Privacy Policy

Last updated: 28 September 2026

At Moana Retreats SL, we are committed to protecting your privacy and ensuring that your personal data is handled responsibly, transparently and securely.

This Privacy Policy explains how we collect, use and protect personal information when you visit moanaprop.com, contact us, request information about our properties or services, or otherwise interact with us.

1. Data Controller

The controller responsible for the processing of your personal data is:

MOANA RETREATS SL
Tax ID (NIF/CIF): B70652904
Registered address: Calle Agua 21, Esc. 2, 1º 4, 29012 Málaga, Spain
Website: moanaprop.com
Email: hola@moanaprop.com

2. What Personal Data We Collect

Depending on how you use our website or contact us, we may collect the following categories of personal data:

• Identification details, such as your name.
• Contact details, including your email address and telephone number.
• Information provided through contact, enquiry or property-related forms.
• Information about the property, accommodation or service you are interested in.
• Any information you voluntarily provide when communicating with us.
• Technical and browsing information, such as your IP address, browser type, device information, pages visited and interactions with the website.
• Cookie and analytics information, where you have provided consent when required.

We do not intentionally request special categories of personal data through this website.

3. Why We Process Your Personal Data

We may process your personal data for the following purposes:

Responding to enquiries

To respond to questions, information requests or enquiries submitted through our website, email, telephone or other communication channels.

The legal basis for this processing is the implementation of pre-contractual measures at your request and, where appropriate, our legitimate interest in responding to communications addressed to us.

Managing requests relating to properties and services

To provide information about our properties, accommodation, real estate projects or other services, and to manage requests from potential clients, guests, partners or interested parties.

Where your request may lead to a contractual relationship, the legal basis is the performance of pre-contractual measures or a contract.

Managing existing business relationships

Where you become a client, supplier, partner or other contractual party, we may process your information in order to manage the corresponding commercial, contractual, administrative and accounting relationship.

The legal basis is the performance of the relevant contract and compliance with applicable legal obligations.

Commercial communications

Where you have expressly agreed to receive them, we may use your contact details to send you information, news, updates or commercial communications relating to Moana Retreats and its projects or services.

The legal basis for this processing is your consent.

You may withdraw your consent at any time without affecting the lawfulness of any processing carried out before its withdrawal.

Website operation, security and analytics

We may process technical information necessary to ensure the proper functioning, stability and security of the website.

Where analytics, advertising or other non-essential cookies are used, the corresponding information will only be processed after obtaining your consent, where required by law.

Further information can be found in our Cookie Policy.

4. How Long We Keep Your Data

Personal data will only be retained for as long as necessary to fulfil the purpose for which it was collected.

In particular:

• Data relating to enquiries will be retained for the time necessary to respond to and manage the request.
• Data relating to contractual or commercial relationships will be retained for the duration of the relationship and subsequently for the periods required by applicable tax, accounting, commercial or other legal obligations.
• Data processed for marketing purposes will be retained until you withdraw your consent or request that such communications cease.
• Cookie-related information will be retained according to the periods indicated in the corresponding Cookie Policy.

Once personal data is no longer required for its original purpose, it may be securely blocked and retained where necessary to comply with legal obligations or to establish, exercise or defend legal claims.

5. Who May Receive Your Personal Data

As a general rule, we do not sell or disclose your personal data to third parties.

However, certain data may be accessible to service providers that assist us in operating our business and website, such as:

• Website hosting and maintenance providers.
• IT and cybersecurity providers.
• Email and communication service providers.
• Analytics providers.
• Property management or booking technology providers, where applicable.
• Professional advisers such as accountants, lawyers or consultants.
• Public authorities where disclosure is required by law.

Where third parties process personal data on our behalf, they will act as data processors and will be subject to the appropriate contractual and confidentiality obligations.

Personal data may also be disclosed where this is necessary to comply with a legal obligation or a valid request from a competent public authority.

6. International Data Transfers

Some technology or digital service providers used by this website may process information outside the European Economic Area.

Where international transfers of personal data take place, Moana Retreats will ensure that appropriate safeguards are in place in accordance with applicable data protection legislation, including, where applicable, adequacy decisions issued by the European Commission, Standard Contractual Clauses or other legally recognised safeguards.

Where a transfer relies on your consent, you will be informed accordingly where required.

7. Cookies and Similar Technologies

This website may use cookies and similar technologies for technical, functional, analytical or other purposes.

Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law.

Non-essential cookies, including analytics or advertising cookies, will only be activated after obtaining your consent through the website’s cookie management system.

You may change or withdraw your cookie preferences at any time through the cookie settings available on the website.

For further information, please refer to our Cookie Policy.

8. Your Data Protection Rights

Under applicable data protection legislation, you have the right to:

• Access your personal data and obtain information about how it is being processed.
• Rectify inaccurate or incomplete personal data.
• Erase your personal data where the applicable legal requirements are met.
• Restrict the processing of your personal data in certain circumstances.
• Object to the processing of your personal data where processing is based on legitimate interests.
• Data portability, where legally applicable.
• Withdraw your consent at any time where processing is based on consent.
• Not be subject to a decision based solely on automated processing, including profiling, where this produces legal effects or similarly significantly affects you, subject to the exceptions provided by law.

To exercise any of these rights, you may contact us at:

hola@moanaprop.com

Please indicate which right you wish to exercise and provide sufficient information to allow us to identify and respond to your request. Where necessary, we may request additional information to verify your identity.

Exercising your data protection rights is free of charge, except in cases where requests are manifestly unfounded or excessive, as provided by applicable legislation.

9. Right to Lodge a Complaint

If you believe that your personal data has not been processed in accordance with applicable data protection legislation, you have the right to lodge a complaint with the relevant supervisory authority.

In Spain, the competent authority is:

Agencia Española de Protección de Datos (AEPD)
www.aepd.es

We encourage you to contact us first so that we can attempt to resolve any concern relating to the processing of your personal data.

10. Security of Your Personal Data

Moana Retreats implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or other unlawful forms of processing.

However, no system connected to the Internet can guarantee absolute security. Users are therefore encouraged to take appropriate precautions when transmitting information online.

11. Third-Party Websites

Our website may contain links to websites, platforms or services operated by third parties.

Moana Retreats is not responsible for the privacy practices, content or security of external websites. We recommend reviewing the privacy policies of those third parties before providing them with personal information.

12. Data Relating to Third Parties

If you provide us with personal data relating to another person, you are responsible for ensuring that you are entitled to provide that information and, where necessary, that the person concerned has been informed about how their data may be processed.

Please avoid providing personal information about third parties unless it is necessary for your request.

13. Children

This website and the services presented through it are not specifically directed at children.

We do not knowingly collect personal data from minors through the website without the appropriate legal authorisation. If we become aware that personal information has been provided by a minor in circumstances where parental or guardian consent is legally required, we may delete that information or take the appropriate steps to obtain valid authorisation.

14. Changes to This Privacy Policy

Moana Retreats may update this Privacy Policy from time to time to reflect changes to the website, our services, the way personal data is processed or applicable legislation.

The latest version will always be available on this website and will indicate the date of the most recent update.

15. Applicable Legislation

The processing of personal data through this website is governed, among other applicable legislation, by:

• Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).
• Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
• Other applicable Spanish and European legislation relating to privacy, electronic communications and information society services.