Privacy Policy
What personal data this website collects, why, who else handles it, and how to exercise your rights under the GDPR.
1. Who is responsible for your data
- Company
- IBOSSIM SERVICES IBIZA SL
- Trading as
- Singular Villas & Yachts Ibiza
- Tax number (CIF)
- B56752165
- Registered address
- C/ de la Barra 1, esc. 5, planta 1, puerta 5, 07800 Eivissa (Ibiza), Illes Balears, Spain
- Telephone
- +34 636 755 324
- Website
- www.singularvillasibiza.com
- Commercial Registry
- Registro Mercantil de Eivissa (Ibiza), volume 402, folio 32, sheet IB-20384, entry 1
No data protection officer has been appointed. Under article 37 of the GDPR one is not required for an organisation of this size and activity, which does not carry out large-scale monitoring or process special categories of data on a large scale.
2. What we collect, why, and on what legal basis
| Where it comes from | What is collected | Why | Legal basis | Kept for |
|---|---|---|---|---|
| Enquiry and contact forms | Name, email, telephone, the property or vessel concerned, and whatever you write in the message | To answer you and to prepare a proposal | Steps taken at your request before a contract (art. 6.1.b GDPR) | While the enquiry is live, then up to three years in case you come back |
| AI Concierge conversations | The messages you write, the language of the page, a session identifier, and any name or telephone number you give it | To answer in real time and to hand a request to a person when one is needed | Steps taken at your request (art. 6.1.b) and our legitimate interest in improving the assistant (art. 6.1.f) | Up to twelve months |
| Private collection requests | Name and WhatsApp number, with the dates and group size you gave | To search properties that are not published and send you a private selection | Steps taken at your request (art. 6.1.b) | Up to three years |
| Audience measurement | Identifiers stored on your device, pages viewed, approximate location derived from IP | To understand how the site is used | Your consent (art. 6.1.a), given through the cookie banner | See the cookie policy |
| Server and security logs | IP address, time, browser, and the request made | To keep the site running, to limit abusive traffic and to diagnose faults | Our legitimate interest in the security of the service (art. 6.1.f) | Short technical retention by our providers |
Everything asked for on a form is needed to answer you. If you would rather not use a form, write to the email address above.
3. The AI Concierge
The assistant on this site is built on Google's Gemini model. What you type is sent to Google to generate a reply, together with the instructions we have written for it. It reads our own villa, yacht and availability data to answer; it does not have access to other guests' enquiries.
The assistant does not make any decision that produces legal effects for you, and it does not profile you. It proposes properties and hands the conversation to a person when a request needs one. Article 22 of the GDPR is not engaged.
Conversations are stored so that we can follow up an enquiry and correct the assistant when it answers badly. Do not type anything into it that you would not put in an email — in particular no card numbers, identity documents or health information.
4. Who else handles your data
We use the following providers, each under a data processing agreement, and only for the purposes described:
| Provider | What it does | Where it processes |
|---|---|---|
| Supabase | Database and file storage: enquiries, conversations, property data | European Union (Ireland) |
| Vercel | Hosting and delivery of the site | United States |
| Google (Gemini) | Generates the AI Concierge replies | United States |
| Google (Analytics) | Audience measurement, only after consent | United States |
| Google (Maps) | The map shown on a property page, only after consent | United States |
| Resend | Sends the notification emails an enquiry generates | United States |
| Sentry | Reports technical errors so faults can be fixed | European Union (Germany) |
| Upstash | Rate limiting, to stop abusive traffic | Cloud service |
| Invenio Homes | Villa data, live availability and the private collection search | Spain |
Where you choose to continue a conversation on WhatsApp, that exchange is governed by Meta's own terms and privacy policy.
We also pass on what is strictly needed to the owner of a property or the operator of a vessel once you decide to go ahead with a stay or a charter, because they are the ones who provide it.
5. Transfers outside the European Economic Area
The providers marked above as processing in the United States receive data outside the EEA. Those transfers rely on the European Commission's standard contractual clauses and, where the provider is certified, on the EU–US Data Privacy Framework. You may ask us for a copy of the safeguards in place.
6. Your rights
You may ask for access to your data, for it to be corrected or deleted, for its processing to be restricted, for it to be sent to another controller, and you may object to processing based on our legitimate interest. Where processing rests on your consent, you may withdraw it at any time without that affecting what was done before.
Write to info@singularvillasibiza.com stating what you want. We answer within one month. We may ask you to identify yourself first.
If you are not satisfied with how we handle it, you may complain to the Spanish Data Protection Agency, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
7. Security
The site is served over HTTPS. Access to the administration area requires an account and is restricted by role. Enquiry and conversation records are readable only by the company's own administrators.
8. Children
This site is not aimed at children, and we do not knowingly collect data from anyone under fourteen.
9. Changes
If this policy changes materially we will say so on the site. The date at the foot of this page is the date of the version you are reading.
Last reviewed 16 September 2026.