Privacy Policy

The data controller for personal data collected through this website is Es Fangar Collection (Finca Es Fangar, 07200 Felanitx, Balearic Islands, Spain), operated as an Isle of Mallorca · Azul Privé venture. All requests concerning personal data should be addressed to legal@esfangar.com.

• Booking data (name, email, phone, dates, party size, preferences) — to deliver your villa stay, cellar tasting, S/Y Reesle outing, or estate experience.
• Payment data (handled directly by our payment processor CentralPay; we never store full card numbers).
• Shipping data for winery orders — used solely to deliver the wines.
• Communication data received through the digital concierge or contact form — to reply to you.
• Site usage data (strictly necessary cookies and, if you consent, analytics cookies) — to maintain your session, remember language preference, and understand aggregate site usage.

Processing is based on contract performance for your booking (art. 6.1.b GDPR), your consent for newsletters and analytics cookies (art. 6.1.a GDPR), and compliance with legal obligations (tax and accounting, art. 6.1.c GDPR). We retain booking records for six years under the Spanish Commercial Code, accounting records for the legally required period, and analytics cookies for the period set out in the cookies policy.

We share data only with processors acting on our behalf under written contract:

• CentralPay — payment processing.
• Manus — web hosting and database services.
• Resend — transactional email delivery (when active).
• Bluebnc Yachting — operation of the S/Y Reesle charter.

We never sell personal data. Any international transfer is performed under appropriate safeguards (European Commission Standard Contractual Clauses).

You may at any time exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent. Please write to legal@esfangar.com attaching proof of identity. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).