Privacy Policy
Last updated: 2026-05-12
1. Data controller
The controller for data collected through this site is:
- Owner
- Barry Faassen
- Commercial brand
- Mulhacén Labs
- Tax ID (NIF)
- ESZ3305544N
- Registered address
- San Fulgencio, Alicante, España
- contact@mulhacenlabs.com
2. Personal data we process
This site only collects data you voluntarily provide when contacting us via WhatsApp or email: name, phone number, email address and the content of your message.
We also use web analytics through Umami, a self-hosted, privacy-friendly tool that does not set cookies and does not collect personally identifiable data.
This public site does not collect any booking or guest data. Direct booking data is handled through each property's subdomain, under separate processing terms agreed with each accommodation client.
3. Purpose of processing
Data is processed to respond to commercial enquiries, handle the requests we receive and, where applicable, send product information. No automated decisions are made and no profiling is carried out.
4. Legal basis
The legal basis for processing contact data is the consent of the data subject (Article 6.1.a GDPR), given when initiating the conversation.
The legal basis for Umami web analytics is the legitimate interest of the owner (Article 6.1.f GDPR) in measuring how the site performs, given that the tool does not process personally identifiable data.
5. Retention period
Contact data is retained for as long as the commercial relationship is active and, once ended, for up to two years, unless applicable law requires a longer retention period.
6. Recipients and data processors
To provide the service we may use the following providers, acting as data processors:
- Hosting: Linode (Akamai Technologies, USA) under Standard Contractual Clauses approved by the European Commission.
- Transactional email: Brevo (Sendinblue SAS, France — EU).
- Web analytics: Umami, self-hosted on our own infrastructure.
- Messaging: WhatsApp Business (Meta Platforms Ireland Ltd., Ireland — EU).
7. International transfers
The hosting service may involve international transfers to the United States. Such transfers are made under Standard Contractual Clauses approved by the European Commission, in accordance with Article 46 GDPR.
8. Your rights
You may exercise your rights of access, rectification, erasure, objection, portability and restriction of processing at any time by emailing the address shown in the controller section, including a copy of your ID document.
If you believe your data is not being processed in accordance with the applicable regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Cookies
This site does not use tracking or advertising cookies. The analytics tool in use (Umami) operates without cookies.
10. Changes to this policy
The owner reserves the right to update this policy to reflect changes in legislation, case law or the services provided. The version in force is always the one published on this site.