Privacy Policy

At Villa Feh Bali we take the protection of your personal data seriously. This policy explains how we process the information of people who visit the Website or contact us. It complies with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and, where applicable, Indonesia’s Personal Data Protection Law (UU No. 27/2022).

1. Data controller

• Controller: [OWNER’S FULL NAME OR COMPANY NAME]
• Tax ID (NIF / CIF / NPWP): [TAX IDENTIFICATION NUMBER]
• Address: [OWNER’S REGISTERED ADDRESS]
• Contact email: VillaFehTeam@gmail.com
• Phone / WhatsApp: +34 651 049 106

2. Data we process

• Contact and identification data: name, surname, phone number, email, WhatsApp or WeChat user name.
• Booking data: dates of stay, number of guests, preferences and additional services requested.
• Data required by accommodation regulations: ID card or passport, nationality and date of birth, where Indonesian law requires guests to be registered.
• Payment data: bank transfer receipts or transaction details. We do not store full card numbers; they are handled by the relevant payment provider.
• Browsing data: IP address, device, browser and interaction with the Website, collected through cookies (see Cookie Policy).

3. Purposes and legal basis

4. Retention period

Data is kept for as long as needed to answer the enquiry or carry out the booking. It is then kept for the legal limitation periods for liability and tax obligations (generally up to 6 years). Data processed on the basis of consent is kept until consent is withdrawn.

5. Recipients

We do not share your data with third parties unless legally required (for example, with Indonesian immigration, tax or police authorities). To provide the service, the following may access data, either as processors or as independent providers:

• Messaging and email providers: WhatsApp (Meta Platforms), WeChat (Tencent) and Google (Gmail).
• Web hosting, maintenance (WordPress) and analytics providers (Google Tag Manager / Google Analytics).
• Providers of services you request during your stay (driver, chef, massage therapist, laundry, etc.), receiving only the data strictly necessary.
• Banks and payment providers (Visa, Mastercard, American Express, Alipay or bank transfer).
• Trustindex, to display public Airbnb reviews.

6. International transfers

The property is located in Indonesia, a country without an adequacy decision from the European Commission. Transfers needed to carry out your booking are based on Art. 49(1)(b) GDPR (performance of a contract at the data subject’s request). Some providers (Google, Meta, Tencent or Airbnb) may process data outside the European Economic Area. In those cases appropriate safeguards apply: the EU-US Data Privacy Framework or standard contractual clauses.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent given, by writing to VillaFehTeam@gmail.com and stating which right you wish to exercise. If needed to verify your identity, we may ask you for proof of identity.

If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the competent supervisory authority in your country of residence.

8. Security

We apply reasonable technical and organisational measures to protect your data against loss, misuse, unauthorised access or alteration. The Website uses an encrypted connection (HTTPS).

9. Minors

Bookings must be made by persons aged 18 or over. We do not knowingly collect data from minors, except for accompanying guests who must appear in the guest register; in that case their parent or guardian provides the data.

10. Changes to this policy

We may update this policy to reflect changes in the law or in our services. The version in force will always be the one published on the Website.