1. Who is responsible
PROSPERA ASSETS SL, trading as PDG15, is responsible for personal information collected through this website. Its NIF/CIF is B-26625939 and its registered office is C/. Sant Francesc 18, 08202 Sabadell, Barcelona, Spain.
You can send privacy questions or requests about your data to this postal address, addressed to “PDG15 — Privacy”, or use our contact page.
2. Information you share with us
When you submit an enquiry, we receive your name, email address, message and, if provided, phone number. The form also includes any selected apartment, requested arrival and departure dates, numbers of adults and children, and the language used. You do not need to repeat the stay details in your message.
Name, email and message are required so we can understand and answer your enquiry. Your phone number and dates are optional. Please do not include payment-card details, identity documents or sensitive personal information in the message.
Selecting dates does not make a reservation. This website accepts enquiries; availability, prices and any booking arrangements are confirmed directly with PDG15. The enquiry form does not collect payments.
3. Why we use your information
- To answer a stay enquiry and prepare any booking you request: steps taken at your request before entering into a contract.
- To answer other questions and manage correspondence: our legitimate interest in responding to people who contact PDG15.
- To deliver the website, prevent automated abuse and investigate technical problems: our legitimate interest in keeping the service secure and reliable.
- To measure website performance when you allow analytics: your consent, which you can change through Cookie settings.
- To handle data-rights requests and comply with applicable duties: our legal obligations.
Submitting an enquiry does not subscribe you to marketing. The enquiry process does not make automated booking or eligibility decisions about you.
4. How an enquiry reaches us
When online sending is available, Cloudflare handles the form request and Cloudflare Turnstile checks for automated abuse. Resend delivers the enquiry to the email inbox used by Marcel to respond on behalf of PDG15. Your email address is included so he can reply, together with your message and selected stay details.
The email delivery service and receiving mailbox provider process the message to deliver and store the correspondence. People authorised to handle PDG15 enquiries can access it. If sending is unavailable, the form displays this and cannot submit an enquiry.
A later booking may require additional information for the accommodation contract or legal obligations. Any additional collection and the services used for that booking must be explained when those details are requested.
5. Website services and preferences
Cloudflare provides hosting, delivery and security. Requests involve technical information such as your IP address, browser and requested page. Turnstile also processes browser and device signals when the enquiry verification loads. See the Cloudflare Privacy Policy and Turnstile Privacy Notice.
Pages with interactive maps show OpenStreetMap by default. If you allow Google Maps in Cookie settings, Google Maps loads automatically and may use cookies. When a map loads, your browser connects to the relevant provider and sends technical request information, including your IP address. See Google’s Privacy Policy and the OpenStreetMap Privacy Policy.
With analytics consent, our website sends performance timings, the page path, browser viewport dimensions and connection information to a service hosted on Cloudflare. This performance report does not include the enquiry message or the date and guest details in the page address.
Your language preference is saved in your browser until you change it or clear that storage. Your cookie choice is stored for up to 180 days. You can allow or reject Google Maps, analytics and optional marketing technologies through Cookie settings in the footer, and change your choices at any time.
6. How long information is kept
To limit spam and duplicate messages, we keep coded identifiers derived from the sender’s IP address, email address and enquiry, together with sending timestamps. These security records do not contain the name, message, raw email address or raw IP address. They expire after 48 hours and are removed when the service next processes an enquiry.
Enquiry correspondence is needed while we answer your request and follow up on the stay you are discussing. Whether further retention is necessary depends on any resulting booking, unresolved question or dispute, and applicable legal obligations. Information needed for a legal claim may have to be retained until that matter and the relevant limitation period have ended.
Technical security and delivery records are kept according to their purpose and the service provider’s retention settings. You can contact us to ask about retention of your particular enquiry or to request deletion, subject to any lawful reason for keeping it.
7. Providers and international processing
Website and email providers may process information outside the European Economic Area, including in the United States. Cloudflare and Resend publish data-processing terms that provide for international transfers and safeguards such as the European Commission’s Standard Contractual Clauses. See the Cloudflare data-processing terms and Resend data-processing terms. You may contact us for information about the safeguards relevant to your data.
Information may also be disclosed to professional advisers or competent authorities where necessary to comply with the law or handle a legal claim.
8. Your data protection rights
Where applicable, you can request access to your personal information, correction, deletion, restriction of processing or a portable copy. You can object to processing based on legitimate interests for reasons relating to your situation. You can withdraw consent at any time; this does not affect processing that was lawful before withdrawal.
Use the contact details in section 1 to exercise your rights. We may ask for proportionate information to verify your identity. Requests are normally answered within one month; if an extension is permitted and necessary, we will explain why.
You can also complain to the Spanish Data Protection Agency (AEPD) or your competent data protection authority.
9. Children and policy updates
The enquiry form is intended for adults arranging accommodation. It can include the number of children travelling, but does not request children’s names or identity documents.
We update this policy when the website or the way information is handled changes. The date shown on this page identifies the latest revision.