Skip to content

Privacy Policy

Last updated: 2026-05-12

1. Data controller

The controller for data collected through this site is:

Owner
Barry Faassen
Commercial brand
Mulhacén Labs
Tax ID (NIF)
ESZ3305544N
Registered address
San Fulgencio, Alicante, España
Email
contact@mulhacenlabs.com

2. Personal data we process

This site only collects data you voluntarily provide when contacting us via WhatsApp or email: name, phone number, email address and the content of your message.

We also use web analytics through Umami, a self-hosted, privacy-friendly tool that does not set cookies and does not collect personally identifiable data.

This public site does not collect any booking or guest data. Direct booking data is handled through each property's subdomain, under separate processing terms agreed with each accommodation client.

3. Purpose of processing

Data is processed to respond to commercial enquiries, handle the requests we receive and, where applicable, send product information. No automated decisions are made and no profiling is carried out.

4. Legal basis

The legal basis for processing contact data is the consent of the data subject (Article 6.1.a GDPR), given when initiating the conversation.

The legal basis for Umami web analytics is the legitimate interest of the owner (Article 6.1.f GDPR) in measuring how the site performs, given that the tool does not process personally identifiable data.

5. Retention period

Contact data is retained for as long as the commercial relationship is active and, once ended, for up to two years, unless applicable law requires a longer retention period.

6. Recipients and data processors

To provide the service we may use the following providers, acting as data processors:

  • Hosting: Linode (Akamai Technologies, USA) under Standard Contractual Clauses approved by the European Commission.
  • Transactional email: Brevo (Sendinblue SAS, France — EU).
  • Web analytics: Umami, self-hosted on our own infrastructure.
  • Messaging: WhatsApp Business (Meta Platforms Ireland Ltd., Ireland — EU).

7. International transfers

The hosting service may involve international transfers to the United States. Such transfers are made under Standard Contractual Clauses approved by the European Commission, in accordance with Article 46 GDPR.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, portability and restriction of processing at any time by emailing the address shown in the controller section, including a copy of your ID document.

If you believe your data is not being processed in accordance with the applicable regulations, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Cookies

This site does not use tracking or advertising cookies. The analytics tool in use (Umami) operates without cookies.

10. Changes to this policy

The owner reserves the right to update this policy to reflect changes in legislation, case law or the services provided. The version in force is always the one published on this site.