Privacy Policy
1. Controller
The controller responsible for processing personal data in this section of the website is:
Private Hideaway, S.L.U.Carrer Barcella 1
07141 Marratxí, Balearic Islands, Spain
Email: architecture@privatehideaway.com
Telephone: +34 871 249 993
Please use the email address stated above for privacy enquiries or to exercise your rights.
2. Scope
This privacy policy explains how we process personal data when you visit our website, manage your cookie settings, subscribe to a newsletter or use section-specific services such as booking or property enquiry functions. Personal data is any information relating to an identified or identifiable individual.
3. Hosting and website delivery
This WordPress website is hosted by HostPress GmbH, Bahnhofstraße 34, 66571 Eppelborn, Germany. When you access the website, technical data may be processed, including your IP address, date and time of access, requested page or file, amount of data transferred, referrer URL, browser, operating system and status information.
The processing is necessary to provide the website securely, reliably and efficiently. It is based on our legitimate interests under Article 6(1)(f) GDPR. HostPress processes data on our behalf under Article 28 GDPR. Log data is deleted once it is no longer needed for these purposes, unless security requirements or statutory duties require longer retention.
5. Analytics and marketing
With your consent, we use Google Tag Manager and Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Meta Pixel, provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
These services help us manage website tags, understand website use and measure the effectiveness of our communications and advertising. They may process usage, device, browser, interaction, approximate location and protected IP address data. Meta may associate information with an existing Meta account.
Processing is based on your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG or Article 22.2 LSSI-CE. Google and Meta may process data in the United States. Their relevant US companies participate in the EU-US Data Privacy Framework; standard contractual clauses may also be used where required.
6. Google Maps and external fonts
Google Maps and fonts loaded from third-party servers are only activated with your consent. Loading such content may transmit your IP address, device details, the page visited and, in the case of maps, location information to the relevant provider. The legal basis is Article 6(1)(a) GDPR and section 25(1) TDDDG or Article 22.2 LSSI-CE. Wherever possible, fonts are hosted locally.
7. WhatsApp
We may offer the option of contacting us through WhatsApp. The provider for users in the EEA is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. If you choose WhatsApp, WhatsApp processes your telephone number and communication and metadata. We process your message and contact details to respond to your enquiry.
Processing is based on Article 6(1)(b) GDPR where your message relates to a contract or pre-contractual steps, and otherwise on our legitimate interest in efficient communication under Article 6(1)(f) GDPR. Please do not send particularly sensitive or confidential information via WhatsApp.
9. Sharing within the Private Hideaway group
If your enquiry clearly concerns another Private Hideaway division, we may forward your information to the company responsible for that division where this is necessary to deal with your enquiry and you can reasonably expect the transfer or have consented to it.
The legal basis is Article 6(1)(b) GDPR for pre-contractual steps, Article 6(1)(a) GDPR where you have consented, or Article 6(1)(f) GDPR in other appropriate cases. Your details are not shared for independent marketing without any consent required by law.
10. Recipients, international transfers and retention
We use providers for hosting, maintenance, consent management, newsletters, analytics, advertising and section-specific CRM, booking and property functions. Processors are bound by agreements under Article 28 GDPR. Other recipients receive data only where necessary for a contract, required by law, covered by your consent or otherwise legally permitted.
Where data is transferred outside the EEA, we rely on an adequacy decision, the EU-US Data Privacy Framework or appropriate safeguards such as standard contractual clauses.
We retain personal data only for as long as required for the relevant purpose, unless statutory retention periods, legal claims or continuing consent justify longer storage.
Project and planning enquiries
When you provide project information by email or another agreed channel, we process your contact details and the land, building, planning, budget and project information supplied to assess and deal with your enquiry. Processing is based on Article 6(1)(b) GDPR. Where necessary, information may be shared with architects, engineers, specialist consultants, advisers or contractors involved in the project, on an appropriate contractual and data protection basis.
Your rights and security
Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons arising from your particular situation. You may withdraw consent at any time for the future and lodge a complaint with a data protection supervisory authority.
We use appropriate technical and organisational safeguards. The website is delivered over an encrypted HTTPS connection.
Last updated: August 2026