Privacy Policy

1. Data controller

2. Data we collect

Inquiry data. When you send a rental request through our quote drawer, we process the email address, phone number and any details you voluntarily share (event dates, item selection, message content).

Technical data. Our hosting provider processes IP address, user agent and timestamps in server logs for security and infrastructure integrity.

Cookies and similar technologies. Strictly necessary cookies store your consent choice. With your consent, analytics cookies (Google Analytics 4) and marketing cookies (Meta Pixel, Google Ads) may be set. See section 6.

3. Purposes and legal bases

• Reply to your rental inquiry and manage pre-contractual communication, based on Art. 6(1)(b) GDPR (steps prior to a possible contract at your request).
• Ensure security and prevent abuse of the site, based on Art. 6(1)(f) GDPR (legitimate interest in a functioning, secure service).
• Measure audience and optimise marketing through analytics and advertising cookies, based on Art. 6(1)(a) GDPR (your explicit consent, freely revocable).

4. Recipients and processors

We rely on the following categories of service providers, who act as data processors on our behalf:

• Website hosting and edge delivery (EU/EEA and, where applicable, US via SCCs).
• Email delivery and business email hosting.
• WhatsApp Business (Meta Ireland Ltd.) when you reply through WhatsApp.
• Google Ireland Ltd. (Google Analytics 4, Google Ads) only if you grant analytics or marketing consent.
• Meta Ireland Ltd. (Meta Pixel) only if you grant marketing consent.

International transfers to third countries take place only when covered by an adequacy decision or by the EU Standard Contractual Clauses with supplementary safeguards.

5. Retention

• Inquiry data: as long as needed to reply and, if a booking follows, for the duration of the commercial relationship plus statutory limitation periods (up to 6 years under Spanish commercial law).
• Server logs: up to 30 days for security purposes.
• Cookies: see cookie durations in section 6.

6. Cookies

We use three categories of cookies. Non-essential cookies only load after you grant consent through the cookie banner. You can withdraw or change your choice at any time via the “Cookie settings” link in the footer.

• Strictly necessary: stores your consent choice for up to 12 months. Always active.
• Analytics (Google Analytics 4): aggregate audience measurement. Cookies expire after up to 24 months.
• Marketing (Meta Pixel, Google Ads): ad measurement and retargeting. Cookies expire after up to 13 months.

7. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting the lawfulness of prior processing. Contact us at office@avana-agency.com to exercise these rights.

You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, aepd.es.

8. Changes to this policy

We may update this Privacy Policy to reflect changes to the service or applicable law. The date at the top of this page indicates the most recent revision.