Privacy policy
Last updated: 1 November 2026
This page explains what personal data we process when you use this website, why, and who we share it with, under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018.
1. Data controller
Finca Ensueño, Camino Merese 24, Tigaday, 38913 Frontera, El Hierro. Email: fincaensueno.info@gmail.com. Phone: +34 625 260 551.
2. What data we process
Account: name, email, phone (if you give it) and your password, which is stored encrypted and cannot be read by anyone.
Bookings: dates, number of guests, messages you send us and your booking history.
Payment: card details are collected and stored by Stripe. We only receive the card brand, the last four digits and whether the charge succeeded.
During your stay, the identity data the law requires us to register for guests.
3. Why, and on what legal basis
To manage your account, bookings and payments and to send you booking emails: this is necessary to perform the contract you enter into when you book.
For guest registration and accounting: this is required by law.
We do not send advertising, and we never sell or share your data with anyone for commercial purposes.
4. Who we share it with
Only with the providers we need to run the website, who process the data on our behalf: Supabase (database and accounts, servers in the European Union), Vercel (website hosting), Resend (email delivery) and Stripe (payments). If you accept cookies, also Google, for the map on the home page.
Some of these providers are based in the United States. When data leaves the European Union, it does so with GDPR safeguards (European Commission standard contractual clauses or the EU-US Data Privacy Framework).
And with the authorities when the law requires it (for example, guest registration).
5. How long we keep it
Account data, for as long as you keep your account. Booking and payment data, for as long as tax and commercial law requires (generally six years). After that it is deleted.
6. Your rights
You can request access to, correction or deletion of your data, object to or restrict its processing, or ask for data portability by writing to fincaensueno.info@gmail.com.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Cookies
Technical cookies, which do not need your permission because the website cannot work without them: one that keeps you signed in and one that gives access to the guest guide.
Third-party cookies, only if you accept them: the Google map on the home page, which sets Google cookies. If you reject them, the map does not load and the rest of the website works as normal.
We do not use advertising or analytics cookies. Your choice is stored in your browser, and you can change it at any time from the “Cookies” link in the page footer.
8. Security
The whole website is encrypted with HTTPS, passwords are stored encrypted, and each guest can only see their own bookings.