Privacy Notice & Legal Information
Last updated: 17 September 2026
The short version: this website sets no cookies and stores nothing on your device, which is why it never asks you to accept anything. Visits are counted in aggregate by Plausible, a privacy-focused service that uses no cookies and cannot identify you. There's no Google Analytics, no advertising pixels, no social media trackers and no profiling. If you message us or come to stay, your details are used only to look after your stay and to meet the legal obligations that apply to accommodation in Spain.
Who is responsible for your data
| Trading name | Villa Lobos |
|---|---|
| Responsible party | Erik Wolf |
| Address | Camí Avellá 1, 03729 Llíber, Alicante, Spain |
| bookings@villalobosspain.com | |
| +34 711 022 967 |
This notice is issued in accordance with Regulation (EU) 2016/679 (GDPR), Spain's Ley Orgánica 3/2018 (LOPDGDD) and Ley 34/2002 on information society services (LSSI-CE).
What information is collected
When you get in touch
This website has no contact forms. If you email or message on WhatsApp, we receive whatever you choose to send — typically your name, your contact details, the dates you're interested in and anything you'd like to tell us about your dog. Nothing more is collected than what you volunteer.
When you book
Bookings are handled through Booking.com and Airbnb. When you book through one of those platforms, that platform collects your details in the first instance under its own privacy policy, and passes on what's needed to prepare your room and look after you: your name, your contact details, the dates of your stay and any special requests you've noted. We don't receive your full payment card details.
The traveller register
Spanish law requires every accommodation provider to register the people who stay and to report those details to the authorities. On arrival we take the identifying details required by Real Decreto 933/2021 — full name, type and number of your identity document or passport, date of birth, nationality and details of the stay — and submit them to the Ministry of the Interior through the official system.
This is a legal obligation rather than a choice on our part: we can't accommodate you without it, and these particular records can't be deleted on request while the legal retention period is still running. They aren't used for any other purpose.
When you browse this website
The site sets no advertising cookies and runs nothing that tracks you across other websites. As with any website, the hosting provider's server logs record standard technical information such as IP address, browser type and the pages requested. These logs exist for security and diagnostics and aren't used to build a profile of you.
Visits are counted using Plausible Analytics, an EU-hosted, privacy-focused alternative to Google Analytics. It sets no cookies and does not follow you between websites. What it reports is aggregate: how many people visited, which pages they read, roughly which country they were in, and which search engine or site they arrived from.
To be precise about the one piece of personal data involved: like every web request you make anywhere, the request to Plausible carries your IP address. Plausible uses it in the moment to work out a rough country, and to generate a one-way hash that lets it count you as one visitor rather than several. That hash is salted with a value that changes every day, so it cannot be used to recognise you tomorrow, and your IP address is never written to storage. Nothing identifying is retained.
Because no information is stored on your device and no identifying data is kept, this runs on legitimate interest rather than consent. If you would nonetheless prefer not to be counted, you have the right to object under art. 21 — email us and it will be arranged.
Plausible is the only third party involved in serving this site. The fonts are not loaded from Google, so no font request leaves this domain, and there are no embedded third-party maps or videos.
Why it's used, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry | Steps taken at your request prior to entering a contract (GDPR art. 6(1)(b)) |
| Arranging your booking and your stay | Performance of a contract (art. 6(1)(b)) |
| The traveller register and the report to the authorities | Legal obligation (art. 6(1)(c)), Real Decreto 933/2021 |
| Meeting invoicing, tax and accounting obligations | Legal obligation (art. 6(1)(c)) |
| Counting visits in aggregate, to see whether the website is doing its job | Legitimate interest (art. 6(1)(f)). No cookies are set and no personal data is retained, so this does not override your rights |
Cookies
This website sets no cookies at all. Not its own, and none from anybody else. It also stores nothing else on your device — no local storage, no session storage, no device fingerprint, no tracking pixels and no embedded third-party frames.
That is why you are not asked to accept or reject anything when you arrive. A cookie banner exists to obtain permission to store information on your device; since nothing is stored, there is no permission to seek. Adding a banner that asked anyway would be theatre.
This is a deliberate design choice and a checkable one. If you open your browser's developer tools on any page of this site and look under Storage, you will find it empty.
The one third-party service the site contacts is Plausible, described above. It works without cookies by design, which is the reason it was chosen over Google Analytics.
You may still see a cookie from elsewhere if you follow a link away from this site — to WhatsApp, Booking.com or Airbnb. Those are ordinary links: nothing is requested from those companies, and nothing is stored, until you choose to click through. Once you do, you are on their site and their own terms apply.
Who your information is shared with
Nobody, with these narrow exceptions:
- The web host, which necessarily processes server logs in order to serve the site.
- Your email or messaging provider, which carries any message you choose to send. WhatsApp messages are handled by Meta under their own terms — if you'd rather not use it, email works just as well.
- Booking.com and Airbnb, where your booking was made through those platforms, each under its own privacy policy.
- The Spanish Ministry of the Interior and the State security forces, for the traveller register required by law.
- An accountant or the Spanish tax authorities, where the law requires records of payments received.
- Plausible Analytics, which is told that a page was viewed — the page address, the rough country, and the site you came from — but nothing that identifies you, and no cookie.
Your information is never sold, rented, or passed to advertisers, and it isn't used to build marketing lists.
How long it's kept
- Enquiries that don't lead to a booking: deleted within about twelve months.
- Traveller register records: kept for three years, as required by Real Decreto 933/2021.
- Booking and stay records: for the duration of the relationship and any applicable legal periods.
- Invoices and payment records: kept for the period Spanish tax and commercial law requires, currently six years.
Your rights
Under GDPR you have the right to ask for a copy of the information held about you, to have mistakes corrected, to have data erased, to restrict or object to how it's used, and to receive it in a portable format. Where processing is based on your consent, you can withdraw that consent at any time — which doesn't affect anything done before you withdrew it.
To exercise any of these, just email bookings@villalobosspain.com. You'll get a response within one month.
Please note that traveller register records can't be erased on request while the retention period imposed by law is still running.
If you're not satisfied with how a request has been handled, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at C/ Jorge Juan 6, 28001 Madrid.
Security
This website is served over HTTPS, so anything you send through it is encrypted in transit. The site runs no JavaScript of its own beyond a small script that opens and closes the menu on mobile; the only external script on any page is the Plausible one described above. Booking records and correspondence are stored on password-protected devices and are accessible only to the people who run Villa Lobos.
Photographs
Some photographs on this website show guests and their dogs. They are published with permission. If you appear in one and would prefer it taken down, email us and it will be removed, no questions asked.
Terms of use
The text, photographs and design of this website belong to Villa Lobos and may not be reproduced without permission. The site links to a small number of external websites; those are outside our control and their own privacy policies apply.
Information about the house, the rooms and what's offered is published in good faith and kept up to date as far as possible, but the terms that actually govern your booking are those of the platform you book through.
Any dispute relating to this website is governed by Spanish law and subject to the courts of Alicante.
Changes to this notice
If this notice changes, the revised version will be posted here with a new date at the top.
← Back to the website