Villa Mi Sueño

Privacy Policy

Last updated: 18.07.2026

1. Controller

Sven Schrieber
Carrer del Ségol 8
03720 Benissa (Alicante)
Spain

E-mail: info@villamisueno.com

2. Overview

This website is a static information site about the holiday home Villa Mi Sueño. We use no analytics or tracking services, no advertising networks, no social media plugins and no external web fonts. No cookies are set for analytics or marketing purposes.

Personal data is only processed in the cases described below.

For confirmed guests we additionally operate a guest portal at guest.villamisueno.com (section 6). It can only be reached through a personal link and is not publicly accessible.

We process personal data on the basis of:

  • Art. 6(1)(b) GDPR: performance of a contract and pre-contractual requests (booking enquiries, communication about a stay)
  • Art. 6(1)(f) GDPR: legitimate interests (secure and reliable operation of the website)
  • Art. 6(1)(c) GDPR: legal obligations (e.g. retention periods under tax law)

4. Hosting and server log files

This website is hosted by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. The servers are located in a data centre in Nuremberg, Germany. We have concluded a data processing agreement with netcup pursuant to Art. 28 GDPR.

When you access the website, our hosting provider automatically stores data transmitted by your browser in server log files:

  • IP address
  • date and time of access
  • page or file requested
  • volume of data transferred and status code
  • referrer URL as well as browser and operating system information

This data is required for the operation and security of the website (Art. 6(1)(f) GDPR). It is not combined with other data sources. Log files are deleted after 30 days at the latest.

5. Booking system (Smoobu)

On the “Check availability” page we embed the booking system of our channel manager Smoobu (Smoobu GmbH, Berlin, Germany).

When you open this page, your browser loads the booking system directly from Smoobu’s servers. In doing so, your IP address is transmitted to Smoobu; without this transmission the booking system could not be displayed. Smoobu may process technically necessary information about your device and browser.

The legal basis is our legitimate interest in displaying availability and the initiation of a rental agreement (Art. 6(1)(f) and (b) GDPR).

If you make a booking via the booking system, Smoobu processes the data you enter as a processor on our behalf. Further information: smoobu.com

Technical helper script via cdnjs (Cloudflare)

Smoobu’s booking system additionally loads a technical helper script (“iframe-resizer”, used to adjust the display height) via the cdnjs service, operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

This transmits your IP address to Cloudflare and involves a transfer to the USA. Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in the technically correct display of the booking system (Art. 6(1)(f) GDPR).

We have no influence over this request, it is part of Smoobu’s embed code. Further information: cloudflare.com/privacypolicy

6. Guest portal (guest.villamisueno.com)

Before arrival we provide confirmed guests with a personal page at guest.villamisueno.com. It holds the information about the stay and, for a limited period, the access codes for the villa. You receive the link from us; it is valid for your booking only. The portal runs on the same server as this website (see section 4), sets no cookies, uses no tracking and loads no third-party content.

Data processed there

  • name, dates of stay, number of guests, language, booking channel and a booking reference
  • the access details for the villa: key safe code, door code, Wi-Fi password, safe code
  • the personal web address of your online check-in, a link that belongs to your booking alone

Identity document data and payment data are not processed there. The legal basis is the performance of the rental contract (Art. 6(1)(b) GDPR).

Encryption of the access details

The access details are stored on the server in encrypted form only. The key to them exists solely inside the link you receive from us, in the part after the # character. Browsers do not send that part along as part of the address, so it appears in no server log and is not passed on to other websites. The key reaches our server only at the moment you display the codes: there it is used solely to decrypt them and is not stored. The codes therefore cannot be read from a copy of the database alone.

Log when codes are displayed

When you display the access details, we log the time and the outcome together with your IP address and browser identifier, both only as a hash value from which the original value cannot be recovered. The purpose is to be able to establish when an access code was displayed (Art. 6(1)(f) GDPR).

Retention

  • Access details: 3 hours after check-out
  • Booking data and access log: 30 days after check-out

After that the link is invalid and shows no content.

How the access codes are created

The code for the key safe at the gate is created via the service igloohome (igloocompany Pte. Ltd., 71 Ayer Rajah Crescent #01-25, Singapore 139951). For this we transmit the period of stay and a booking reference, which may contain your name; this constitutes a transfer to Singapore, a country outside the EU. Privacy information: igloohome.co/legal/privacy-policy

The door code is created by our channel manager Smoobu (see section 5) via the provider Nuki (Nuki Home Solutions GmbH, Münzgrabenstraße 92/4, 8010 Graz, Austria).

Online check-in

The portal links to the online check-in required by Spanish law. It is operated by our service provider Chekin (Chekin Soluciones Digitales, S.L., NIF B21579990, Seville, Spain), whose privacy information applies there: chekin.com/en/privacy-policy. The subsequent report to the Spanish authorities is made on the basis of a legal obligation (Art. 6(1)(c) GDPR).

We obtain the link to that form from our channel manager Smoobu (section 5). It belongs to your booking alone and is stored together with the rest of the booking data so that the portal can display it; it is deleted along with them. What you enter in the form itself is processed by Chekin, none of it reaches our portal.

7. Contacting us

If you contact us by e-mail, via WhatsApp or through the contact form, we process the information you provide (name, contact details, content of your message) in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR).

We delete this data as soon as it is no longer required, at the latest once statutory retention periods have expired.

If you contact us via WhatsApp, the privacy policy of WhatsApp Ireland Ltd. also applies. If you prefer to avoid this, you can reach us by e-mail at any time.

8. Maps

We do not embed any map service directly into our website. The link to the villa’s location takes you to Google Maps; Google’s privacy policy applies only from that point onwards.

9. Your rights

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)

You may withdraw any consent you have given at any time with effect for the future.

To exercise your rights, simply send a message to info@villamisueno.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

10. Changes

We will update this privacy policy if the processing on this website changes. The version published here is the one that applies.