Privacy policy

GUTU Y DOMINGUEZ ASOCIADOS SL
NIF B76759893
Calle Viñatigo 42, Amarilla Golf, 38639 San Miguel de Abona, Santa Cruz de Tenerife, España
domtenerifevv@gmail.com · +34 672 826 541

You can reach us through any of these channels about your data.

• Booking a stay — name, email, phone, dates, number of guests and, where the law requires it, identity document. Legal basis: performance of the contract and legal obligation (traveller registration).
• Excursion, car or extras request — name, contact, date and the details needed to deliver the service. Basis: performance of the contract.
• Owner enquiry form — name, contact, area and property type. Basis: pre-contractual steps at your request.
• WhatsApp, email or phone messages — the content of the conversation, so we can help you. Basis: legitimate interest in replying.
• DOM Coins programme — email or phone, stays and points history. Basis: consent given when you join.
• Measurement, only if you accept cookies — Google Analytics 4 (pages viewed, device and approximate location, IP anonymised) and the Meta pixel (whether visits from our Facebook and Instagram ad campaigns end in an enquiry or a booking). Basis: consent, which you can withdraw at any time from the cookie policy. Meta processes the pixel data under its own privacy policy.

Booking data is kept for the duration of the relationship and afterwards for the limitation period of tax and accounting obligations (6 years). Traveller-registration data for the period set by law. Enquiries that do not become bookings, one year. Loyalty data until you unsubscribe.

Only with those needed to deliver the service, always under a data-processing agreement:

• Uplisting Ltd (United Kingdom) — booking engine and stay management.
• Stripe Payments Europe Ltd (Ireland) — card payments and fraud prevention.
• Cloudflare Inc. (United States (SCCs)) — site delivery and security.
• Google Ireland Ltd (Ireland) — the map, only when you tap “Show interactive map” or accept cookies; Google sign-in in the DOM Coins area; and, only if you accept, analytics (Google Analytics 4).
• Meta Platforms Ireland Ltd (Ireland) — WhatsApp Business, only if you write to us.
• ACUMBAMAIL, S.L.U. (Spain) — transactional emails: the link to your guest app and the car-hire confirmation.

Telegram Messenger Inc. (outside the EEA; EU representative: European Data Protection Office, Brussels; data of EEA accounts stored in the Netherlands) carries our team's internal notifications about owner enquiries and car-hire requests, with the name and contact details you give us. Telegram processes this data under its own privacy policy (telegram.org/privacy), not under a data-processing agreement with us.

And where the law obliges us: public authorities and law enforcement (traveller registration). We do not sell your data. Apart from the Meta pixel, which only runs if you accept, we do not share it for advertising.

Loading anything from another server sends that server your IP address and basic browser data, as with any web request. These are all the services our pages contact, and when:

When the page loads

• Stripe (Stripe Payments Europe Ltd) — card payment on the property page, and fraud prevention. Stripe.js loads with the page so the card form is ready; card details go straight to Stripe and we never see them. Pages: property pages with booking on the page. Servers: js.stripe.com, m.stripe.com, m.stripe.network, api.stripe.com. Cookies: __stripe_mid (1 year, on our domain) — fraud prevention: recognises the device across payments; __stripe_sid (30 minutes, on our domain) — fraud prevention for the current visit; m (400 days, on m.stripe.com) — Stripe's fraud-prevention device signal.
• Trustindex — shows our guest reviews. Pages: home page. Servers: cdn.trustindex.io. Cookies: this site sets none; the provider may use its own cookies under its own policy.
• Uplisting image host (Amazon CloudFront) — photos of our homes, served by our booking-system provider. Pages: home, property pages, car hire and list your property. Servers: djts5lg061pqs.cloudfront.net. Cookies: this site sets none; the provider may use its own cookies under its own policy.
• Google Sign-In (Google Ireland Ltd) — the “Sign in with Google” button; Google receives your account details only if you use it. Pages: DOM Coins area (my-cabinet). Servers: accounts.google.com, ssl.gstatic.com. Cookies: g_state (180 days, on our domain) — remembers whether you closed or used the Google sign-in prompt.

Only if you tap it

• Google Maps (Google Ireland Ltd) — the map of the area. Nothing is requested from Google until you tap “Show interactive map” or accept cookies; until then you see a map image served from this site (© OpenStreetMap). From then on Google's own privacy policy applies. Pages: property pages. Servers: www.google.com, maps.googleapis.com, maps.gstatic.com, fonts.googleapis.com, fonts.gstatic.com. Cookies: this site sets none; the provider may use its own cookies under its own policy.

Only if you accept measurement cookies

• Google Analytics 4 (Google Ireland Ltd) — how many people visit, from where and which pages they view, with IP anonymisation; it cannot tell us who you are. Pages: every page. Servers: www.googletagmanager.com, *.analytics.google.com, *.google-analytics.com, stats.g.doubleclick.net. Cookies: _ga (400 days, on our domain) — tells one browser from another, without identifying you; _ga_* (400 days, on our domain) — keeps the state of the current visit.
• Meta pixel (Meta Platforms Ireland Ltd) — measures whether visits from our Facebook and Instagram campaigns end in an enquiry or a booking. Pages: every page. Servers: connect.facebook.net, www.facebook.com. Cookies: _fbp (90 days, on our domain) — tells one browser from another for that measurement; _fbc (90 days, on our domain) — set only when you arrive from one of our Meta ads (fbclid link), to credit that visit.

You may request access, rectification, erasure, restriction, portability and objection by writing to domtenerifevv@gmail.com from the address you booked with, or proving your identity. We reply within one month. If you believe we have not handled your request properly you may complain to the Spanish Data Protection Agency (aepd.es).

We do not collect children's data directly: a booking is always made by an adult. We apply reasonable technical and organisational measures; the site runs entirely over HTTPS and card data is handled by Stripe — we never see or store it.