Necessary
Required for the website to function and to remember your consent choice. These cannot be disabled.
DATA PROTECTION
Privacy Policy
This policy explains what personal data we process, why we use it, who may receive it and the rights you have in relation to your data.
Last updated: 30 August 2026
1. Who is the data controller
Stay in Costa Blanca is the trading name used by Matei Stelian, a self-employed professional (autónomo) in Spain.
- NIF/NIE: Z1580822Z
- Professional location: Villamartín, Orihuela, Alicante Province, Valencian Community, Spain, 03189
- Phone: +34 624 110 656
- Privacy email: privacy@stayincostablanca.com
For the purposes of Regulation (EU) 2016/679 (GDPR), Matei Stelian is the controller of personal data processed through this website and its associated contact channels.
2. Personal data we may process
Depending on how you use the website, we may process:
- identity and contact data such as your name, email address and telephone number;
- information you provide about your property, its location, property type and your message;
- data arising from communications by email, contact form or WhatsApp;
- technical data such as IP address, device type, browser, pages viewed, traffic source and usage events, where generated by our technical infrastructure or consented analytics tools;
- cookie preferences and consent choices for analytics, marketing or newsletters;
- newsletter subscription data, including confirmation evidence and subscription status.
Please do not submit sensitive personal data or information that is unnecessary for your enquiry through our public forms.
3. Purposes and lawful bases
| Purpose | Data | Lawful basis |
|---|---|---|
| Responding to enquiries, information requests and quotation requests | Contact data and information about the enquiry/property | GDPR Art. 6(1)(b) — steps taken at your request before entering into a contract |
| Managing communications by email, telephone or WhatsApp | Contact data and communication content | Pre-contractual steps and, where appropriate, legitimate interests in managing correspondence |
| Newsletter and email marketing | Name, email, language, preferences and subscription evidence | GDPR Art. 6(1)(a) — consent. Newsletter subscription is voluntary and separate from the contact form |
| Website analytics and performance | Online identifiers and usage data | Consent where the analytics technology requires consent |
| Advertising, campaign measurement and remarketing | Online identifiers and usage events | Consent for the Marketing & remarketing category |
| Security, abuse prevention and technical operation | Technical logs, IP and security data | GDPR Art. 6(1)(f) — legitimate interests in security and service operation |
| Compliance with legal obligations | Data relevant to the applicable obligation | GDPR Art. 6(1)(c) |
4. Contact form and Formspree
Our public contact form is technically processed through Formspree, Inc.. Information entered into the form may be transmitted to Formspree so that the message can be delivered to Stay in Costa Blanca.
Formspree acts as a technical form-processing provider. Where international transfers apply, the provider states that it relies on appropriate safeguards, including Standard Contractual Clauses.
6. Google, Meta and TikTok
With your consent for the relevant cookie categories, the website may use analytics, campaign measurement and remarketing tools provided by:
- Google — Google Tag Manager, Google Analytics and Google Ads;
- Meta — measurement and advertising tools for Facebook and Instagram;
- TikTok — measurement and advertising tools, including TikTok Pixel.
Analytics and marketing technologies are subject to the consent settings implemented on this website. You can change your preferences using the “Cookie settings” control.
Technical details, cookie durations and providers will be described in the Cookie Policy.
7. WhatsApp
If you choose to contact us through WhatsApp, your communication takes place through WhatsApp services. For users in the European Economic Area, the service is provided by WhatsApp Ireland Limited.
Using WhatsApp is optional. You may instead contact us by email, telephone or the website contact form.
8. Technical infrastructure and service providers
To operate the website and our digital infrastructure, we may use providers including:
- IONOS Cloud S.L.U. — hosting, domain, email and related technical infrastructure, as applicable;
- Vercel — website deployment and delivery;
- GitHub — source-code hosting and technical deployment processes;
- Formspree — contact form processing;
- Kit — newsletters and email marketing;
- Google, Meta, TikTok and WhatsApp as described above.
Depending on the service and processing operation, these providers may act as processors, subprocessors or independent controllers under their own terms and privacy notices.
9. International transfers
Some providers may process personal data outside the European Economic Area. Where such a transfer occurs, it must rely on an applicable legal mechanism such as an adequacy decision, the EU-U.S. Data Privacy Framework, European Commission Standard Contractual Clauses or other GDPR safeguards.
10. How long we keep data
- Contact enquiries: for as long as necessary to deal with the enquiry and, if no contractual relationship follows, normally no longer than 12 months after the last communication, unless retention is needed for a legal obligation or the establishment, exercise or defence of legal claims.
- Newsletter: until you withdraw consent or unsubscribe. We may retain a minimal suppression record so that your opt-out can be respected.
- Contractual data: if you become a client, data required for the contract and applicable tax/legal obligations will be retained for the legally required periods.
- Analytics and marketing: according to your consent choices, provider settings and the periods described in the Cookie Policy.
- Technical logs: for the period necessary for security, stability and incident investigation, depending on the relevant technical provider.
11. Your rights
Subject to the conditions of the GDPR, you may request:
- access to your personal data;
- rectification of inaccurate data;
- erasure of your data;
- restriction of processing;
- data portability where applicable;
- objection to certain processing;
- withdrawal of consent at any time for processing based on consent.
To exercise your rights, contact privacy@stayincostablanca.com. We may request reasonable information to verify your identity before acting on a request.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
12. Automated decision-making and profiling
We do not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.
Advertising technologies may create audiences or segments for remarketing only where the relevant consent has been provided. Such segmentation is not used to make automated legal or contractual decisions.
13. Data security
We apply reasonable technical and organisational measures to protect personal data, including access controls, specialist service providers, secure connections and controlled access to the accounts and services we use.
No method of electronic transmission or storage can guarantee absolute security.
14. Changes to this policy
We may update this Privacy Policy to reflect legal, technical or service changes. The version published on this page is the version applicable as of the date shown above.