Last updated: 30 September 2026

​

Cortijo El Aguilón is committed to protecting the privacy and personal data of its guests, prospective guests and website users.

​

This Privacy Policy explains how personal data is collected, used and protected in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights, and other applicable data protection legislation.

​

1. Data controller

The controller responsible for the processing of personal data is:

Belinda Caroline Braithwaite
Trading name: Cortijo El Aguilón
NIF: X1409594Q
Address: CN 340, Km 68.3, 11319 Tarifa, Cádiz, Spain
Email: info@elaguilon.com
Telephone: +34 664 307 247
Tourist registration number: CR/CA/00050

​

2. Personal data we may process

Depending on how you interact with us, we may process information including:

* your name and surname;
* postal address;
* email address;
* telephone number;
* booking dates;
* number and composition of guests;
* accommodation preferences;
* booking and transaction information;
* communications exchanged with us;
* billing information;
* information required to comply with legal obligations applicable to accommodation providers;
* technical information relating to your use of the website, where permitted by law and according to your cookie preferences; and
* other information that you voluntarily provide to us.

​

Payment card information may be processed by the relevant payment or booking service provider. Cortijo El Aguilón will only process such payment information to the extent necessary and technically available to it.

​

3. Purposes and legal bases

Managing enquiries

When you contact us by email, telephone or through a website contact facility, we process the information you provide in order to respond to your enquiry.

Depending on the nature of the enquiry, processing may be based on your request for pre-contractual measures, our legitimate interest in responding to communications, or another applicable legal basis.

​

Managing bookings and providing accommodation

We process personal data necessary to:

* process and confirm reservations;
* administer payments;
* communicate with guests;
* manage arrival and departure;
* provide accommodation and requested services;
* manage changes and cancellations; and
* deal with matters arising from the stay.

​

The principal legal basis is the performance of a contract or taking steps at the guest’s request prior to entering into a contract.

​

Bookings may be made through Amenitiz or directly with Cortijo El Aguilón by email or telephone.

Where a booking is received by email or telephone, the relevant information may be entered into Amenitiz so that the reservation can be administered through our booking management system.

​

Compliance with legal obligations

We may process and retain personal data where necessary to comply with legal obligations applicable to us, including tax, accounting, consumer, tourism and guest-registration requirements.

The legal basis for such processing is compliance with a legal obligation.

​

Marketing communications

Where permitted by applicable law, we may send information about Cortijo El Aguilón, offers, services or other commercial communications.

​

Where consent is required, such communications will only be sent after obtaining the appropriate consent.

You may withdraw your consent or unsubscribe from marketing communications at any time without affecting the lawfulness of processing carried out before withdrawal.

​

Website analytics and advertising

Subject to your cookie choices and applicable law, we may use analytics and advertising technologies to understand how visitors use our website, measure the effectiveness of advertising and improve our services.

​

Non-essential analytics or advertising technologies requiring consent will not be used on the basis of consent until the required consent has been obtained.

Further information is provided in our Cookie Policy.

​

4. Sources of personal data

We generally obtain personal data:

* directly from you;
* through our website;
* when you contact us by telephone or email;
* through the Amenitiz booking platform;
* through booking or travel platforms where applicable; or
* from another person making a booking on your behalf.

​

5. Recipients and service providers

Personal data may be made available to service providers where necessary for the provision and administration of our services.

​

These may include, where applicable:

* Amenitiz and associated booking technology providers;
* website hosting and technology providers, including Wix;
* payment service providers;
* professional advisers and accounting providers;
* email and communications providers;
* analytics and advertising providers, where the relevant consent or other lawful basis exists; and
* public authorities where disclosure is required by law.

​

Service providers processing personal data on our behalf are required to process such information in accordance with applicable data protection requirements and the relevant contractual arrangements.

​

6. International data transfers

Some technology providers may process personal data outside the European Economic Area.

Where an international transfer of personal data takes place, appropriate safeguards required by applicable data protection legislation will be used, where necessary. These may include an adequacy decision of the European Commission, Standard Contractual Clauses or another legally recognised transfer mechanism.

Further details may be requested by contacting us at info@elaguilon.com.

​

7. Retention

Personal data will be retained only for as long as reasonably necessary for the purpose for which it was collected and thereafter for any period required to comply with applicable legal obligations or to establish, exercise or defend legal claims.

Booking, invoicing and accounting information may therefore be retained for the periods required under applicable legislation.

Enquiry data that does not result in a booking will not be retained indefinitely.

Marketing information processed on the basis of consent will generally be processed until consent is withdrawn or the information is no longer required, subject to any minimal information that may need to be retained to record an opt-out.

​

8. Your rights

Subject to the conditions established by applicable law, you may exercise your rights to:

* access your personal data;
* rectify inaccurate or incomplete personal data;
* request erasure of your personal data;
* restrict processing;
* object to processing;
* request data portability where applicable

​

​