Privacy Policy

This website, bythewaves.co, is run by Greg Fruba, the owner of the house, who is the controller of your personal data. For anything about your data, write to hello@bythewaves.co.

Booking requests. When you send a booking request, we receive your name, email address, phone number (if you give it), your dates, the number of guests and your message. We use them only to answer your request and, if you book, to arrange your stay. The legal basis is taking steps at your request before a contract (GDPR art. 6(1)(b)).

Email and WhatsApp. If you write to us by email or WhatsApp, we use what you send to reply. WhatsApp is run by WhatsApp Ireland (Meta) under its own privacy policy.

Analytics, only with your consent. If you click Accept in the cookie banner, we use Google Analytics 4 to see how visitors find and use the site: pages viewed, the website or search that brought you here, your device type and approximate location (country or city), and whether you sent a booking request or opened WhatsApp. Google Analytics sets cookies named _ga and _ga_…, which expire after two years. If you click Reject, or do nothing, no analytics code runs and no cookies are set. Your choice itself is stored in your browser, not on our server. The legal basis is your consent (GDPR art. 6(1)(a)); you can change it at any time with "Cookie settings" at the bottom of every page.

We do not use advertising cookies or tracking pixels, and we never sell your data.

Booking requests are deleted automatically from the website's systems 30 days after they are sent.

If you book, the records that the law requires for a stay (for example tax records and the guest registration that Spanish law requires at check-in) are kept for the periods that law sets.

• Hostinger, which hosts this website and its email, and stores booking requests for the period above.
• Google, which delivers our email (Gmail) and, only with your consent, provides Google Analytics.

Google may process data in the United States; transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

You can ask to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format, and you can withdraw your consent at any time. Write to hello@bythewaves.co; we reply within one month.

You can also complain to a data protection authority, in Spain the Agencia Española de Protección de Datos (aepd.es).

The site uses HTTPS. Booking requests are stored outside the public part of the web server, and only the owner can read them.

If this policy changes, the new version is published on this page with a new date.