Privacy Policy
Last updated:November 8, 2026
This privacy notice explains what happens to your data when you visit the Casa Gabriel website or contact us.
1. Who is responsible for your data
Your data is processed by the operator of Casa Gabriel (data controller):
- Name: Gabor Hilbert, sole proprietor (autónomo)
- Tax ID (NIF/NIE): X1120991V
- Address: Urbanización Altero de Monpoi, Carrer Mestral 8, 46220 Picassent (Valencia), Spain
- Email: info@casagabriel.eu
If you have any questions regarding your data, please write to this address.
2. What data we collect
If you write to us using the contact form: your name, your email address, the planned duration of your stay, and your message. We need all four pieces of information to provide you with a meaningful response. We also record the language of the page you used to submit the form and the date and time of submission.
If you contact us by phone or email: the information you provide verbally or in writing (such as your name, phone number, email address, and your question).
When you visit the site: the server logs your device’s IP address, your browser’s identifier, the page you visited, the time, and the page you came from (if your browser sends this information) for every page load.
If the site detects an error in your browser: a brief technical error message (for example, indicating which request failed) is sent to our server. This does not include the data you entered in the form.
Form protection: To prevent the form from being used for mass emailing, the server counts the number of messages coming from the same IP address over a one-hour period. This information is stored only in the server’s memory; we do not save it.
Reservations: You cannot make reservations or pay on this site, so we do not request any payment information. If your inquiry leads to a reservation, we will request the information required for the reservation (including the information that, under Spanish law, the accommodation provider is required to keep on record about guests) at the time of booking, and we will then provide you with specific information about how we handle that data.
3. Why we use it
- Information provided via the form, by phone or by email: To answer your question. We will forward the message you send via the form to the property owner by email and send an automatic confirmation to the email address you provided to let you know we’ve received it.
- Planned length of stay: To see how long you’re looking for accommodations and tailor our response accordingly.
- Site language: So we can respond in your language.
- Server logs and error messages: Site operation and security: to detect and correct errors and abuse. A daily summary is generated showing how many visitors and how many bots (such as search engine bots) visited the site. The summary does not include IP addresses or browser identifiers.
We do not use your data for advertising, we do not create a profile of you, and we do not make automated decisions about you. We do not send newsletters.
4. Legal basis
- Responding to your inquiry (via form, phone, or email): taking action in response to your request prior to a potential reservation (GDPR Article 6(1)(b)). If your inquiry is not related to a reservation, it is in our legitimate interest to respond to you (GDPR Article 6(1)(f)).
- Server logs, error messages, and form protection: our legitimate interest in ensuring the website operates securely and without errors (GDPR Article 6(1)(f)).
- Loading Google Maps (see Section 9): your consent, which you provide by clicking the “Show the map” button (GDPR Article 6(1)(a)).
5. How long we keep it
- Messages sent via the form: The site's system automatically deletes them after 90 days.
- Correspondence in the owner’s inbox (messages sent via the form, as well as inquiries made by phone or email): if it does not result in a reservation, we retain it for up to one year after the last message, after which it is deleted.
- Server logs and error messages: These are automatically deleted after 30 days.
- Daily visitor statistics do not contain any personal data.
6. Who receives it
- The owner of the house, by email, so they can reply to you.
- ZenItNet, which develops and operates the website on our behalf.
- Hetzner Online GmbH (Germany), whose server hosts the site. The server is located in the European Union.
- Google, through whose email service (Google Workspace) we send emails received via the form and automatic confirmation messages.
- INWX (InterNetworX), a service provider operating in the European Union, which hosts the casagabriel.eu domain and its email service. Emails sent to info@casagabriel.eu (including messages forwarded from the form) are forwarded to the property owner’s email inbox.
These service providers may process your data only on our behalf and in accordance with our instructions.
Google Maps only receives data from your browser if you click the “Show the map” button on the Contact page (see point 9). Google processes this data in accordance with its own privacy policy.
Outside the European Union: Google may process data outside the European Union, such as in the United States. This is guaranteed by the European Commission’s decision on the EU-U.S. Data Privacy Framework and the standard contractual clauses adopted by the Commission. In other cases, your data remains within the European Union.
We do not sell your data or share it with others for advertising purposes.
7. Your rights
You can request at any time:
- to find out what data we process about you and to receive a copy of it (access);
- to have inaccurate data corrected (rectification);
- to have your data deleted (deletion);
- that we stop using your data for a certain period of time and simply store it (restriction);
- to receive the data you have provided in a machine-readable format (data portability).
You may also object to our processing of your data based on our legitimate interests (objection).
You may withdraw your consent to the map being loaded at any time. This does not affect previous loadings, and the site will never reload the map on its own.
If you wish to exercise your rights, please write to info@casagabriel.eu. We will respond free of charge within one month at the latest. If it is not clear that the request comes from you, we may ask you to verify your identity.
8. Questions and complaints
If you have any questions or complaints regarding data processing, please email us at info@casagabriel.eu. We will do our best to resolve the issue.
You may also file a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or with the data protection authority of the EU member state where you live or work.
If the operation of the site changes, we will update this notice. The date of the most recent change is shown at the top of the page.
9. Cookies and third parties
The Casa Gabriel website does not use cookies and does not store data in your browser. There is one exception: if part of the site fails to load after an update, your browser keeps a technical marker until you close the tab, so that the page does not keep reloading endlessly. It contains no data about you. There is no visitor analytics in your browser, no ads, and no tracking.
Google Maps: On the Contact page, the map only loads when you click the “Show the map” button. Before that, the address appears in its place, and the page does not send any requests to Google. When you click the button, your browser connects to Google, which receives your IP address and browser data, and may also set a cookie. We do not remember your click: the button will appear again on your next visit.
The Things to See map: We generate this map using data from OpenStreetMap. When you open it, you are not connected to any external service provider.
Fonts: The site’s fonts are loaded from our own server, not from Google. After you press the button, Google Maps loads its own fonts from Google.
External links: The “Open in Google Maps” link, the “Location (Google Maps)” link in the footer, and the other external links on the page take you to another provider’s site, but only if you click on them. From that point on, that provider’s own rules apply.