Home/Privacy policy

Privacy
policy

Last updated · May 2026

1. Data controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), the User is informed that the controller of their personal data is:

2. Data we collect

Through the Website we may collect the following personal data:

  • Identifying and contact data: first name, surname, phone, email address (through the booking or enquiry form).
  • Booking data: date, time, number of guests, preferences or special requests.
  • Browsing data: IP address, browser type, pages visited, duration of the visit (through analytical cookies, subject to prior consent).

3. Purposes of the processing

Your personal data will be processed for the following purposes:

  • To manage the bookings, enquiries and information requests made through the Website or associated channels.
  • To maintain the contractual or pre-contractual relationship with the User.
  • To send commercial communications about our services, events and promotions, provided that the User has given their express consent.
  • Statistical analysis of browsing and improvement of the Website.
  • Compliance with applicable legal obligations.

4. Legal basis for the processing

The legal basis for the processing of your data is:

  • Performance of a contract or pre-contractual measures in the case of bookings or service requests (art. 6.1.b GDPR).
  • Express consent of the data subject for sending commercial communications and for the use of non-technical cookies (art. 6.1.a GDPR).
  • Legitimate interest of the Controller in analysing browsing on an aggregated basis and improving the Website (art. 6.1.f GDPR).
  • Compliance with legal obligations applicable to the Controller (art. 6.1.c GDPR).

5. Data retention

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and, in any case, for the periods legally required to address any liabilities arising from the processing. Marketing data will be retained until the User withdraws their consent.

6. Recipients and disclosures

Personal data will not be disclosed to third parties except where legally required. The following processors, with whom the corresponding service provision contracts have been signed, may have access to your data:

  • Web hosting and technical services provider.
  • Booking management platforms (Covermanager, Premiumguest or similar) when the User uses them.
  • Messaging and electronic communications service providers.

No international transfers of data outside the European Economic Area are carried out, except for those that have the appropriate safeguards in accordance with the GDPR.

7. User rights

The User may exercise the following rights at any time, free of charge:

  • Access: to know which personal data is being processed.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): to request the deletion of your data when it is no longer necessary.
  • Objection: to object to the processing on grounds relating to your particular situation.
  • Restriction of the processing in certain circumstances.
  • Portability: to receive your data in a structured format or request its transmission to another controller.
  • Withdrawal of consent at any time, without affecting the lawfulness of the processing carried out prior to withdrawal.

To exercise these rights, the User may write to jess@nudobeachclub.com or by post to the address indicated in section 1, enclosing a copy of their DNI or equivalent identity document.

The User also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing does not comply with current regulations.

8. Security

The Controller has adopted the technical and organisational measures necessary to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed.

9. Cookies

The Website uses cookies whose purpose and management are detailed in the Cookie Policy.

10. Amendments

The Controller reserves the right to amend this Privacy Policy in order to adapt it to legislative or case-law developments. In such cases, changes will be announced with reasonable advance notice on the Website.