Our Cookies Policy and GDPR Rules for Mark and Andreas Apartments are strictly enabled to safeguard your privacy.
Our website address is: https://mark-and-andreas-apartments.com and we manage vacation apartments on behalf of property owners in and around the Vera Playa area, Almería, Spain.
Contact us at accounts@mark-and-andreas-apartments.com if you have any questions or concerns regarding the use of your Personal Data, and we will gladly assist you.
By using this site or our rental services, you consent to the Processing of your Personal Data as explicitly described in this combined Cookies and GDPR Privacy Policy.
Table of Contents:
- Definitions used in this cookies and GDPR Policy
- Data protection principles we follow
- What rights do you have regarding your Personal Data
- What Personal Data we gather about you
- How we use your Personal Data
- Who else has access to your Personal Data
- How we secure your data
- Information about cookies
- Contact information
1) Definitions:
Personal Data – Any information relating to an identified or identifiable natural person.
Processing – Any operation or set of operations which is performed on Personal Data or on sets of Personal Data.
Data subject – A natural person whose Personal Data is being Processed.
Child – A natural person under 16 years of age.
We/Us (either capitalised or not) – Refers to Mark and Andrea Goshawk, operating as Mark and Andreas Apartments.
2) Data Protection Principles:
We promise to closely adhere to the following data protection principles:
- Processing is lawful, fair, and transparent. Our Processing activities have clear lawful grounds. We always consider your rights before Processing Personal Data and will provide you information regarding Processing upon request.
- Processing is limited to the purpose. Our Processing activities precisely fit the operational purpose for which Personal Data was gathered.
- Processing is done with minimal data. We only gather and Process the minimum amount of Personal Data required for any necessary business or legal purpose.
- Processing is limited to a specific time period. We will not store your personal data for longer than required by administrative or legal obligations.
- We will perform due diligence to ensure the continuous accuracy of data.
- We use comprehensive local security protocols to ensure the integrity and complete confidentiality of data.
3) Data Subject’s Rights:
The Data Subject possesses the following specific legal rights:
- Right to information – Meaning you have the right to know whether your Personal Data is being processed, what data is gathered, from where it is obtained, and why and by whom it is processed.
- Right to access – Meaning you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered.
- Right to rectification – Meaning you have the right to request rectification or erasure of your Personal Data that is inaccurate or incomplete.
- Right to erasure – Meaning in certain circumstances you can request for your Personal Data to be erased from our active records.
- Right to restrict processing – Meaning where certain legal conditions apply, you have the right to restrict the active Processing of your Personal Data.
- Right to object to processing – Meaning in certain cases you have the right to object to the Processing of your Personal Data (for example, in the case of direct marketing).
- Right to object to automated Processing – Meaning you have the right to object to automated Processing, including profiling, and not to be subject to a decision based solely on automated Processing frameworks.
- Right to data portability – You have the right to obtain your Personal Data in a clean, machine-readable format or, if it is technically feasible, as a direct transfer from one Processor to another.
- Right to lodge a complaint – In the event that we refuse your request under the Rights of Access, we will provide you with an explicit reason as to why. If you are not satisfied with the way your request has been handled, please contact us directly.
- Right for the help of a supervisory authority – Meaning you have the right to seek the assistance of an official regulatory supervisory authority and the right to other legal remedies.
- Right to withdraw consent – You have the complete right to instantly withdraw any given consent for the Processing of your Personal Data.
4) Data We Gather:
Information you have provided us with:
This might be your e-mail address, name, billing address, home address, contact telephone numbers, and official identification details—mainly crucial information that is mechanically necessary for executing a holiday booking, delivering a service, or enhancing your customer experience with us. We securely save the information you provide us with in order for you to leave customer reviews or perform interactive activities on the website.
Information automatically collected about you:
This includes metadata that is automatically stored by cookies and other session tools. For example, your site interactions, IP address, device viewport, and booking histories. This information is used strictly to improve user experiences. When you look at the contents of our website, your activities may be securely logged.
Publicly available information:
We might occasionally view information about you that is entirely publicly available to verify security profile details.
5) How We Use Your Personal Data:
We use your Personal Data in order to:
- Provide our specialized holiday rental service to you, including managing bookings, setting up accounts, sending transaction receipts, communicating regarding your arrival, and notifying you of property upgrades.
- Enhance your website experience and optimize display layouts.
- Fulfill clear legal obligations under active Spanish and European Union law.
