Privacy Policy

The data controller responsible for the processing of your personal data is:

• Alexandra Borghese, Micro-entrepreneur, trading under the name Al'deco & design
• SIRET: 918 648 122 00011
• 30 Avenue de la Plage, 06340 La Trinité, France
• Email: contact@mrconcierge-marbella.com

We may collect the following categories of personal data:

• Identification data: first name, last name.
• Contact details: email address, phone number.
• Booking enquiries: dates, services requested, preferences, and any information you voluntarily share with us via WhatsApp, email or contact form.
• Technical data: IP address, browser type, device, pages visited, referral source, collected via cookies and similar technologies.

Your personal data is processed for the following purposes:

• Responding to your enquiries and providing the requested services — legal basis: performance of a (pre-)contract.
• Operating, securing and improving the website — legal basis: legitimate interest.
• Measuring audience and advertising performance via cookies (Google Analytics, Google Ads, Meta Pixel) — legal basis: your prior consent.
• Complying with our legal and tax obligations — legal basis: legal obligation.

Your data is processed by Alexandra Borghese and her authorised collaborators. It may also be shared with the following categories of recipients, strictly for the purposes listed above:

• Independent service providers fulfilling your booking (villa owners, yacht charter operators, drivers, beauty professionals).
• Hosting and technical providers (Vercel Inc.).
• Analytics and advertising providers (Google LLC, Meta Platforms Ireland Ltd.) — only with your consent.
• Public authorities, where required by law.

We do not sell your personal data. Some recipients may be located outside the European Union (e.g. United States). In such cases, transfers are protected by appropriate safeguards such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

Your data is kept only for as long as necessary for the purposes for which it was collected:

• Enquiries that did not result in a booking: up to 12 months from the last contact.
• Client data: for the duration of the relationship and up to 5 years after the last service.
• Accounting and tax records: 10 years (legal obligation).
• Cookies and analytics data: up to 13 months.

Under the GDPR, you have the right to:

• Access your data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Request erasure of your data (“right to be forgotten”).
• Restrict or object to the processing.
• Receive your data in a portable format.
• Withdraw your consent at any time, where processing is based on consent.
• Define directives for the fate of your data after death (under French law).

To exercise any of these rights, please write to us at contact@mrconcierge-marbella.com or by post at the address above. We may ask for proof of identity.

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL) at www.cnil.fr.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction — including encrypted connections (HTTPS), restricted access and trusted infrastructure providers.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version is always available on this page.