Legal
Last updated: January 2026
At Papergameflick, your privacy is a cornerstone of our hospitality. This Privacy Policy explains in detail how we collect, use, store, and protect personal information when you interact with our website, concierge teams, and partner resorts across Spain. By using Papergameflick.com you consent to the practices described below.
We collect personal data you voluntarily provide via inquiry and reservation forms, including but not limited to: full name, email address, telephone number, country of residence, travel preferences, dietary requirements, accessibility needs, payment-related contact information, and any additional details you choose to share to personalise your stay.
We may also automatically collect technical data such as IP address, browser type, device identifiers, operating system, referring URL, pages visited, session duration, and approximate geolocation through cookies and similar technologies.
When you communicate with our concierge via email, phone, or messaging platforms, we retain transcripts and notes solely to deliver a coherent, personalised service across your journey.
Your data is used to: respond to inquiries; facilitate bookings with partner resorts; personalise itineraries, dining and wellness recommendations; coordinate transfers and ancillary VIP services; deliver curated communications regarding offers, seasonal experiences, and editorial content (with your consent); comply with legal, accounting, and tax obligations; prevent fraud; and continuously improve our services through analytics.
We process personal data on the following legal bases: (a) performance of a contract, when fulfilling a reservation; (b) legitimate interests, such as service improvement and security; (c) consent, for marketing communications and non-essential cookies; and (d) compliance with legal obligations under Spanish and EU law.
We share necessary booking information with our partner resorts, transfer providers, restaurants, yacht operators, and wellness facilities strictly to fulfil your requested services. We may also share data with trusted technical providers (hosting, email, analytics) bound by confidentiality and data-processing agreements. We never sell, rent, or trade your personal data to third-party advertisers.
In limited circumstances, we may disclose data when required by Spanish or EU law, court order, or to protect our legal rights.
Where data is transferred outside the European Economic Area, we ensure adequate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
We use essential cookies necessary for site functionality and, with your consent, analytics and preference cookies to improve user experience. Detailed information is available in our Cookies Policy. You may control or withdraw cookie consent via your browser settings at any time.
We implement industry-standard administrative, technical, and physical safeguards including encryption (HTTPS/TLS), access controls, regular security audits, secure data storage, and staff confidentiality training. However, no online transmission is fully secure, and we cannot guarantee absolute security of data shared electronically.
You have the right to: access your personal data; rectify inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; request data portability; withdraw consent at any time; and lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, www.aepd.es).
To exercise these rights, please contact us via our Contact page. We respond to verified requests within 30 days.
We retain personal data only as long as necessary for the purposes outlined above or as required by applicable law (typically 6 years for accounting records under Spanish tax law). Marketing data is retained until you withdraw consent. Inquiry records not converted into bookings are deleted or anonymised within 24 months.
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child without parental consent, we will promptly delete it.
Where you have opted in, we may send curated newsletters, seasonal offers, and exclusive event invitations. You may unsubscribe at any time using the link in our emails or by contacting our concierge team directly.
Our website may contain links to third-party sites (e.g., partner resort websites or map services). Papergameflick is not responsible for the privacy practices of these external sites, and we encourage you to review their privacy policies.
We may update this Privacy Policy from time to time to reflect changes in legislation, technology, or our services. Any material changes will be reflected on this page with a revised effective date. Continued use of our services after updates constitutes acceptance of the revised policy.
The data controller for personal data collected via Papergameflick.com is Papergameflick. For all privacy-related inquiries, including requests to exercise your rights, please contact our Data Protection team via the Contact page.