Datenschutz & Cookie-Richtlinie (Englisch)

The purpose of this privacy policy (hereinafter, the „Policy“) is to explain the rules governing the various processing operations that may be carried out when you use our website accessible from the address

The Responsible for the processing of data collected through the application of, with address at Diseminado Poligono 9,6 29500 Alora (Malaga) and contact email

Finca Las Nuevas is a Rural Housing, registered in the Tourism Registry of Andalusia with the numbers: VTAR/MA/01619, VTAR/MA/01613, VTAR/MA/01618.

Laws incorporated in this privacy policy

This privacy policy is adapted to current Spanish and European legislation on the protection of personal data on the Internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons about the processing of personal data and on the free movement of such data (GDPR).
  • Royal Decree-Law 5/2018, of 27 July, on urgent measures for the adaptation of Spanish law to European Union data protection regulations.
  • Organic Law 15/1999, of 13 December, on the Protection of Personal Data (LOPD).
  • Royal Decree 1720/2007, of 21 December, approving the Regulation implementing Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).
  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

As the party responsible for the processing of your Personal Data, we make every effort to protect your privacy when you visit the Site.

This Policy enables you to learn more about the origin and use of your Personal Data and the browsing information we process when you visit our Site.

For this Policy, the term „Personal Data“ refers to any data that relates uniquely to you and that allows you to be identified directly or indirectly, regardless of the Terminal you are using.

The term „Terminal“ refers to the physical equipment (computer, tablet, smartphone, phone, etc.) that you use to view and browse the Site.

By using our Site, you signify your acceptance of the terms of this Policy in its entirety.
If you do not agree to any of these terms, you are free to stop using our Site.

This Privacy Policy is updated regularly. For you to be properly informed of any significant changes in advance, we will notify you by posting notices on the relevant services or by email, as appropriate.

The Site will always display the most current version of this Privacy Policy.

1. Protection of your personal data

Following the Regulation, we list all processing operations carried out in a processing log which we make available to the competent authorities.

All information you have provided to us during your visits to the Site is kept strictly confidential. This information is necessary for processing.

What personal data is collected and processed?

The information that may be collected and processed is as follows:

  • Identification and contact data: first name, last name, gender, postal address, telephone number, email address, language and country from which you interact with us;
  • Login, geolocation (only with your consent) and navigation data; and
  • Personal preferences: This includes your cookie preferences.

When we ask you to enter your data to access a feature, some data are mandatory fields as they are data we need to enable you to access this feature (for example, to register your booking we need your first and last name).

It is important that the personal information shared about you is correct and up to date.

We do not process any personal data that could be qualified as „sensitive“ (information relating to racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health or sex life) within the meaning of the Personal Data Regulation.

In this regard, it is specified that our Site is not intended for children and that we therefore do not process any data relating to them.

We undertake not to transfer your data to third parties.

For what purposes are your data collected and processed?

Personal data are collected and managed by Finca Las Nuevas to facilitate, expedite and fulfil the commitments established between the Website and the User or to maintain the relationship established in the forms that the latter fills in or to respond to a request or query.

Likewise, the data may be used for commercial, personalisation, operational and statistical purposes, and activities related to the corporate purpose of Finca Las Nuevas, as well as for the extraction and storage of data and marketing studies to adapt the Content offered to the User, as well as to improve the quality, operation and browsing of the Website.

At the time the personal data is obtained, the User will be informed about the specific purpose or purposes of the processing for which the personal data will be used; that is, the use or uses that will be given to the information collected.

Retention periods for personal data

Personal data will only be retained for the minimum time necessary for their processing and, in any case, only for the following period: the time prescribed by law, or until the User requests their deletion.

At the time the personal data is obtained, the User will be informed of the period for which the personal data will be retained or, where this is not possible, the criteria used to determine this period.

Recipients of personal data

The User’s data will be shared with the following recipients or categories of recipients:
CIVIL GUARD: If the Controller intends to transfer personal data to a third country or international organisation, at the time the personal data are obtained, the User will be informed of the third country or international organisation to which it intends to transfer the data, as well as of the existence or absence of an adequacy decision by the Commission.

Personal data of minors

Under the provisions of articles 8 of the RGPD and 13 of the RDLOPD, only those over 14 years of age may give their consent to the processing of their data in a lawful manner by Finca Las Nuevas. In the case of a minor under 14 years of age, the consent of the parents or guardians will be required for the processing, and this will only be considered lawful to the extent that they have authorised it.

As partof a subscription to our newsletter, we will contact you no more than 16 times a year.

However, because Finca Las Nuevas cannot guarantee the impregnability of the Internet or the total absence of hackers or others who fraudulently access personal data, the Data Controller undertakes to notify the User without undue delay when a breach of security of personal data occurs that is likely to involve a high risk to the rights and freedoms of natural persons. Under Article 4 of the GDPR, a breach of security of personal data means any breach of security leading to the accidental or unlawful destruction, loss or alteration of, or unauthorised disclosure of or access to, personal data transmitted, stored or otherwise processed.

What are your rights?


