Privacy Policy
Privacy Policy – Boutique B&B Cortijo Valverde
Last updated: 27 May 2026
At Boutique B&B Cortijo Valverde, we respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR), applicable Spanish privacy laws, and other relevant European legislation.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, contact us, or stay at our accommodation.
1. Data Controller
Valverde Operations S.L.
CIF / VAT number: B75951103
Address: Valverde Pol 5 parcel 830, 29500 Álora, Málaga, Spain
Email: info@cortijovalverde.com
Valverde Operations S.L. is the data controller responsible for the processing of personal data described in this Privacy Policy.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- First and last name
- Email address
- Phone number
- Payment information
- Reservation details
- Stay preferences and special requests
- Passport or identification details where legally required
- Communication history via email, contact forms, WhatsApp, or booking platforms
- Website usage data and analytics information
- Marketing preferences and newsletter subscriptions
3. How We Collect Personal Data
We collect personal data through:
- Reservations made through our website
- Reservations made via third-party booking platforms such as Booking.com
- Our booking engine provider Cloudbeds
- Contact forms on our website
- Direct communication via email or WhatsApp
- Cookies and analytics technologies
- Embedded content such as Instagram feeds and review platforms
- Guest registration systems required under Spanish law
4. Purposes of Processing
We process personal data for the following purposes:
- Managing reservations and guest stays
- Processing payments
- Communicating before, during, and after your stay
- Providing guest support and personalized hospitality services
- Complying with legal obligations under Spanish hospitality regulations
- Registering guests with authorities where legally required
- Improving our website, services, and guest experience
- Analyzing website traffic and user behavior
- Sending newsletters or marketing communications where consent has been provided
- Preventing fraud and protecting the security of our business and guests
5. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Performance of a contract or reservation agreement
- Compliance with legal obligations
- Legitimate interests in operating and improving our business
- Consent, where legally required
Where processing is based on consent, you may withdraw your consent at any time.
6. Guest Registration and Legal Obligations
Under Spanish law, hospitality providers may be required to collect and register identification details of guests.
For this purpose, we use the guest registration platform CHEKIN.
The processing of passport or identification information is carried out solely to comply with applicable legal obligations and government reporting requirements.
7. Payments
Payments are processed securely through Stripe via Cloudbeds Payments.
We do not store complete credit card information ourselves. Payment providers may process your data in accordance with their own privacy policies and applicable legal requirements.
8. WhatsApp Communication
Guests may choose to communicate with us via WhatsApp.
Please note that WhatsApp is provided by Meta Platforms and may involve the processing of personal data outside the European Economic Area.
By contacting us via WhatsApp, you acknowledge and accept this form of communication.
9. Marketing Communications
We may send newsletters, special offers, or updates about Cortijo Valverde in the future where guests have provided consent to receive such communications.
You may unsubscribe from marketing communications at any time using the unsubscribe link provided in emails or by contacting us directly.
10. Cookies and Tracking Technologies
Our website may use cookies and similar technologies to:
- Ensure the proper functioning of the website
- Analyze website usage and performance
- Improve user experience
- Measure marketing effectiveness
We may use services such as:
- Google Analytics (GA4)
- Meta Pixel / Facebook tracking technologies
- Embedded Instagram content
- Embedded review widgets such as Google Reviews and TripAdvisor
Some of these services may collect personal data or transfer data outside the European Economic Area. Where legally required, we request consent before placing non-essential cookies or tracking technologies. Additional information regarding cookies may be provided in a separate Cookie Policy.
11. Third Parties and Service Providers
We may share personal data with trusted third-party service providers where necessary for operating our business and delivering our services.
These may include:
- Cloudbeds
- Stripe
- CHEKIN
- Meta Platforms
- Booking platforms such as Booking.com
- Website and software providers
- Email and communication providers
We only share data where necessary and seek to work with providers that offer appropriate data protection safeguards.
12. International Data Transfers
Some third-party providers may process personal data outside the European Economic Area. Where international transfers occur, we seek to ensure appropriate safeguards are in place in accordance with GDPR requirements, including the use of Standard Contractual Clauses where applicable.
13. Data Retention
We retain personal data only for as long as necessary for:
- Reservation administration
- Guest communication
- Legal and tax obligations
- Security and fraud prevention
- Marketing purposes where consent has been provided
Retention periods may vary depending on the type of data and applicable legal obligations.
14. Your Rights Under GDPR
Under applicable data protection laws, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your data
- Restrict processing
- Object to certain processing activities
- Withdraw consent
- Request data portability
- Lodge a complaint with a supervisory authority
To exercise your rights, please contact us at: info@cortijovalverde.com
We may request verification of identity before processing certain requests.
15. Data Security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, disclosure, or alteration. However, no method of online transmission or storage can be guaranteed to be completely secure.
16. Third-Party Websites and Embedded Content
Our website may contain embedded content or links to third-party websites and services. These third parties may collect data independently in accordance with their own privacy policies.
We encourage guests to review the privacy policies of external platforms before interacting with them.
17. Minors
Cortijo Valverde welcomes guests aged 12 and above. We do not knowingly collect personal data from children without appropriate legal basis or parental involvement where required.
18. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, operational, or technical changes. The latest version will always be available on our website.
19. Contact
If you have any questions about this Privacy Policy or how we process personal data, please contact us at:
Valverde Operations S.L.
Valverde Pol 5 parcel 830
29500 Álora, Málaga, Spain
info@cortijovalverde.com