SEDA Private Homes
Privacy policy
What data we collect on sedaprivatehomes.com, what for, on what legal basis, who else sees it and how you exercise your rights. Provided under articles 13 and 14 of Regulation (EU) 2016/679.
01
Who the controller is
- Owner
- Ángel Molina Baena
- Tax ID (NIF)
- TU_NIF_CON_LETRA
- Address
- TU_DOMICILIO_COMPLETO_CON_CP_Y_PROVINCIA
- Trading name
- SEDA Private Homes
- Website
- sedaprivatehomes.com
- info@sedaprivatehomes.com
- Telephone
- +34 686 980 798
- Company register
- Not applicable: no company is registered
For anything concerning your data — including exercising your rights — write to info@sedaprivatehomes.com. It is a real mailbox that gets read; we do not publish a contact address we do not attend.
02
What data we process
We only process the data you give us. We do not buy it, do not obtain it from third parties and do not enrich it from external sources.
| How it reaches us | What it consists of |
|---|---|
| Contact form, “Stay” option | Arrival and departure dates, area, number of guests, property type, services of interest, notes, name, email address and, if you provide it, phone or WhatsApp. |
| Contact form, “Property” option | Property location, type, number of bedrooms, current situation, goal, notes, name, email address and, if you provide it, phone or WhatsApp. |
| Contact form, “Other” option | Name, organisation (optional), email address, subject and message. |
| Direct email or phone | Whatever you choose to include in your message or tell us on the call. |
| Simply visiting the site | IP address and technical request data (browser, system, page requested), processed by the hosting provider in its service logs. |
The fields marked with an asterisk on the form are the ones we need in order to reply. The rest is optional and only helps us reply better.
We collect no data for analytics, advertising or profiling. This site has no measurement tool at all — no Google Analytics, no Vercel Analytics, nothing equivalent — no social network pixels and no third-party cookies.
03
What for, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handle your stay enquiry or property valuation request and, where appropriate, prepare the contractual relationship. | Article 6(1)(b) GDPR: pre-contractual steps taken at your request. |
| Reply to any other communication you send us through the form, by email or by phone. | Article 6(1)(f) GDPR: legitimate interest in answering whoever writes to us. |
| Limit automated or abusive form submissions. | Article 6(1)(f) GDPR: legitimate interest in the security and availability of the service. |
We do not use your data to send you marketing. If a newsletter ever exists, it will require your express, separate consent, which you can withdraw at any time.
04
Who else sees this data
| Recipient | What it does with the data | Where it is |
|---|---|---|
| Vercel Inc. | Hosts the site and runs the function that processes the form. Logs technical data of each request, including the IP address. | United States |
| Resend, Inc. | Delivers the email containing what you wrote in the form. | United States |
| Hostinger International Ltd. (Chipre) | Provides the info@sedaprivatehomes.com mailbox service, where the message is stored. | See previous column |
There are no other recipients. We do not sell or transfer data to third parties for commercial purposes. Data would only be disclosed to authorities or public bodies if a legal rule required it.
Vercel and Resend are US companies, so the processing involves an international transfer of data outside the European Economic Area. You can ask us about the safeguards applicable to that transfer by writing to info@sedaprivatehomes.com.
05
How long we keep it
Your message stays in the info@sedaprivatehomes.com mailbox until it is deleted. There is no scheduled automatic deletion, and we would rather say so than promise a retention period we would not honour.
In practice: if the enquiry does not lead to a relationship, the message is kept while it may still be useful to answer you or to account for the exchange itself, and is deleted when the mailbox is reviewed. If you would rather we deleted it sooner, write to us and we will.
If the enquiry does lead to a contractual relationship, the data is then kept for the duration of that relationship and afterwards for the periods imposed by tax rules and by limitation periods for liability.
The form's rate limiter holds your IP address in memory for ten minutes at most: it is never written to a database and does not survive a restart of the service. The hosting provider's technical logs are kept for its own periods, which we do not decide.
06
Where your data is not
This website has no database of its own. There is no user registry, no connected CRM and no form storage: what you send becomes an email and lives in a mailbox. That is a deliberate limitation — the fewer places that hold your data, the fewer places can lose it.
07
Your rights
You may exercise these rights over your data:
- Access: find out what data of yours we process.
- Rectification: correct anything inaccurate.
- Erasure: ask us to delete it.
- Objection: object to processing based on legitimate interest.
- Restriction: ask us to keep it without using it while a claim is resolved.
- Portability: receive the data you provided in a readable format.
To exercise them, write to info@sedaprivatehomes.com from the same address you contacted us with, or attach a document that identifies you. We will reply within the one-month period set by article 12 GDPR.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6 — 28001 Madrid), at www.aepd.es.
08
Minors and automated decisions
The site is not directed at children under fourteen and does not request data about minors.
We take no automated decisions and build no profiles from your data: every message is read by a person.
09
Security
The site is served over HTTPS only, with HSTS enabled. The form validates the email address format and limits message size, number of fields and submission frequency; anything that fails those conditions is rejected without being processed.
No system is infallible. Should a breach affect your data, we will act in accordance with articles 33 and 34 GDPR.
10
Changes to this policy
If what we do with data changes, this text changes first. The date of the last revision appears at the end of the page.
Last updated: