Explore Directory

Privacy Policy

Effective Date: January 1, 2026 • Last Revised: February 2026 • Data Protection Authority: Spanish AEPD / EU GDPR

At chipperpalhouse, accessible via chipperpalhouse.casa (operated legally by Chipper Pal House Mediterranean Hospitality S.L., Company No. ES-B87492104, registered at Passeig de Gràcia 92, 4th Floor, 08008 Barcelona, Spain), we maintain the highest ethical standards regarding personal privacy. This Privacy Policy details our operational protocols, transparency obligations, and legal adherence to the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the Spanish Ley Orgánica 3/2018 (LOPDGDD), and applicable provisions of the California Consumer Privacy Act (CCPA/CPRA).

1. Identity of the Data Controller

The legal entity responsible for the processing of any personal information gathered on this website is:

  • Corporate Name: Chipper Pal House Mediterranean Hospitality S.L.
  • Registration Code: ES-B87492104
  • Headquarters: Passeig de Gràcia 92, 4th Floor, 08008 Barcelona, Spain
  • Data Protection Officer (DPO): [email protected]
  • General Concierge Contact: [email protected]

2. Fundamental Operational Nature: Independent Editorial Directory

A central tenet of our operations is that chipperpalhouse is an independent hotel editorial journal and architectural directory. We do NOT operate as an Online Travel Agency (OTA), booking engine, payment processor, or travel merchant.

When you browse our profiles of Hotel Santa Caterina, Marbella Club Hotel, Villa Dubrovnik, Domes Miramare, or La Réserve de Beaulieu, you are reading editorial evaluations. Clicking any external outbound link (e.g., "Visit Official Website" or "Book Direct") redirects your browser directly to the respective hotel’s official secure server. We do not collect, process, or store credit card numbers, passport data, room reservation IDs, or transaction records. All reservation data is handled directly by each property under their own independent privacy frameworks.

3. Categories of Data Collected

We only process personal data that you intentionally provide or that is strictly necessary for the technical operation of the website:

  • Voluntary Communications Data: When you complete our Editorial Concierge contact form, we collect your full name, email address, chosen subject matter, and your text inquiry. This data is used solely to respond to your editorial query.
  • Technical & Telemetry Data: When loading our pages, our servers automatically log non-personally identifiable server telemetry, including masked IP addresses (anonymized at the subnet level), browser user-agent, operating system, referring URL, time stamps, and basic interaction metrics.
  • Cookie State Data: A small local storage key (chipper_cookie_consent) is stored locally on your device to remember whether you accepted or dismissed our cookie consent notification.

4. Legal Bases for Processing Under GDPR

We process personal data only when lawful under Article 6 of the EU GDPR:

  • Consent (Art. 6(1)(a)): Applicable when you proactively submit an inquiry through our contact page or opt into analytical measurement cookies.
  • Legitimate Interests (Art. 6(1)(f)): To maintain web application security, prevent distributed denial-of-service (DDoS) attacks, ensure mobile layout compatibility, and optimize editorial readability.
  • Legal Obligation (Art. 6(1)(c)): To maintain business accounting and statutory records required by Spanish and European regulatory statutes.

5. Third-Party Service Providers and Data Transfers

We partner with vetted, industry-leading technical infrastructure providers that uphold strict EU Standard Contractual Clauses (SCCs) and GDPR compliance. We do not sell, rent, or lease your personal information to third parties, advertising brokers, or telemarketers.

Our contracted infrastructure processors include European cloud hosting facilities, encrypted DNS routing networks, and privacy-first web performance monitoring services. Any data transferred outside the European Economic Area (EEA) is protected by recognized adequacy decisions or ratified SCCs.

6. Data Retention Schedules

We retain personal data only for as long as strictly necessary to fulfill the explicit purposes for which it was collected:

  • Editorial Inquiries: Retained for a maximum of twenty-four (24) months to facilitate ongoing communications, after which emails and message records are permanently deleted.
  • Server Telemetry Logs: Automatically purged or permanently aggregated and anonymized after thirty (30) days.
  • Local Storage Consent Flags: Maintained in your local browser until cleared manually or expired after twelve (12) months.

7. Your Rights Under European and International Privacy Laws

Under GDPR (Articles 15-22) and corresponding California CCPA statutes, you hold enforceable rights regarding your personal information:

  • Right of Access: You may request formal confirmation and copies of any personal data we hold regarding you.
  • Right to Rectification: You may demand correction of inaccurate or incomplete contact records.
  • Right to Erasure ("Right to be Forgotten"): You may request the prompt deletion of personal information where retention is no longer justified.
  • Right to Restriction of Processing: You may request that your data be isolated or frozen during a dispute.
  • Right to Data Portability: You may obtain your provided data in a structured, commonly used, machine-readable format.
  • Right to Object: You may object at any time to data processing carried out under legitimate interest justifications.
  • Right to Lodge a Complaint: You maintain the unconditional right to file a formal complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es, or your regional European supervisory authority.

To exercise any of these statutory rights, please send an authenticated email to our Data Protection Officer at [email protected]. We resolve all inquiries within thirty (30) calendar days at zero fee to the consumer.

8. Minors and Children’s Privacy

Our services and editorial directories are oriented toward adult leisure travelers and architectural enthusiasts. We do not knowingly solicit or collect personal data from individuals under sixteen (16) years of age. If we become aware that personal information of a minor has been transmitted without verified parental authorization, we purge that data from our systems immediately.

9. Amendments to this Privacy Policy

We reserve the right to revise this Privacy Policy periodically to reflect changes in judicial precedents, European regulations, or our digital services. Updates will be published on this page with an updated "Last Revised" timestamp. We encourage users to inspect this document regularly.