Privacy Policy 2025
Privacy Policy
Last updated: 11th May 2025
At Llafrancholidays.com, your privacy is important to us. This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), where applicable.
1. Who We Are
This website is maintained by us, an anglo-catalan family for the purpose of marketing our family-owned seafront rental apartments in Llafranc, Costa Brava, Spain.
Controller Contact Details:
Marisu Denney Girbau
El Redos 24, Calle Foranell, Llafranc, Girona, 17211, Spain.
Email: info@llafrancholidays.com
2. What Personal Data We Collect
When you use our website and submit an enquiry form, we collect the following personal data:
- Your location (country and town)
- Your preferred arrival and departure dates
- Your full name and address
- Your occupation
- Your phone, mobile and email address
- The number of adults, children and their ages
- Additional information that you add in
Please note that we currently do not store your data in a website database. Your form submission is sent directly via secure email and processed solely for responding to your enquiry. However, your details may be stored in our email archive.
We do not collect special categories of personal data (e.g. health, religious beliefs, biometric data).
3. Legal Basis for Processing
Under both the UK and EU GDPR, we only process your personal data where we have a lawful basis. In this case, we rely on:
- Legitimate interest – responding to enquiries submitted via the website.
- Consent – where you specifically opt in to receive future marketing communications (we do not currently operate a mailing list or newsletter).
4. How We Use Your Data
We use your personal data for the following purposes:
- To respond to your enquiry about booking one of our holiday apartments.
- To provide details about availability, pricing, and local information related to your stay.
We do not use your data for unsolicited marketing. We do not share, sell, or rent your data to any third parties.
5. Data Transfers Outside the EU
As a UK-based business, we may process your data from the United Kingdom. The UK is recognised by the European Commission as providing adequate data protection. If we ever store or transfer your data outside the UK or EU/EEA, we will ensure this is done using appropriate safeguards such as Standard Contractual Clauses.
6. Data Retention
We only retain your personal data for as long as necessary to fulfil the purpose of the enquiry or to manage a confirmed booking. Data received by email may be retained in our secure inbox for up to 12 months and is periodically deleted.
7. Your Rights Under the GDPR
Under the UK and EU GDPR, you have the following rights:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent (where consent was the legal basis)
- Right to lodge a complaint with a data protection authority
If you wish to exercise any of these rights, please contact us at info@llafrancholidays.com.
If you are in the EU, you may also lodge a complaint with your local data protection authority. A list of EU supervisory authorities can be found here: https://edpb.europa.eu/about-edpb/board/members_en
8. Cookies and Website Analytics
Our website uses basic cookies for functional purposes and may use analytics tools such as Google Analytics to monitor traffic and improve performance. These cookies do not directly identify users. You may disable cookies in your browser settings.
We do not use cookies for advertising or profiling.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- SSL encryption on our website (via WordPress)
- Secure email processing via Cognito Forms (the email providers used by Cognito Forms support sending TLS point-to-point encrypted emails to recipients who support encryption)
10. Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
11. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and marked with a revised date