Your consent must be given clearly and unequivocally. That is why, by agreeing to fill in the contact form on the Site, you are informed of the use that will be made of your Data:

  • you are informed of the use that will be made of your Personal Data;
  • you must tick a box to validate your consent; and
  • children under the age of 13 cannot give their consent.

Other rights

Under the Regulation, you have the following rights over your Data:

  • Right of access to data: this right allows you to receive a copy of the Personal Data we hold about you;
  • Right of rectification: this right gives you the possibility to request the correction of inaccurate or incomplete Personal Data concerning you;
  • Right to the erasure of your Data: this right gives you the possibility to request the erasure of your Personal

Data if any of the legal conditions are met:

  • the Personal Data are no longer necessary for the processing;
  • you have withdrawn the consent on which the processing is based;
  • you have objected to the processing operation using your right to object;
  • the processing of your Personal Data is unlawful; or
  • your Personal Data must be erased under a legal obligation.

You have the right to restrict the processing of your Personal Data; this restriction of processing can be carried out at any time:

  • you dispute the accuracy of your Personal Data;
  • you do not object to the deletion of your Personal Data in the context of unlawful processing, but demand that it be restricted;
  • your Personal Data are no longer used by our services, but their storage is only necessary for the recognition, exercise or defence of a legal right; or
  • you object to our use of your Personal Data through your right to object.

Right to portability of your Data

You can contact us to have your Data provided to you or directly to another controller in a structured, commonly used and machine-readable format;

Right to object: you can contact us when:

  • processing is carried out in the public interest or our legitimate interests; you can object only on grounds relating to your situation;
  • processing is carried out for marketing purposes; you can object to this at any time and without any explanation being given to us.

Regardless of the purpose or legal basis under which we process your data, you can, at any time and free of charge, send us an e-mail to take advantage of your rights at the following address:

Or send us a letter to the following address:

Please note, however, that we may not always be able to respond positively to your request for legal reasons which we will inform you, if necessary, after receiving your request.

In any case, we remind you that you have the right to complain to the competent administrative authority.

1.4. What are the legal bases for processing?

For the processing of your data, we rely on legal grounds that depend on how you interact with our Site.

When you purchase products on our Site, we collect and process your data to perform the contract between you and us. For example, we need your postal details to deliver your order or your bank details to process your payment.

We also rely on other legal grounds, such as your legitimate interests. For example, we consider it in your interest that your identity cannot be used for fraudulent purposes, that our customer service staff have access to your order information to serve you better, or that we can better understand your use of our Site to improve its usability and the services we offer you.

Finally, when it comes to the processing of personal data for prospecting purposes, the legal basis for the processing is your consent (see article 1.6.1.).

2. Security of your Internet browsing

2.1. Integrity of your data on the Internet

The Site has appropriate security measures in place to prevent any loss, unauthorised use or access, modification or disclosure of your Personal Data.

All personal data collected is stored on secure servers. The controller has also established procedures to handle any personal data breaches.

Malicious use

It is recommended that you connect only to secure networks, preferably private networks. Be aware of the risks involved with public wifi networks.

Regardless of the data controller to whom you have voluntarily transmitted your data and taking into account the nature of the Internet network, other operators, without any link to the data controller, may collect them without your consent, in particular during your Internet browsing. We therefore recommend that you install anti-virus and anti-spyware software on your computer and that you update it regularly.

Usurpation/ Phishing/ Phishing

The Data Controller will never ask you by e-mail to obtain personal information.

If you receive an e-mail on behalf of the Data Controller asking you to provide sensitive personal information (bank details, details relating to your private life, etc.), please do not reply and forward this e-mail to us so that we can take the necessary measures.

You should only provide your account information after you have logged on to the Site directly through your browser.

3. Cookie Policy

A cookie is a text file that can be stored in a dedicated space on the hard disk of your terminal when you visit a website. A cookie allows its issuer to identify the Terminal on which it is stored, during the period of validity or registration of the cookie.

When you consult the Site, information relating to the navigation of your Terminal (computer, tablet, smartphone, etc.) may be recorded through the cookies installed on your Terminal, depending on the choices you have made to cookies and which you may modify at any time.

3.1 What are cookies used for on our website?

Only the issuer of a cookie can read or modify the information contained in it.

When you connect to the Site, the Data Controller may, at its discretion, install several cookies on your Terminal to recognise your Terminal’s browser during the period of validity of the cookie in question. The cookies we issue are used for the purposes described below.

The cookies we issue enable us to:

  • carry out studies and establish statistics and volumes of visits and use of the various elements that make up our Site (sections and content visited, routes), allowing the Owner to improve the interest and ergonomics of its services;
  • to adapt the presentation of the Site to the display preferences of your Terminal (language used, screen resolution, operating system used, etc.) when you visit the Site, depending on the screen or reading hardware and software contained in your Terminal; and
  • to implement security measures, for example, when you are asked to reconnect to content or a service after a certain period.

3.2. Your choices regarding cookies

There are several ways in which you can manage cookies. Any settings you make may affect your Internet browsing and your access to certain services that require the use of cookies.

You can choose at any time to express and modify your wishes regarding cookies by the means described below.

