Legal
Privacy Policy
Last updated: September 2026. This policy explains how Marbella Holidays collects, uses, and protects your personal information in accordance with GDPR and applicable Spanish data protection law.
1. Introduction
Marbella Holidays is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or services. We comply with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
2. Data Controller
The data controller responsible for your personal data is Marbella Holidays, located at Ed. Skol, Avenida Arias Maldonado 16, 29602 Marbella, Spain. You can contact us regarding data protection matters at info@marbellaholidays.es.
3. Data We Collect
We may collect and process the following personal data: • Identity data: full name, date of birth, passport or ID number • Contact data: email address, telephone number, postal address • Booking data: reservation details, check-in and check-out dates, number of guests • Financial data: payment information (processed securely via our payment providers) • Technical data: IP address, browser type, device information, cookies • Communication data: your enquiries, feedback, and correspondence with us
4. How We Collect Your Data
We collect personal data through: • Direct interactions: when you complete a booking, enquiry form, or contact us • Automated technologies: cookies and similar tracking technologies on our website • Third parties: booking platforms and partners where you interact with our listings
5. How We Use Your Data
We use your personal data for the following purposes: • Processing and managing your booking or enquiry • Communicating with you about your reservation or stay • Providing customer support and responding to complaints • Sending marketing communications (where you have opted in) • Improving our website and services • Complying with legal obligations • Fraud prevention and security
6. Legal Basis for Processing
We process your personal data on the following legal bases: • Contract: processing is necessary to fulfil your booking or enquiry • Legal obligation: where required by law • Legitimate interests: to improve our services and prevent fraud • Consent: for marketing communications, which you may withdraw at any time
7. Data Sharing
We may share your personal data with: • Property owners whose properties you are booking • Service providers who assist in our operations (payment processors, IT providers) • Legal or regulatory authorities where required by law We do not sell your personal data to third parties. Any third parties with whom we share data are required to handle it in accordance with GDPR.
8. International Transfers
Your data may be processed outside the European Economic Area (EEA) by some of our service providers. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
9. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Booking data is typically retained for 7 years to comply with Spanish tax law. Marketing preferences are retained until you withdraw consent.
11. Your Rights
Under GDPR, you have the following rights regarding your personal data: • Right of access: to receive a copy of the personal data we hold about you • Right to rectification: to correct inaccurate data • Right to erasure: to request deletion of your data in certain circumstances • Right to restriction: to limit how we use your data • Right to data portability: to receive your data in a machine-readable format • Right to object: to object to processing based on legitimate interests • Right to withdraw consent: for any processing based on consent To exercise any of these rights, please contact us at info@marbellaholidays.es. We will respond within 30 days.
12. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Payment data is processed securely via PCI-compliant payment providers and is never stored on our servers.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data.
14. Marketing Communications
If you have opted in to receive marketing communications, we may send you information about our properties, offers, and services. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at info@marbellaholidays.es.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version will always be available on our website. We encourage you to review this policy periodically.
16. Contact & Complaints
For any questions about this Privacy Policy or how we handle your data, please contact: Marbella Holidays Ed. Skol, Avenida Arias Maldonado 16 29602 Marbella, Spain Email: info@marbellaholidays.es If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.