GDPR Compliance

1. Introduction

Spanish-Holiday.com is committed to protecting the privacy and personal data of every visitor to our website. This GDPR statement explains how we handle personal information in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR. By using Spanish-Holiday.com you acknowledge the practices described below.

2. Data Controller

The data controller responsible for personal data collected through Spanish-Holiday.com is:

Michal Kalasek
IČO: 88767621 (Czech Trade License)
Email: info@spanish-holiday.com

3. What Data We Collect

• Technical data: IP address, browser type, device information, referring URL.
• Usage data: pages viewed, time spent on site, clicks on outbound or affiliate links.
• Contact data: any information you voluntarily submit via email or contact forms.
• Cookie data: small files stored on your device for analytics and preferences.

4. Lawful Basis for Processing

We process your data on one or more of the following lawful bases: your consent (e.g. cookie acceptance), our legitimate interest in improving the website, and compliance with a legal obligation where applicable.

5. Your Rights Under GDPR

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data ("right to be forgotten").
• Right to restrict processing — limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — at any time, where consent is the lawful basis.
• Right to lodge a complaint — with your local data protection authority.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this statement, or as required by applicable law. Analytics data is typically retained for up to 26 months.

7. Third-Party Processors

We may share limited data with trusted third-party services that help us operate the website, such as hosting providers, analytics tools (e.g. Google Analytics), and affiliate partners. These processors are contractually required to handle your data in compliance with GDPR.

8. International Transfers

Some of our service providers may process data outside the EEA or UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Contact

To exercise any of your rights or raise a question about this policy, please contact us at info@spanish-holiday.com. We aim to respond to all requests within 30 days.