Privacy Policy

Last updated: June 2026

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD), we inform you about how we process your personal data.

1. Data controller

• Controller: [TO COMPLETE: full name or company name] (Herrera Oria Living)
• Tax ID (NIF/CIF): [TO COMPLETE]
• Address: [TO COMPLETE]
• Email: herreraorialiving@gmail.com

2. What data we process and where it comes from

We process the data you voluntarily provide when you contact us:

• Contact form: name, phone or email, room type, planned move-in date and the message you write.
• WhatsApp, email or phone: your contact details and the content of your message when you write or call us through these channels.

We do not collect special categories of data. You do not need to provide third-party data; if you do, you confirm you have their consent.

3. Purpose

• To respond to your enquiry or request for information.
• To manage your interest in the accommodation and, where applicable, a possible booking (pre-contractual steps).
• To stay in contact with you regarding your request.

4. Legal basis

• Your consent when you send us your message (Art. 6.1.a GDPR).
• The application of pre-contractual measures taken at your request (Art. 6.1.b GDPR).

5. How long we keep your data

We keep your data while we handle your request and, afterwards, for the period needed to meet possible legal liabilities. If your enquiry does not lead to a relationship, we delete your data once it has been dealt with.

6. Who we share your data with

We do not share your data with third parties except where legally required. Please note:

• The WhatsApp button and form redirect you to WhatsApp (Meta Platforms Ireland Ltd.). If you use it, your message is processed under WhatsApp's privacy policy, which may involve international transfers with the safeguards provided by the GDPR.
• The website is hosted on Cloudflare, acting as data processor.

7. Your rights

You can exercise the following rights by writing to herreraorialiving@gmail.com, stating the right you wish to exercise and attaching a copy of an identity document:

• Access to your data.
• Rectification of inaccurate data.
• Erasure (right to be forgotten).
• Objection to processing.
• Restriction of processing.
• Data portability.
• Withdraw your consent, without affecting the lawfulness of previous processing.

If you believe we have not processed your data correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.

See also our Legal Notice and Cookie Policy.