Legal
Privacy Policy
Montefrio Ventures, S.L. ("we", "us") takes the protection of your personal data seriously. This Privacy Policy explains what personal data we process when you visit www.cortijo-bujio.com or send us a reservation request, on what legal basis, and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR/RGPD) and Spanish Organic Law 3/2018 (LOPDGDD).
Montefrio Ventures, S.L.
Cortijo Bujio, Montefrío, 18270 Granada, Spain
Managing Directors: Dr. Gamal Moukabary and Robert Moukabary
E-mail: cortijo.bujio1877@gmail.com
When you use our reservation-request form or contact us by e-mail, we process the data you provide — such as your name, e-mail address, telephone number, requested dates, number of guests and your message — solely in order to respond to your enquiry and, where applicable, to prepare and manage a reservation of a room or of the entire Cortijo. Providing this data is voluntary, but without it we cannot process your request.
Legal basis: the performance of pre-contractual measures and the contract (Art. 6(1)(b) GDPR) and, where relevant, your consent (Art. 6(1)(a) GDPR).
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Netlify processes technical connection data (e.g. IP address, browser type, date and time of the request) in server log files, which is necessary to deliver the website securely and reliably. Reservation requests sent through the form are transmitted and stored via Netlify Forms so that we can receive and reply to them.
Legal basis: our legitimate interest in a secure, functional website and in receiving enquiries (Art. 6(1)(f) GDPR). Where data is transferred to the USA, this takes place on the basis of the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
With your consent, we use Microsoft Clarity, a service of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Clarity uses cookies and similar technologies to record — in anonymised form — interactions with our website, such as mouse movements, clicks, scrolling and aggregated session replays and heatmaps. This helps us understand how the site is used and improve it. Clarity does not use this data to personally identify you, and we do not use it for advertising.
Legal basis: your consent (Art. 6(1)(a) GDPR), which you give via our cookie banner and can withdraw at any time with effect for the future through the "Cookie settings" link in the footer. Data may be processed in the EU and the USA on the basis of appropriate safeguards. More information: Microsoft Privacy Statement at privacy.microsoft.com.
A cookie is a small text file stored on your device. We distinguish:
Strictly necessary cookies — used only to store your cookie choice and to enable basic functions of the site. These do not require consent (Art. 6(1)(f) GDPR).
Statistics cookies (Microsoft Clarity) — set only after you actively consent. You can accept or refuse them in the cookie banner, and change your choice at any time via "Cookie settings" in the footer. If you refuse, no Clarity cookies are set and the analytics script is not loaded.
You can also delete cookies and configure your browser to block them; some functions of the site may then be limited.
Your data is accessed only by persons and service providers who need it to fulfil the purposes above — in particular our hosting/form provider (Netlify) and, subject to consent, our analytics provider (Microsoft). These providers act as processors on our behalf under data-processing agreements, or as independent controllers where required by law. We do not sell your personal data.
We keep enquiry and reservation data only for as long as necessary to handle your request and any resulting booking, and thereafter for the periods required by applicable commercial and tax law. Analytics data collected via Clarity is retained by Microsoft for its standard storage period and then deleted or anonymised. You may ask us to delete your data at any time (see your rights below).
You have the right to access your personal data and to obtain its rectification or erasure, to restrict or object to its processing, and to data portability. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise these rights, contact us at cortijo.bujio1877@gmail.com.
You also have the right to lodge a complaint with a supervisory authority. In Spain this is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
We may update this Privacy Policy to reflect changes in our services or in legal requirements. The current version is always published on this page. Last updated: July 2026.