The Owner provides information about the processing and protection of personal data collected through browsing, enquiries, bookings or the purchase of services through this website.
This policy applies in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), and other applicable Spanish legislation.
1. Identity of the data controller
- Owner: XXXX
- Tax ID (NIF/CIF): XXXX
- Registered address: XXXX
- Email: XXXX
- Website: https://blueprintconsultingadvisor.es
2. Data processing principles
Personal data will be processed in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality. Only data necessary for each purpose will be requested, and reasonable measures will be taken to prevent loss, alteration, unauthorised access or misuse.
3. Data that may be collected
Providing personal data is not required to browse the website. Data may be collected when a user:
- Contacts us through a form, email, telephone or messaging service.
- Requests information about the property or its services.
- Makes or manages a booking.
- Voluntarily subscribes to communications.
- Interacts with third-party content, maps, videos or services.
Processed data may include full name, email address, telephone number, booking details, messages, IP address, technical device information and any data required to respond to the request or provide the service.
4. Purposes of processing
Data may be processed to:
- Respond to enquiries and information requests.
- Manage bookings, stays, communications and requested services.
- Comply with legal, tax, accounting and security obligations.
- Manage incidents, complaints and customer support.
- Send marketing communications where consent or another valid legal basis exists.
- Analyse website operation and use through authorised cookies.
- Prevent abuse, fraud and unauthorised access.
5. Legal basis
The applicable legal bases are the data subject’s consent, steps taken prior to entering into a contract or the performance of a contract, compliance with legal obligations and, where applicable, the Owner’s legitimate interest in protecting and improving its services.
6. Data retention
Data will be retained for as long as necessary to fulfil the purpose for which it was collected and subsequently for the periods required by applicable legislation. Data processed on the basis of consent will be retained until consent is withdrawn, without prejudice to statutory retention obligations.
7. Recipients and processors
Data will not be disclosed to third parties except where legally required or necessary to provide the service. Providers acting as data processors may access it, including web hosting, email, maintenance, analytics, booking management, payment and technical support services.
Hosting provider: XXXX.
Where providers outside the European Economic Area are used, the safeguards required by the GDPR will apply.
8. Analytics and external content
The website may use measurement services, maps, videos or other third-party embedded content. These services may collect technical data or install cookies when authorised by the user. Further information is provided in the Cookie Policy.
9. Data subject rights
Data subjects may exercise the following rights:
- Access to their personal data.
- Rectification of inaccurate data.
- Erasure where applicable.
- Restriction of processing.
- Objection to processing.
- Data portability.
- Withdrawal of consent at any time.
To exercise these rights, send a request to XXXX, stating the right you wish to exercise and providing the information required to verify your identity.
You may also lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.
10. Security
The Owner applies reasonable technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or destruction. However, no Internet-connected transmission or system can guarantee absolute security.
11. Accuracy of data
Users guarantee that the information provided is accurate, complete and up to date and undertake to notify any changes.
12. Changes to this policy
The Owner may amend this Privacy Policy to reflect legal, judicial, technical or service-related changes. The version published on this page will be the current version.
Last updated: July 2026.