Our commitment to protecting your personal data and respecting your rights.
Effective Date: May 25, 2026 | Last Updated: May 25, 2026
Altavia Consulting ("we", "our", or "us") operates this website and provides affiliate program review services for the hospitality and vacation rental industry. Privacy is taken seriously. This policy explains how personal data is collected, used, and protected. Compliance with the General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD) is maintained.
This document applies to all visitors and users of our website located in Spain. Questions are addressed openly. The answer is simpler than you think: transparency builds trust.
The data controller responsible for your personal information is:
Data collection is limited to what is necessary. The following categories are processed:
Third-party analytics services may provide aggregated demographic data. No personally identifiable information is purchased from data brokers.
Data processing serves specific purposes. Each use is tested where it matters — in real client interactions since 2016.
Processing is lawful under GDPR Article 6:
Cookies enhance functionality. Control is provided through browser settings.
A cookie banner appears on first visit. Acceptance is stored locally. Choices can be changed at any time through browser settings. Disabling analytics cookies does not affect site functionality.
Google Analytics may set cookies. Data is processed under Google's privacy policy. No advertising cookies are used. No cross-site tracking occurs.
Data is not sold. Limited sharing occurs with trusted processors.
Data may be disclosed when legally required: court orders, government investigations, protection of rights. Notification is provided unless prohibited by law.
In case of merger, acquisition, or asset sale, data may be transferred. Users will be notified. This policy continues to apply.
Comprehensive rights are granted. Exercise is straightforward.
You may request a copy of personal data held. Confirmation of processing activities is provided. Response occurs within 30 days.
Inaccurate data can be corrected. Incomplete information can be updated. Contact us with corrections.
Deletion can be requested when:
Processing can be limited while accuracy is verified or legitimate grounds are assessed. Storage continues but use is restricted.
You may receive personal data in structured, machine-readable format (CSV, JSON). Transfer to another controller is supported where technically feasible.
Processing based on legitimate interests can be objected to. Marketing communications can be opted out at any time. Direct marketing objections are honored immediately.
No automated profiling occurs. No decisions with legal effects are made solely by algorithms.
Send requests to privacy@altaviaconsulting.es. Identity verification may be required. No fee is charged unless requests are manifestly unfounded or excessive.
Data is kept only as long as necessary. Specific retention periods apply.
When retention periods expire, data is securely deleted or anonymized. Backups are overwritten within 90 days. Physical records are shredded.
Security is priority. Industry standards are maintained where craft meets clarity in technical implementation.
In case of data breach, notification to Spanish Data Protection Agency (AEPD) occurs within 72 hours. Affected individuals are informed when high risk exists. Mitigation steps are documented.
Data is primarily stored within the European Union. If transfer outside EU/EEA occurs, adequate safeguards are implemented:
Services are not directed at individuals under 16. Personal data from children is not knowingly collected. If such collection is discovered, immediate deletion occurs. Parents may contact us regarding concerns.
Updates occur when practices change or legal requirements evolve. Material changes are announced via website banner or email notification. The "Last Updated" date reflects revisions. Continued use after changes constitutes acceptance.
Questions about this policy are welcomed:
You have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos):
Under Spanish LOPDGDD (Ley Orgánica de Protección de Datos Personales y garantÃa de los derechos digitales), additional rights exist:
These rights supplement GDPR protections. Exercise follows the same process outlined in Section 7.8.
Consent can be withdrawn at any time. Withdrawal does not affect lawfulness of processing before withdrawal. To withdraw consent for newsletters, click "unsubscribe" in any email or contact us directly. For other consents, send request to privacy@altaviaconsulting.es.
This privacy policy was last reviewed and approved by Altavia Consulting management on May 25, 2026. It reflects current data processing practices and legal requirements applicable in Spain and the European Union.