Privacy Policy

Data controller

The data controller is Selene Astrid Grande Fraile, operator of Blue Paradise, Spanish tax identification number (NIF): 78859537N. Address: C. Rubens Marichal López, 51, 38004 Santa Cruz de Tenerife, Spain. For privacy enquiries or to exercise your data protection rights, contact info@blueparadisecoliving.com or +34 618 557 334.

Events and Luma

The Events page embeds an event list supplied by Luma. Loading it connects your browser to Luma, which may receive your IP address and browser information and use its own cookies. Event registration takes place on Luma, which shares registration information with the event host. Our website’s statistics and session replay choices do not control Luma’s separate service. See Luma’s privacy policy for its data handling and controls.

• Luma privacy policy

Automated booking decisions

We do not use guest profiles to automatically accept or refuse bookings or to set personalised prices.

Personal data we process

Depending on how you interact with Blue Paradise, we may process identification, contact, booking, payment, arrival, stay, room preference, coworking, communication, invoice, incident, complaint, website usage, and technical data. If legally required for accommodation registration, we may also process identity document and guest register information. We ask you not to send sensitive personal data unless it is necessary for your stay or required by law.

Why and on what legal basis we process data

We process personal data only where we have a lawful basis, including pre-contract steps, performance of a booking or service contract, legal obligations, legitimate interests, consent where required, and vital interests in emergencies.

• Enquiries and booking requests: to answer you, check availability, prepare quotes, and manage the booking process.
• Stays and coworking: to provide accommodation, coworking, community services, cleaning, maintenance, access, safety, support, and guest communications.
• Legal compliance: to meet tax, accounting, consumer, public safety, accommodation registration, immigration, and other legal duties.
• Payments, debt recovery, security, complaints, and claims: to prevent fraud, protect the property and community, manage disputes, and establish or defend legal claims.
• Website operation: to run and secure the website and remember your preferences. With your consent, Google Analytics, Microsoft Clarity and Vercel Web Analytics help us understand use and improve navigation.
• Marketing: to send optional updates only where permitted by law or with consent where required. You can opt out at any time.

Website analytics and preferences

Our legal basis for optional analytics is your consent (Article 6(1)(a) GDPR). You can choose two optional purposes independently in Cookie settings: audience and booking statistics (Google Analytics and Vercel), and heatmaps and session replay (Microsoft Clarity). Both are off until you accept them. Accept all enables both; Reject all disables both; Save preferences applies only your selected purposes. Necessary storage and essential booking functions remain available. Our Google and Clarity integrations deny advertising storage and advertising personalisation.

Booking analytics

If you enable audience and booking statistics, our embedded booking form sends checkout steps and booking creation events to Google Analytics. These can include the booking reference, amount, currency, payment provider, number of nights and guests, and website language. This integration does not send guest names, email addresses, phone numbers or payment card details. A booking creation event does not confirm payment. You can withdraw analytics consent through Cookie settings without affecting your ability to book.

Microsoft Clarity

With your consent, we use Microsoft Clarity to understand how visitors navigate our website and improve its layout and usability. Clarity collects page views, clicks, scrolling, pointer movements, device and browser information, and technical identifiers to produce heatmaps and session replays. These replays reconstruct interactions with our web pages; they are not camera or microphone recordings. Form inputs are masked by Clarity, and we apply additional masking to our booking search form.

• Microsoft Privacy Statement

• Usage data is shared with Microsoft, which processes it under the Microsoft Privacy Statement, including for providing and improving its services. Processing may take place outside the European Economic Area. We send an analytics-only consent signal to Clarity and deny advertising storage.
• Clarity normally retains session replay data for 30 days. Heatmaps and labelled or favourite sessions are retained for up to 9 months. You can withdraw consent for future collection at any time using Cookie settings in the footer, without affecting your access to the website or booking services.

Google Analytics cookies and retention

After you enable audience and booking statistics, Google Analytics sets _ga to distinguish browsers and _ga_1SP89SLNW1 to maintain session state. These are first-party cookies on our website, used by Google to provide analytics. We configure a maximum lifetime of 180 days without extending it on each visit; browsers may shorten it. Withdrawal removes the accessible cookies. Advertising storage, Google signals and advertising personalisation signals are disabled in our website integration.

• Google Analytics cookie information
• Google Analytics data retention
• Google Privacy Policy

• Our GA4 property uses a 14-month retention setting for user-level and event-level data. Google applies deletion according to its retention schedule. This setting does not impose the same limit on standard aggregated reports. The browser-cookie lifetime and the analytics-data retention period are different.

Vercel Web Analytics

We use Vercel Analytics to measure visits and clicks. It loads only when you enable audience and booking statistics in Cookie settings. It does not use analytics cookies. Vercel receives information such as the page, referring page, browser, device and approximate location. You can withdraw this permission at any time in Cookie settings.

• Vercel Web Analytics privacy information

Recipients and processors

We may share personal data with service providers and processors needed to run the business, such as hosting, website analytics, booking technology, payment providers, email or messaging tools, accountants, legal advisers, insurers, maintenance providers, and IT/security providers. We may also share data with public authorities, law enforcement, courts, regulators, tax authorities, or accommodation registration systems where required by law or necessary to protect rights and safety.

International transfers

Vercel hosts this website. With your consent, Google Analytics, Microsoft Clarity and Vercel also receive analytics data. These providers may process data outside the European Economic Area, including in the United States. The provider information linked below explains their transfer arrangements and safeguards. You can request information about the safeguards applicable to your data, including how to obtain a copy, at info@blueparadisecoliving.com.

• Google international data transfers
• Google data processing and transfer terms
• Microsoft Clarity privacy and transfers
• Vercel data processing addendum
• Mangobeds privacy and cookie information

• Google's published transfer information describes mechanisms including the EU-US Data Privacy Framework and standard contractual clauses where applicable. Microsoft's Clarity information describes EU customers contracting with Microsoft Ireland and standard contractual clauses for transfers to Microsoft Corporation in the US. Vercel's published processing addendum includes standard contractual clauses for covered transfers.
• Mangobeds describes processing outside the EEA, including the US, using adequacy decisions or standard contractual clauses where applicable.

Retention

We keep personal data only for as long as necessary for the purpose collected, including to answer enquiries, manage bookings and stays, comply with accounting, tax, accommodation registration and safety obligations, resolve disputes, prevent fraud, and establish or defend legal claims. When data is no longer needed, it will be deleted or anonymised unless a longer legal retention period applies.

Your rights

You may request access, rectification, erasure, restriction, portability, objection, and the right not to be subject to solely automated decisions where those rights apply. You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal. To exercise rights, contact info@blueparadisecoliving.com. We may need to verify your identity before responding.

Complaints and security

You may lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority. Blue Paradise uses reasonable technical and organisational measures to protect personal data, but no website, email, or booking system can be guaranteed to be perfectly secure. If you believe your data has been affected by a security issue, contact us promptly.

Updates

Blue Paradise may update this Privacy Policy when services, providers, legal requirements, or processing activities change. The updated version will be published on this website with a new last updated date.