)(f) GDPR). You can object at any time and will then receive no further reminders. The reminders stop automatically once you complete the booking.
11. Reviews, maps and fonts
- Reviews: We display our guest reviews from Airbnb and Google with the service Trustindex (trustindex.io). Your IP address is transmitted to Trustindex in the process.
- Maps: For location maps we use map data from OpenStreetMap (OpenStreetMap Foundation, Cambridge, United Kingdom). When a map loads, your IP address is transmitted to the map servers. The EU has issued an adequacy decision for the United Kingdom.
- Fonts: Some fonts are currently loaded from Google Fonts (Google Ireland Limited, Dublin, Ireland); your IP address is transmitted to Google in the process, possibly also to the USA.
The legal basis is our legitimate interest in an appealing and informative presentation (Art. 6(1)(f) GDPR) or your consent where the service is controlled via the cookie banner (Art. 6(1)(a) GDPR).
12. Instagram
We link to our Instagram profile with a simple link only. No data is transmitted until you click the link and open Instagram; Meta’s privacy policy then applies.
13. Recipients and transfers to third countries
Your data is only shared with the service providers named above to the extent necessary for the respective purpose, and with our tax advisors and public authorities where the law requires it. We never sell data. Transfers to countries outside the EU only take place on the basis of an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.
14. Retention
We delete personal data as soon as the purpose no longer applies and no statutory retention obligations remain. Booking records and invoices are kept for the periods required by commercial and tax law.
15. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw any consent at any time with effect for the future. Simply write to info@villacrone.com.
You may also lodge a complaint with a data protection supervisory authority; in Spain this is the Agencia Española de Protección de Datos (www.aepd.es).
16. Obligation to provide data, no automated decisions
For a booking we need the information marked as required; without it we cannot conclude a contract. We do not make automated individual decisions. A credit check may only be carried out by Klarna if you choose that payment method.
17. Changes
We update this privacy policy when our website or the legal situation changes. The version published here applies.