Privacy policy.

01Who is responsible for your data

The controller of the personal data collected through this website is Grupo Empresarial Lual SL, tax ID B93294049, with registered address at Calle el Barrio 48, 29780 Nerja (Málaga), Spain. You can reach us about anything related to your data at felipe_arb@lual.com.

02What data we collect

We only collect the data you choose to give us:

• Contact form: your name, email address, phone number (optional unless you ask us to call or WhatsApp you), the part of LUAL your enquiry is about, the topic you pick, how you prefer to be contacted and your message.
• WhatsApp, phone or email: whatever you share with us when you contact us directly.
• Bookings: when you book a stay, the details needed to manage the reservation are processed by our booking system.

We do not ask for special categories of data. Please do not include them in your message.

03Why we use it

• To answer your enquiry and, if you ask for it, prepare a proposal, valuation, quote or booking.
• To keep a record of our conversation while your enquiry is open.

We do not use your data to send you marketing, and we never sell it.

04Legal basis

We process your data on the basis of your consent, which you give by ticking the box on the contact form (article 6.1.a GDPR), and, where your enquiry leads to a sale, rental, renovation or booking, because it is necessary to take steps before entering into a contract with you (article 6.1.b GDPR).

You can withdraw your consent at any time. This does not affect anything we did lawfully before you withdrew it.

05Who else sees it

We do not share your data with third parties, except with the service providers we need to run this website and reply to you, who act on our behalf and under contract:

• Framer — hosts this website.
• Web3Forms — delivers the contact form to our inbox by email.
• Our email provider — stores the messages we receive.
• WhatsApp (Meta) — only if you choose to contact us that way.
• Icnea — our booking system, only if you book a stay.

Some of these providers may process data outside the European Economic Area. When they do, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.

We will also disclose data where the law requires it, for example to tax authorities or courts.

06How long we keep it

We keep your enquiry for as long as we need it to deal with it and, after that, for up to two years in case you come back to us about the same matter. If it leads to a contract, we keep the data for as long as the law requires (for example, tax and anti-money-laundering rules). Then we delete it.

07Your rights

You can ask us at any time to:

• access the data we hold about you;
• correct it if it is wrong or incomplete;
• delete it;
• restrict or object to how we use it;
• receive it in a portable format;
• withdraw your consent.

Write to felipe_arb@lual.com saying which right you want to exercise. We may ask you to confirm your identity. We will reply within one month.

If you are not happy with our answer, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

08Cookies

This website does not use advertising or tracking cookies. Our hosting provider may use strictly necessary technical cookies and anonymous, aggregated visit statistics that do not identify you.

09Security

The website is served over an encrypted connection (HTTPS), and access to the enquiries we receive is limited to the LUAL team members who need it to reply to you.

10Changes to this policy

If we change how we handle your data, we will update this page and the date at the top.