Privacy Policy

This page explains what happens to your personal information when you use this website. It is short because we collect very little.

Who is responsible

De La Finca ApS (CVR 45580695), Vesterbrogade 164, 1800 Frederiksberg C, Denmark, is the data controller. Write to delafincahouse@gmail.com with any question about your data, including any of the requests listed further down.

What we collect, and why

When you send a booking enquiry, we receive the name, email address, event date, number of guests and message you typed into the form. We use them to answer you and to arrange the event — nothing else. The legal basis is Article 6(1)(b) of the GDPR: steps taken at your request before entering into an agreement.

When you simply visit, our hosting provider records the usual server information — IP address, browser, page requested, time — in its access logs. We do not read these logs page by page; they exist so the site can be kept running and secure. The legal basis is Article 6(1)(f), our legitimate interest in operating the site.

To count visits, we use Vercel Web Analytics. For each page view it records the page, the site you came from, your approximate location (country and city), your device type, operating system and browser, and the time. It sets no cookie and stores nothing in your browser: a visit is recognised by a hash of the request, which is discarded after 24 hours, and your IP address is not kept. We see only totals — never a list of visitors. The legal basis is Article 6(1)(f), our legitimate interest in knowing which parts of the site are read.

We do not use cookies, advertising or tracking across other sites. See the Cookie Policy for the detail.

How long we keep it

Booking enquiries stay in our inbox for 12 months after the event or the last message about it, whichever is later, and are then deleted. Server logs are kept for a short period by our hosting provider and are then rotated out.

Who else sees it

Two companies process data on our behalf, under contract, and may not use it for their own purposes:

• Resend (Resend Inc., United States) delivers our email. Your enquiry passes through their systems on its way to us, and our reply passes back through them. Delivery is currently routed via Amazon SES infrastructure located outside the EU/EEA, which means your name, email address and message leave the EEA in transit. The transfer relies on the European Commission’s Standard Contractual Clauses. We are moving this to EU-hosted infrastructure.
• Vercel (Vercel Inc., United States) hosts the site, keeps the access logs described above and provides the visitor statistics.

Nobody else receives your information. We do not sell it, rent it, or share it for advertising.

Your rights

You may ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, or send it to you in a portable format. You may also object to our processing it. Write to delafincahouse@gmail.com and we will answer within a month.

If you think we are handling your data wrongly, you can complain to the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk.

Changes

If this policy changes, the date at the top of the page changes with it.