AJ

Apartments Julia

Holiday stays in Cap de Creus

Personal data protection

Privacy policy

Last updated: October 21, 2026.

1. Responsible for the treatment

Julia Turegano Saiz, with NIF 37631348J, is the owner of Apartaments Julia and responsible for the processing of the data collected through this website.

This policy explains the processing of data in accordance with Regulation (EU) 2016/679 (RGPD) and Organic Law 3/2018, on the protection of personal data and guarantee of digital rights.

2. Data that is collected

The data comes from the interested party when they send the form, write an email or contact by phone or WhatsApp. The form asks for name, phone, email, arrival and departure dates, number of people, preferred area and message. The data provided and the communications necessary to answer the query are processed.

Browsing may generate technical data, such as IP address, date and time of access, browser and error or security logs. Data from cookies and similar technologies is detailed in the Cookie policy.

If a reservation is subsequently made by telephone, the necessary data will be requested through an appropriate channel to manage the stay and comply with the billing and traveler registration obligations. The website does not receive payments or request bank card data. Identity documents, health information or other sensitive data should not be included in the message field.

3. Purposes and legal bases

  • Availability inquiries and reservation preparation: respond to the form, provide information and contact by telephone to specify a possible stay. The basis is the application of pre-contractual measures requested by the interested party (article 6.1.b of the GDPR).
  • Other general inquiries: respond to the request with the consent expressed by the voluntary sending of the communication (article 6.1.a). It can be withdrawn at any time.
  • Reservations and stays management: if accommodation is subsequently contracted, manage the contractual relationship (article 6.1.b) and the tax, accounting and traveler registration and communication obligations that are applicable (article 6.1.c).
  • Website operation and security: prevent improper access, manage incidents and maintain the service, based on the legitimate interest of protecting the website and communications (article 6.1.f), with proportionate measures and respect for the rights of individuals.
  • Optional cookies: Technologies that require consent will only be used with the corresponding authorization (article 6.1.a), according to the policy and the cookie manager.

The data is not used to send advertising or newsletters. Personal data is not sold nor are exclusively automated decisions made with legal or similar effects on individuals.

4. Necessary data

Fields marked as mandatory are necessary to process the query. If contact details or minimum information about the stay is not provided, it may not be possible to respond or prepare the reservation. Optional fields can be left blank. The person providing third party data must be authorized to do so and inform them of this policy.

The box on the form confirms that the policy has been read; it does not authorize commercial communications or replace the legal basis for each purpose. Sending the form does not confirm any reservation.

5. Conservation

The queries are kept while they are processed and until the related procedures are closed. When they are no longer necessary, they are deleted or, if responsibilities may arise, they are kept blocked during the applicable limitation periods, without being used for other purposes.

If a reservation is made, the data is kept for the duration of the contractual relationship and then for the legal retention periods for tax, accounting and passenger registration that apply. Technical records are kept for the time necessary to resolve incidents and ensure security, and may be kept for longer when it is necessary to investigate a specific incident. The duration of cookies is indicated in their policy.

6. Recipients and suppliers

The data may be accessed by providers who provide services necessary for the operation of the website, hosting, email and technical support, following the instructions of the person responsible and with the contractual guarantees required. The web hosting provider indicated for this site is Hostinger; you can consult your data processing agreement.

When there is a legal obligation, the data of reservations or stays may be communicated to tax administrations, competent authorities in matters of traveler registration and other public bodies, as well as to courts and tribunals when necessary.

7. WhatsApp and external services

If you decide to contact us via the WhatsApp links, an external service will be opened that will process data according to its own conditions. This channel is voluntary; you can also contact us via the form, telephone or email. The data you send us via this channel will be used to respond to your request.

External service providers may process data outside the European Economic Area according to their conditions. When processing on behalf of the controller involves an international transfer, the controller must have a valid basis under Chapter V of the GDPR, such as an adequacy decision or standard contractual clauses and, where necessary, complementary measures. You can request information about the recipients and applicable guarantees by writing to the contact email.

8. Human rights

You can request access to your data, rectify it, request its deletion, oppose the processing, limit it or exercise portability when the legal requirements are met. If the processing is based on consent, you can withdraw it without affecting the lawfulness of the previous processing.

Address the request to info@apartamentsjulia.com or at the address of the person responsible, indicating the right you wish to exercise. Additional identification information will only be requested when there are reasonable doubts about the identity. The response will be provided within the general period of one month; if the complexity or number of requests require a legal extension, you will be informed within this period.

You can also file a complaint with the’Spanish Data Protection Agency (AEPD), especially if you consider that your rights have not been properly addressed.

9. Security and updates

Technical and organizational measures appropriate to the risk are applied to protect data against unauthorized access, loss or alteration. Users must avoid providing unnecessary data in communications.

Changes to this policy will be posted on this page with the date of the update. If a purpose or processing is modified in a way that requires additional information or new consent, it will be provided before the change is implemented.