Privacy Policy

Last updated: March 2026

At Espacio Desconecta we are committed to protecting the privacy of our users. This policy describes what personal data we collect, how we use it and what your rights are.

1. Data controller

Trade name: Espacio Desconecta

Address: Av. Doctor Rubio, 8, 21001 Huelva, Spain

Contact email: info@espaciodesconecta.com

Phone: +34 614 85 27 28

2. Personal data we collect

We collect the following personal data through the forms on our website:

2.1. Booking form

Full name

Email address

Phone number

Selected activity, date, time and number of people

2.2. Contact form

Name

Email address

Message content

3. Purpose of data processing

We use your personal data for the following purposes:

Managing and confirming activity booking requests

Communicating with you to confirm, modify or cancel bookings

Responding to enquiries submitted through the contact form

Sending you an acknowledgement email when you make a booking (this is not a confirmation, it only notifies that we have received your request)

Sending a notification to the Espacio Desconecta team with your booking details for internal management

4. Legal basis for processing

The processing of your data is based on:

Consent: by submitting the booking or contact form, you give your consent to the processing of the data provided.

Performance of a contract: processing is necessary to manage the provision of the activity booking service.

Legitimate interest: to respond to enquiries received through the contact form.

5. Data recipients

Your personal data may be shared with the following third parties, exclusively for the purposes indicated:

Google (Google Calendar API): booking data (activity, date, time, name, email, phone, number of people and amount) is recorded in Google Calendar for internal schedule management.

Resend: transactional email service used to send the acknowledgement to the client and the notification to the administrator.

Cloudflare (Turnstile): anti-bot verification service. Cloudflare processes technical session data (IP address, browser information) to verify that the form submission comes from a real person. It does not receive your personal data (name, email, etc.).

Vercel: hosting platform where the website is hosted. Vercel servers process HTTP requests, which may include the user's IP address.

We do not sell, rent or share your personal data with third parties for commercial or advertising purposes.

6. Data retention period

Booking data: retained in Google Calendar indefinitely for business management and potential legal/accounting obligations. You can request its deletion at any time.

Contact data: retained only for the time necessary to respond to your enquiry.

Transactional emails: records in the email service (Resend) are retained according to said service's retention policy.

7. User rights

In accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), you have the right to:

Access: know what personal data of yours we are processing.

Rectification: correct inaccurate or incomplete data.

Erasure: request the deletion of your data when it is no longer necessary.

Restriction of processing: request that the use of your data be limited in certain circumstances.

Portability: receive your data in a structured, commonly used format.

Objection: object to the processing of your data in certain circumstances.

To exercise any of these rights, send an email to info@espaciodesconecta.com stating your request and attaching a copy of your identity document.

If you believe your rights have not been adequately addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

8. Data security

We implement technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include:

All communications are made over HTTPS (SSL/TLS encryption).

Authentication with Google Calendar uses a service account with encrypted credentials.

Forms are protected by Cloudflare Turnstile against automated submissions.

Sending limits per email and hour are applied to prevent abuse.

User data is escaped (sanitised) before being included in email templates to prevent code injection.

9. Minors

Our services are aimed at people over 18 years of age. We do not knowingly collect data from minors. If you are under 18, do not use our forms without the consent of your parent or legal guardian.

10. Changes to this policy

We reserve the right to update this privacy policy at any time. The date of the last update is indicated at the beginning of the document. We recommend reviewing it periodically.

Contact

If you have any questions about this privacy policy or the processing of your data, you can contact us at:

Email: info@espaciodesconecta.com

Phone: +34 614 85 27 28

Address: Av. Doctor Rubio, 8, 21001 Huelva, Spain