1. Data controller

Controller: La Cova House (Site owner).
Contact: via the contact form or details shown in the “Contact” section.

2. Data we process

Depending on your use of the Site, we may process:

• Contact data: name, email, phone number.
• Enquiry/booking data: dates, number of guests, messages and preferences you provide.
• Technical data: IP address, browser/device data (security and operation).
• Communications: content of messages you send.

3. Purposes

• Reply to enquiries and requests.
• Manage bookings and stay-related communications.
• Send operational messages (confirmations, changes, incidents).
• Site security and misuse prevention.
• Compliance with legal obligations.

4. Legal bases

• Consent (e.g., submitting forms).
• Pre-contractual steps/contract performance (e.g., booking).
• Legal obligation.
• Legitimate interest (e.g., security), where applicable.

5. Retention

We keep data as long as needed for the purposes above and for any applicable legal retention periods.

6. Recipients

We do not sell your data. We may share it with necessary providers (hosting, email, management tools) and with authorities where legally required.

7. International transfers

Some providers may be located outside the EEA. Where applicable, appropriate safeguards will be used.

8. Your rights

You may request access, rectification, erasure, objection, restriction and portability, as applicable. You may also withdraw consent.
You may lodge a complaint with the competent supervisory authority.

9. Security

We apply reasonable measures to protect personal data, but absolute security cannot be guaranteed.

10. Cookies

Please see the “Cookies Policy” for more information.

11. Updates

This policy may be updated. The current version is the one published on the Site.