Last updated: 2026
This Privacy Policy explains how Suncueso SL — CIF: B72948995 trading as Finca Cantueso ("we", "us"), Camino de la Estación S/N 29710, Periana – Málaga, collects and uses your personal data when you use this website, book a cottage, reserve a table or send us an enquiry. We are the data controller.
What data we collect
- Contact enquiries, wedding and event enquiries: name, email, phone, subject, preferred date, number of guests and your message.
- Cottage bookings: name, address, email, phone, stay dates, party size and notes you add.
- Restaurant reservations: name, email, phone, date, time, party size, seating preference and dietary notes.
- Website usage data (only if you accept cookies): pages viewed, device and approximate location, via Google Analytics and the Meta Pixel.
- Where your visit came from (campaign tags in the link, such as utm_source, and the referring website). We store this for the duration of your visit and add it to your enquiry or booking so we know which channels bring guests. With cookie consent we also keep your first visit source on your device.
Why we use it and on what basis
- To answer your enquiry and to make, confirm and manage your booking or reservation — contract / pre-contractual steps (GDPR Art. 6(1)(b)).
- To send you confirmation and service emails about your booking — contract (Art. 6(1)(b)).
- To keep our legal and accounting records — legal obligation (Art. 6(1)(c)).
- To measure and improve the website and our advertising — your consent via the cookie banner (Art. 6(1)(a)). You can withdraw it at any time.
- When you send a wedding enquiry, we share your email, phone and name in encrypted (hashed) form with Meta to measure which of our ads lead to enquiries — legitimate interest (Art. 6(1)(f)). You can object at any time by emailing us.
Who we share it with
We only use service providers that process data on our behalf:
- Redforts — our booking and property management system (cottage bookings).
- MijnDomein — our email provider (notifications and confirmations).
- Google (Sheets, Analytics) — to organise enquiries and, with your consent, measure website use.
- Meta (Facebook / Instagram) — advertising measurement: with your consent via cookies, and for wedding enquiries in hashed form (see above).
- Vercel — website hosting; and our database provider for restaurant reservations.
International transfers
Some providers are based outside the EU/EEA (for example in the United States). Where this is the case, transfers rely on safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
How long we keep it
Enquiries are kept for as long as needed to handle them and for up to 24 months afterwards. Booking and reservation records are kept for the period required by tax and accounting law. Analytics data follows the retention settings of the providers.
Your rights
You have the right to access, correct or delete your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact us using the details below.
You also have the right to lodge a complaint with the Spanish data protection authority (AEPD, www.aepd.es) or the authority in your country of residence.
Cookies
Details on the cookies we use and how to control them are in our Cookie Policy.
Cookie Policy
