Privacy Policy

1. Data controller

Clear Ascend OÜ (company registration no. 17448615), Keskpuiestee 44-49, Kiviõli, 43122, Estonia.

Contact email: reveal email

2. Data we collect

Booking data: full name, phone number, email address, hotel and room number, delivery dates.
Payment data: processed entirely by Stripe. Solset Ibiza does not store any bank card details.
Technical data: IP address, browser type and pages visited, collected anonymously through Vercel Analytics.

3. Purpose and legal basis for processing

Managing your booking and delivery: legal basis — performance of a contract (Art. 6(1)(b) GDPR).
Order-related communications (email and WhatsApp): legal basis — performance of a contract.
Service improvement and anonymous analytics: legal basis — legitimate interest (Art. 6(1)(f) GDPR).

4. Data recipients

Your data may only be shared with the following service providers, and only as far as it is necessary to provide the service:

Stripe, Inc. — payment gateway (USA, covered by the EU standard contractual clauses).
Supabase, Inc. — storage of booking data.
Vercel, Inc. — website hosting.
Resend, Inc. — sending of confirmation emails.

We do not pass your data on to third parties for advertising or commercial purposes.

5. Data retention

Booking data is kept for 2 years from the date of the booking, the period required to comply with legal and commercial obligations. Once that period has passed, the data is securely deleted.

6. Your rights

Under the GDPR, you have the right to:

Access — request a copy of your personal data.
Rectification — have inaccurate data corrected.
Erasure — request the deletion of your data.
Portability — receive your data in a structured format.
Objection and restriction of processing in certain circumstances.

To exercise these rights, write to us at reveal email

We reply within a maximum of 30 days.

If you believe that the processing does not comply with the GDPR, you have the right to lodge a complaint with the competent supervisory authority (in Spain: the Agencia Española de Protección de Datos, AEPD, the Spanish data protection authority).

aepd.es

7. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or accidental destruction. Communications with the website use TLS/HTTPS encryption.