Privacy Policy

1. Who we are

This Privacy Policy applies to the website eiragalicia.com and the services provided by Ahangama Love Sociedad Limitada ("The Eira", "we", "us", or "our"), a company registered under Spanish law with registered office in Nigrán, Pontevedra, Galicia, Spain.

We are the data controller for the personal data we collect and process in connection with this website and our services. If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@eiragalicia.com.

2. What data we collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number — when you submit an enquiry, book a call, or contact us directly.
• Professional information: company name, job title, team size — to help us understand your needs and provide relevant services.
• Booking data: dates, group size, service preferences — when you make or enquire about a reservation.
• Usage data: browser type, IP address, pages visited, time spent — collected automatically when you use our website.

3. How we use your data

We use the personal data we collect for the following purposes:

• To respond to your enquiries and communicate with you about our services.
• To manage bookings and coordinate your offsite or retreat at The Eira.
• To send relevant information about services, offers, and updates — where you have given consent to receive such communications.
• To comply with our legal and regulatory obligations under Spanish and European Union law.
• To improve our website and services by analysing usage patterns (in aggregated, anonymised form).

4. Legal basis for processing

Under the General Data Protection Regulation (GDPR) and Spanish data protection law (Ley Orgánica 3/2018, LOPDGDD), we process your personal data on the following legal bases:

• Contractual necessity — to perform a contract with you or take steps before entering into one.
• Legitimate interests — to operate and improve our business, provided this does not override your rights.
• Consent — for marketing communications, where required.
• Legal obligation — to comply with applicable laws and regulations.

5. Sharing your data

We do not sell your personal data. We share your data with a small number of trusted third-party service providers who act as data processors on our behalf:

• Formspree (Formspree Inc., USA) — processes submissions from the contact form and forwards them to our email. Data in transit is encrypted; Formspree retains submissions on its servers until we delete them. Formspree privacy policy.
• Cal.com — scheduling tool used for discovery calls, if you choose to book one.
• Cloud hosting and email providers — to serve this website and deliver our correspondence with you.

All processors are required to handle your data in accordance with GDPR and only on our documented instructions. Where a processor is located outside the European Economic Area, we rely on Standard Contractual Clauses or equivalent safeguards.

We may also disclose your information where required by law, court order, or regulatory authority in Spain or the European Union.

6. Cookies

Our website does not currently use analytics, advertising, or tracking cookies. Your browser may store strictly necessary cookies required for the site to function. If we introduce analytics or similar technologies in future, this policy will be updated and, where required, consent will be requested.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. When data is no longer needed, we securely delete or anonymise it.

8. Your rights

Under GDPR and Spanish data protection law, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request that we limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: at any time, where processing is based on consent.

To exercise any of these rights, please contact us at hello@eiragalicia.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — aepd.es).

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us: