Privacy Policy
This Privacy Policy is intended to inform users of the website https://www.thevoelkershouse.com about the processing of their personal data, in compliance with Articles 13 and 14 of Regulation (EU) 2016/679 General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
1. Identity of the data controller
Controller: EV Hotel Mallorca, S.L.U.
Trade name: The Völkers House
Tax ID (NIF): B56549785
Address: Tda. Son Ginard, Parcela 28, Polígono 13, núm. 797, 07630 Campos (Illes Balears)
Email: info@thevoelkershouse.com
Phone: +34 871 552 800
2. Data processing activities, purposes and legal bases
2.1. Contact form and information requests
Purpose: To handle and manage enquiries, information requests, availability queries or any other communication submitted by the user through the Website's contact form or by direct email to the hotel.
Data processed: Name, surname, email address, phone number (if applicable) and the content of the message or enquiry.
Legal basis: The processing is based on the legitimate interest of the controller in responding to communications received through its website (Article 6(1)(f) GDPR). The hotel has a clear and recognisable legitimate interest in responding to users' ; enquiries and requests, and anyone who voluntarily fills in the contact form has a reasonable expectation that their data will be used to respond to their communication. Where the enquiry relates to a potential booking or engagement of hotel services, the processing will additionally be based on the implementation of pre-contractual measures at the request of the data subject (Article 6(1)(b) GDPR).
Retention period: Data will be retained for the time necessary to handle the enquiry and, where applicable, for the legally established limitation periods. If the enquiry leads to a contractual relationship, data will be retained in accordance with the period indicated in the following section.
2.2. Booking management and provision of hotel services
Purpose: To manage accommodation bookings and other hotel services (dining, spa, equestrian activities), invoicing, compliance with legal obligations in tourism and tax matters, and guest assistance during the stay.
Data processed: Name, surname, identity document (national ID, residence permit or passport), nationality, date of birth, postal address, email, phone number, payment card data (processed through a secure payment gateway), dates of stay, accommodation preferences, and any other data necessary for the provision of the service.
Legal basis: Performance of the accommodation contract and ancillary services (Article 6(1)(b) GDPR). Additionally, compliance with the controller's legal obligations (Article 6(1)(c) GDPR), particularly those arising from Royal Decree 933/2021, of 26 October, which requires the communication of guest data to the Spanish State Security Forces, as well as tax and invoicing obligations.
Retention period: Data will be retained during the contractual relationship and, thereafter, for the legally established limitation periods. Data communicated under Royal Decree 933/2021 will be retained for three years. Tax data will be retained for the periods required by applicable tax legislation.
2.3. Commercial communications
Purpose: To send the user electronic communications with information about offers, promotions, special events, news and services of the hotel, restaurant, spa or equestrian club.
Data processed: Name and email address.
Legal basis: The express consent of the data subject (Article 6(1)(a) GDPR), in conjunction with Article 21 of the LSSI-CE. Consent is obtained specifically and independently. For clients with an existing contractual relationship, the exception under Article 21(2) LSSI-CE may apply for communications relating to services similar to those previously contracted.
Retention period: Until the user withdraws consent. The user may unsubscribe at any time via the link included in each communication.
2.4. Website browsing and cookies
Purpose: To ensure the proper functioning of the Website, analyse usage for statistical purposes and improve the user experience.
Legal basis: For technical cookies, the legitimate interest of the controller (Article 6(1)(f) GDPR). For analytical cookies, the consent of the data subject (Article 6(1)(a) GDPR).
Retention period: As indicated for each cookie in the Cookie Policy.
3. Recipients of data
Personal data will not be disclosed to third parties, except where legally required. However, certain providers may access data as data processors:
• Web hosting provider, for server storage and maintenance.
• Payment gateway provider, for secure card transaction processing.
• Google LLC (Google Analytics), for statistical analysis of browsing.
• Spanish State Security Forces, in compliance with Royal Decree 933/2021 (mandatory guest
data reporting).
• Tax authorities, in compliance with tax obligations.
The Owner has entered into appropriate data processing agreements with the aforementioned providers in accordance with Article 28 GDPR.
4. International data transfers
The use of Google Analytics may involve data transfers to servers located outside the European Economic Area, primarily in the United States. Such transfers are carried out under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) or, where applicable, standard contractual clauses.
5. Data subject rights
The user may exercise the following rights at any time:
• Right of access to personal data (Article 15 GDPR).
• Right to rectification of inaccurate or incomplete data (Article 16 GDPR).
• Right to erasure — 'right to be forgotten' (Article 17 GDPR).
• Right to restriction of processing (Article 18 GDPR).
• Right to data portability (Article 20 GDPR).
• Right to object, including profiling (Article 21 GDPR).
• Right not to be subject to automated individual decision-making (Article 22 GDPR).
• Right to withdraw consent at any time (Article 7(3) GDPR).
To exercise these rights, the user may contact the Owner by email at info@thevoelkershouse.com or by post to Tda. Son Ginard, Parcela 28, Polígono 13, núm. 797, 07630 Campos (Illes Balears), enclosing a copy of an identity document. The response period is one month, extendable by a further two months.
6. Complaint to the supervisory authority
If the user considers that the processing does not comply with the applicable regulations, they have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
7. Security measures
The Owner has adopted appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 GDPR. Payment card data is processed exclusively through PCI-DSS certified payment gateways and the Owner does not store complete card data at any time.
8. Amendments
The Owner reserves the right to amend this Privacy Policy to adapt it to legislative developments or changes in the services provided.
9. Data protection information for the contact form (first layer)
The following text should be incorporated alongside the Website's contact form:
BASIC INFORMATION ON DATA PROTECTION
Controller: EV Hotel Mallorca, S.L.U. (Tax ID: B56549785).
Purpose: To handle your enquiry or information request regarding hotel services.
Legal basis: Legitimate interest of the controller and, where applicable, pre-contractual measures.
Recipients: Data will not be disclosed to third parties except where legally required.
Rights: Access, rectification, erasure, restriction, portability and objection, by contacting
info@thevoelkershouse.com.
Further information: Please see our Privacy Policy.
Last updated: May 2026