Privacy policy

Last updated: 19 October 2026.

Data controller

Máximo Kondrashov is the controller of personal data relating to enquiries, bookings and stays at Villa Alisa Sitges.

Contact address: Carrer Creueta, 27, 08872 Sitges, Barcelona, Spain.
Email: [email protected].

This policy covers Villa Alisa Sitges activities through villaalisasitges.com and villaalisa.lodgify.com, as well as communications relating to enquiries and bookings.

What data we process

We process the identification and contact details you provide when enquiring or booking, the dates and details of your stay, related communications, and the information needed to manage payments and invoicing.

For guest registration, we request the information required by applicable law, including information about accompanying guests.

We receive this data directly from you, from people managing the booking on your behalf, and from the services used to process bookings and guest registration.

Do not include health information, identity documents or banking information in free-text comment fields. Use the designated channels when information needs to be provided for your stay.

Purposes and legal bases

Enquiries and bookings

We use your data to respond to accommodation enquiries, check availability and manage bookings. The legal basis is taking pre-contractual steps at your request and, once a booking is made, performing the accommodation contract.

Managing your stay

We process the data needed to provide arrival instructions, communicate with you, and manage services, payments, issues and requests relating to your stay. The legal basis is performance of the contract.

Legal obligations

We process the information needed to comply with guest registration and reporting requirements and applicable tax and accounting obligations. The legal basis is compliance with legal obligations.

Advertising

Booking a stay or sending an enquiry does not, in itself, mean that you authorise us to send advertising.

Card payments and bank transfers

Direct bookings can be paid by card through Stripe or by bank transfer, depending on the options shown when booking. We process booking and payer details, the amount and transaction status to manage payments, refunds and invoicing.

The data needed for card payments is provided to Stripe, which also processes data for its own security, fraud prevention and legal compliance purposes. See the Stripe privacy policy.

If you pay by bank transfer, we process the payer and transaction details shown in the banking information we receive and, where necessary, in the payment confirmation you provide, to identify and verify the payment.

The banks involved process data in accordance with their own obligations and privacy policies.

Service providers and recipients

We use Lodgify for the website and booking management, and Chekin for guest registration procedures. These services may process the data needed to perform their functions.

Data required by law may be disclosed to the competent authorities, including those responsible for guest registration and the tax authorities, where applicable.

Website analytics

The website integrates Google Analytics 4 to analyse visits, pages viewed and interactions with the booking process. This service uses online identifiers and device information. The legal basis for non-essential analytics is your consent. Booking does not require acceptance of analytics cookies. See Google Analytics privacy information and our cookie policy.

Services and international transfers

Lodgify's data processing agreement provides for the use of subprocessors that process data outside the European Economic Area. Stripe and Google describe international transfer mechanisms, including adequacy decisions and standard contractual clauses, in the linked documents. You can request information about the safeguards applicable to your data at [email protected].

• Lodgify data processing agreement
• Chekin privacy policy
• Stripe privacy and transfers
• Google transfer safeguards

Data retention

We keep data for as long as necessary to handle your enquiry, manage your booking and provide accommodation services.

Afterwards, we retain the necessary information for the applicable statutory periods and to address potential liabilities or claims. Access restrictions and, where applicable, statutory blocking of the data will apply during these periods.

Guest registration data and tax documentation will be retained for the periods established by their respective regulations.

Your rights

You can request access to your personal data, correction of inaccurate data and erasure where applicable.

You can also request restriction of processing, object to certain processing and exercise the right to data portability in the cases provided for by law.

Where processing is based on your consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.

To exercise your rights, email [email protected] with your request. If there are reasonable doubts about your identity, we may request the additional information needed to verify it.

You can also lodge a complaint with the Spanish Data Protection Agency through https://www.aepd.es.

Data needed to manage your stay

Data marked as mandatory is necessary to process the booking, provide accommodation or comply with legal obligations. If it is not provided, it may be impossible to arrange the booking or your stay.

If you provide data about other people included in the booking, inform them of this policy and provide only necessary and accurate information.

Updates

This policy may be updated to reflect changes in services, data processing or applicable law. The version published on this page will indicate its update date.