How we handle your personal data when you use this website, write to us or book a holiday rental, in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).
In brief
| Controller | INCA RENTALS S.L. (Inmobiliaria Cánovas) |
|---|---|
| Purpose | To answer your enquiries (form, chat, phone, WhatsApp and email), manage your bookings and the services you ask us for, send you marketing information if you agree and, if you accept cookies, measure our advertising on Facebook and Instagram |
| Legal basis | Your consent, the contract or the pre-contractual steps you ask us to take, legal obligations and our legitimate interest |
| Recipients | The providers that supply services to us (website hosting, booking engine, virtual assistant, form delivery) and, if you accept cookies, Meta (Facebook and Instagram) to measure advertising; some outside the European Economic Area with GDPR safeguards. We do not sell or disclose your data, except where required by law |
| Rights | To access, rectify and erase your data, object, request restriction or portability and withdraw your consent, by writing to info@inmobiliariacanovas.com |
| More information | In the rest of this page |
1. Who the controller is
- Owner
- INCA RENTALS S.L.
- Tax ID (CIF)
- B72875917
- Registered office
- Paseo Balcón de Europa 5, escalera 5, 2.º C, 29780 Nerja (Málaga)
- Office
- Calle Almuñécar 4, Local 4, 29780 Nerja (Málaga)
- Phone
- 952 52 14 04
2. What data we process, why and on what basis
The contact form
Your name, your email, your phone number if you give it and whatever you tell us, in order to reply and deal with your request: a viewing, information about a property or a holiday rental, or the sale or management of your home. Basis: your consent, given by ticking the box and sending the form, and the pre-contractual steps you ask us to take (article 6.1.a and 6.1.b GDPR).
The virtual assistant (chat)
What you write in the conversation and the details you give in it (for example, your name, phone number, email, dates and number of guests), in order to reply, search for holiday rentals or properties, prepare your booking, schedule a call or a viewing and notify our team when you ask. Basis: your consent, given when you start the conversation, and the pre-contractual steps you ask us to take (article 6.1.a and 6.1.b).
The assistant replies automatically using an artificial intelligence system. It does not take decisions with legal effects on you, and you can always speak to a person by phone, WhatsApp or email. Do not share sensitive data (about your health, for example) or your card details in the chat.
Holiday rental bookings
Bookings are made on our booking engine (inmobiliariacanovas.icnea.net), which asks for the details needed for the booking and payment. We process them to manage the booking, payments, the security deposit, the stay and any incidents, and to meet our legal obligations, such as invoicing and the guest register required in Spain. Basis: the contract (article 6.1.b) and legal obligations (article 6.1.c). The booking conditions are set out in the booking terms.
Estate agency services
If you entrust us with the sale or management of your home, or buy or rent through us, we process your data to provide that service, invoice it and meet our legal obligations. Basis: the contract and legal obligations.
Phone, WhatsApp and email
The details you give us when you call or write to us, in order to help you. Basis: your consent and, if you ask us for a service, the pre-contractual steps or the contract. If you message us on WhatsApp, that service belongs to WhatsApp (Meta), which processes the data under its own policy.
Marketing communications
We will only send you information about our holiday rentals, properties and services if you agree or, if you are already a client, about services similar to those you used (article 21 of the LSSI, the Spanish e-commerce law). You can unsubscribe at any time from the message itself or by writing to info@inmobiliariacanovas.com with the word BAJA (unsubscribe) in the subject line.
When you browse the website
As on any website, the server that hosts it records technical data about each visit (IP address, browser and page requested) so that it works and for security. Basis: our legitimate interest in the website working and being protected (article 6.1.f). When the office map loads, Google receives technical data about your visit, such as your IP address, and processes it under its own policy; the same applies to the photos of the holiday rentals, which load from Icnea, and to some of the website’s libraries, which load from jsDelivr. The only cookies on this website are those of the Meta pixel, and only if you accept them: see the next section and the cookie policy.
Meta cookies (advertising measurement)
If you accept cookies in the website’s notice, the Meta pixel collects technical data about your visit (your IP address, your browser, the pages you view and a browser identifier stored in a cookie) and sends it to Meta Platforms Ireland Ltd., to measure whether our Facebook and Instagram ads bring visits and bookings and to be able to show our ads to people who have already visited us. We are joint controllers with Meta for that collection; what Meta does with the data afterwards, including for its own purposes, is explained in its privacy policy. Basis: your consent (article 6.1.a), which you can withdraw at any time from the cookie policy. If you do not accept, nothing from Meta is loaded and the website works just the same.
3. How long we keep it
For as long as necessary for the purpose for which it was collected and to deal with any liabilities arising from it. After that, only the data the law requires us to keep (for example, invoicing data), for the legal periods. If you unsubscribe from marketing communications, we stop sending them to you.
4. Who it is disclosed to
We do not sell your data or disclose it to third parties, except where the law requires it: for example, to the Spanish Tax Agency or, for the guest register, to the Ministry of the Interior.
To provide our services, we are helped by providers who process data on our behalf (processors), under contract and only for that purpose:
- Vercel Inc. (United States): hosting of this website.
- Icnea: the booking engine and management of the holiday rentals.
- Zohra Automations: the virtual assistant (chat), which runs on a Hostinger server and uses OpenAI language models (United States) to reply.
- Web3Forms: delivers messages from the contact form and notifications from the chat to our email.
- Google: the calendar for calls and viewings scheduled from the chat.
In addition, Meta Platforms Ireland Ltd. (Ireland) receives the pixel data if you accept cookies, as explained in section 2; it does not act on our behalf, but as joint controller for that collection and as controller for whatever it does with the data afterwards.
Under the booking terms, card payments are made on the bank’s secure payment gateway (Caja Rural de Granada), where the card details are entered.
5. International transfers
Some of these providers, such as Vercel, OpenAI, Google and Meta, are based in the United States or may process data there. These transfers are made with the safeguards required by the GDPR: the European Commission’s adequacy decision for companies certified under the EU-US Data Privacy Framework or, failing that, the standard contractual clauses approved by the Commission.
6. Your rights
You can:
- access your data and find out how we process it;
- rectify it if it is inaccurate or erase it when it is no longer needed;
- object to our processing it or ask us to restrict its processing;
- request its portability, that is, receive it in a format you can take elsewhere;
- withdraw your consent at any time, without affecting processing carried out before.
To exercise them, write to us at info@inmobiliariacanovas.com or by post to the registered office, saying which right you wish to exercise. If we have doubts about your identity, we may ask you to prove it. We will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Minors
This website is not aimed at children under 14, and bookings may only be made by adults.
8. Security
We apply appropriate technical and organisational measures to protect your data (article 32 GDPR), and the website always runs over an encrypted connection (HTTPS). Even so, no system on the internet is infallible.
9. Changes to this policy
We may update this policy, for example if the law changes or if we add new services to the website. The date at the top shows when it was last changed.