We Process your Personal Data on strictly legitimate grounds and/or with explicit client Consent.
On the grounds of entering into a contract or fulfilling contractual obligations:
- To accurately verify your identity.
- To process secure property bookings or manage contract structures.
- To communicate regarding active billing, quotes, and mandatory invoicing rules.
- To legally register your holiday stay details with the Spanish Authorities. (To comply with legal financial bookkeeping and Guardia Civil security regulations, these essential booking records will be safely retained for 6 years).
On the grounds of legitimate business interest:
- To issue occasional personalized marketing offers via E-Mail.
- To analyze overall guest trends and histories in order to improve the quality, style, and availability of apartments offered.
- To conduct short satisfaction questionnaires or request direct feedback.
- To issue occasional informative digital newsletters.
As long as you have not informed us otherwise, we consider offering you rental products or nearby travel services that match your booking history to be our legitimate business interest.
With your explicit consent, we Process data for:
- Maintaining internal property and apartment manager portfolio records.
- Transferring mandatory guest check-in profiles directly to the Guardia Civil (Vera) portal.
- Necessary maintenance coordination between ourselves and our background service team.
- Legally securing and locks-retaining holiday bookings.
- CR (Customer Reviews) processing via our independent quality validation parameters.
We reserve the right to completely anonymise personal data gathered and use it for internal traffic metrics. We save your basic billing data and transaction structures strictly for as long as needed for legal compliance and Spanish tax accounting procedures, after which online session files are thoroughly purged within 365 days.
6) Who Else Can Access Your Personal Data:
We do not sell, trade, or share your Personal Data with unverified parties. Personal Data is strictly provided to our trusted operational processing partners only when required to fulfill your booking or run site infrastructure:
Our Core Processing Partners:
- Stripe Financial Processing Services (Secure tokenized gateway processing)
Connected Third Parties & Legal Bodies:
- Guardia Civil (Vera) (Mandatory Spanish citizen-safety tourist registry laws)
- CR (Customer Reviews) (Independent guest verification metrics)
- Real Cookie Banner (Localized GDPR cookie permission framework)
- Google Analytics (Anonymized visitor volume tracking)
We exclusively work with processing partners who are verified to maintain robust security protocols matching GDPR levels. We disclose data to public officials or law enforcement only when strictly legally obligated under Spanish state codes.
7) How We Secure Your Data:
We use rigorous digital safety protocols for all communication and web transfers (including full forced HTTPS SSL keys). Once an online transaction or guest detail form is actively processed, the session details are systematically removed from the active site database and safely archived onto an offline, highly encrypted storage server.
Additionally, our main domain environment is monitored 24/7 by advanced endpoint security firewalls to guard against malicious attempts. While no system online is completely impervious, we promise to notify the relevant European and Spanish supervisory authorities within legal windows in the rare event of a data breach threat.
Children: We do not intentionally target, collect, or process data belonging to children under 16 without explicit parental or guardian verification during booking layout setups.
8) Cookies & Technologies Used:
To manage the cookies and tracking pixels used on this site alongside active user consents, we utilize the native WordPress tool “Real Cookie Banner”. Full structural explanations regarding how these elements track and protect data can be found directly inside the Microsoft Cookie Learning Center.
The legal bases for data management within this structural framework are derived directly under Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest remains the compliant, precise management of cookies and permissions. You are under no contract constraint to accept tracking; however, disabling certain necessary components may render specific checkout blocks or booking maps unavailable.
Categories of Cookies We Use:
- Necessary Cookies – Essential scripts required for booking engines, form submissions, and logging into user-profiles. They do not store metadata.
- Functionality Cookies – Convenient parameters that remember form field properties (like names or emails inside review logs) so you do not have to re-enter them on subsequent visits.
- Analytics Cookies – Scripts that help us securely map visitor densities, browser resolutions, and traffic paths to optimize layout performance.
- Advertising Cookies – Used by external delivery networks with our permission to monitor campaign links or shuttle booking banner referrals.
9) Contact Information:
If you wish to view, modify, or completely delete any personal data or preference metrics stored within our offline servers, please direct your inquiry directly to our data controller desk:
Email: accounts@mark-and-andreas-apartments.com
Changes to this Privacy Policy
We reserve the right to update this policy parameters to adapt to changing local laws.
This document was structurally reviewed and last modified on: 22nd May 2026.
If you wish to completely alter, update, or delete your mailing list preferences and active data files with us, you can execute an automated request here: