Privacy Policy
How we collect, use and protect your personal data, in compliance with the GDPR and the Spanish LOPDGDD.
1. Controller
Rosebud Hospitality (the “Company”) is the controller of the personal data collected through this site. Email: concierge@rosebudhospitality.com.
2. Data we collect
When you contact us (form, WhatsApp, email) we collect: name, contact details (email, phone), preferred dates and the description of the experience you are interested in. We do not collect credit-card data on this site.
3. Purpose and legal basis
We process your data to (a) respond to your enquiry and provide a quote; (b) execute the requested service; (c) — only with your consent — send you commercial communications. Legal basis: pre-contractual / contractual relationship and, where applicable, your consent (Art. 6 GDPR).
4. Data retention
Enquiry data is kept for up to 24 months after the last contact. Client data is kept while the relationship is active and for the legal periods required for tax and accounting purposes.
5. Sharing
We do not sell your data. We only share what is strictly necessary with the suppliers required to execute the service (e.g. the restaurant for a reservation). We use processors (hosting, CRM, email) bound by a data-processing agreement.
6. Your rights
You can access, rectify, erase, restrict, port or object to the processing of your data, or withdraw consent at any time. Write to concierge@rosebudhospitality.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. International transfers
Where a provider is outside the EEA, we ensure adequate safeguards (Standard Contractual Clauses or adequacy decisions).
8. Security
We apply technical and organisational measures appropriate to the risk to keep your data secure.