In particular, you can configure your browser so that cookies are stored on your Terminal or, on the contrary, so that they are rejected, either systematically or depending on their origin.

You can also set your browser software to give you the option to accept or decline cookies from time to time before a cookie can be stored on your Device. For more information, see „How to choose, depending on the browser you use“ in article 4.2.3. below.

3.2.1. The cookie agreement

The recording of a cookie on a Terminal is essentially subject to the will of the user of the Terminal, who can express and modify it at any time and free of charge through the options offered to him by his browser software.

If you have accepted the registration of cookies on your Terminal in your browser, the cookies embedded in the pages and contents you have viewed may be temporarily stored in a dedicated area of your Terminal. They can only be read by your transmitter.

3.2.2. Refusal of cookies

If you refuse to accept cookies on your Terminal or to delete those already stored on your Terminal, the quality of the functioning of the services offered by the Site will not be affected.

However, you will no longer be able to benefit from several functions that may be necessary to navigate certain areas of the Site. This would be the case if you tried to access content or services for which the installation of cookies is strictly necessary (for example, to book a stay). This would also be the case if the Data Controller – or its service providers – were unable to recognise, for technical compatibility reasons, the type of browser used by your terminal, your language and screen settings or the country from which your terminal appears to be connected to the Internet.

If necessary, the Data Controller declines all responsibility for any consequences related to the operation of its services resulting from the impossibility for it to record or consulting the cookies necessary for their operation and which you have refused or deleted.

We would like to point out that some cookies cannot be deleted as they are strictly necessary for the technical operation of the Site.

How do you make your choices, depending on the browser you use?

For the management of cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will let you know how to change your cookie preferences.

3.2.4. Deleting your cookies

You can delete all your cookies or just the ones you want. Deleting cookies does not prevent browsing or reinstallation while browsing. This allows you to control your browser’s cookie library at some point. Technical cookies, which are necessary for browsing, will be reinstalled if you visit the Site.

Below we explain the procedure to follow depending on your browser.


  • From the Chrome menu, select „Settings“.
  • Show advanced settings
  • Go to the „Privacy“ section
  • Click on „Content settings“.
  • In the „Cookies“ paragraph (first paragraph), click on „Cookies and site data“.
  • Find the cookies you want to delete and click „OK“. You can also choose to delete all your cookies.


  • In the Firefox menu, go to „Tools“ and then „Options“.
  • In the „Privacy“ tab, click on „Show cookies“.
  • Find the cookies you want to delete and click on „Delete cookies“.

Internet Explorer

Internet Explorer does not allow case-by-case cookie management. To delete all your cookies:

  • Click on „Tools“ and then „Internet Options“.
  • In the „General“ tab, under „Browsing history“, click on „Delete“.
  • Tick the „Cookies“ box and click „Delete“.


  • In the Safari menu, select „Preferences“.
  • In the window that has opened, go to the „Security“ tab.
  • Click on „Show cookies“.
  • In the window that opens, locate and select the cookies you wish to delete, and click on „Delete“.

3.2.5. Private Browsing

The „Private Browsing“ mode, which is now offered by all browsers, mainly allows you to surf the Internet without having a history of the pages visited or downloaded. Concerning cookies, all cookies that were saved during your browsing will be deleted when you close your browser. Therefore, it is not a solution to refuse cookies; however, their lifetime is limited to the duration of your browsing.

3.2.6. Disabling third-party cookies

Disabling third-party cookies allows you to accept only cookies placed by the Site, which you also have the option to disable, delete or limit. This is the procedure to follow, depending on your browser, if you wish to refuse third-party cookies:


  • In the Chrome menu, select „Settings“.
  • Show advanced settings
  • Go to the „Privacy“ section
  • Click on „Content settings“.
  • In the „Cookies“ paragraph (first paragraph), tick the box „Block cookies and third-party site data“.
  • Save your changes by clicking „OK“.


  • In the Firefox menu, go to „Tools“ and then „Options“.
  • In the „Privacy“ tab, check the „Accept cookies“ box.
  • For the setting „Accept third-party cookies“, select „Never“.
  • Save your changes by clicking „OK“.

Internet Explorer

  • In the Internet Explorer menu, go to „Internet Options“.
  • On the „Privacy“ tab, click on the „Advanced“ button.
  • Accept internal cookies, and reject third-party cookies.
  • Save your changes by clicking „OK“.


  • In the Safari menu, select „Preferences“.
  • In the window that has opened, go to the „Security“ tab.
  • To choose, „Accept cookies“, select „Only from sites I visit“.

3.2.7. Your choices expressed online directly with us

If you do not wish

  • that we collect data about your browsing,
  • that in the context of a registration through a special operation, we can identify the original special operation,

you can choose to disable all third-party cookies, which are not essential for browsing the Site.

We will then store a cookie on your terminal whose sole purpose is to disable the placement of these cookies on your computer. This cookie will be valid for twelve (12) months.

Attention, the consideration of your wish is based on a cookie. If you delete all cookies stored on your Device (via your browser), the Data Controller – or its service providers – will no longer know that you have chosen this option.