Privacy

Who handles your data

David Castellà, tax ID 52626358N, at C/ Josep Camprecios 1, 08950 Esplugues de Llobregat (Barcelona), Spain, trading as FREEDOLIA. Write to hello@freedolia.com about anything to do with your data, including deleting it.

We have not appointed a data protection officer. Write to that address and a person answers.

What we collect, and what for

Only what you write in the contact form: your name, the hotel or group, the country, how many properties you run, the rooms in the main one, your email, and your phone and lock brand if you fill them in.

We use it to reply to you and prepare that conversation. Nothing else, unless you tick the box on the form: then we also write to you now and then with news. That box is a separate permission, it comes unticked, and removing it changes nothing else: we still reply to you all the same.

We count visits without cookies and without knowing who you are, we build no profiles and we run no advertising.

On what legal basis

To reply, because you asked us to: steps prior to a possible contract (article 6.1.b GDPR).

To keep a record of the commercial conversation while it is alive, on our legitimate interest in knowing who we have spoken to and about what (article 6.1.f).

For how long

If we do not end up working together, one year from the last contact, then it is deleted.

If we do work together, for as long as accounting and tax rules require.

Who else sees it

The form goes through our own server first, which runs on Cloudflare's network: there we check you are not a bot and, only if that passes, it is written into a database hosted in Ireland, inside the European Union, run by our provider Supabase as a data processor.

The site is served by Cloudflare, which sees the address you request it from, like any web server. Since 17 September 2026 it also runs the anti-bot check (Turnstile) — for which it receives your IP and signals from your browser — and, because our server sits on its network, what you write passes through it on the way to the database.

And there is nobody else. Everything this page loads — the video, the images, the typefaces — comes from our own domain, so no other server learns that you visited. Until 17 September 2026 the typefaces came from Google, which therefore saw your IP address every time you opened a page; we have served them ourselves since.

We do not sell or hand these details to anyone.

Cookies: there are none

This site sets no analytics or advertising cookies. That is why no window asks you for permission.

The anti-bot check sets no cookie either: that is an option of Cloudflare's own widget and we have it set that way on purpose. The day that changed, this page would have to change first.

The only thing stored in your browser is the language you pick, so we do not ask again. That never reaches us.

There is one exception, and it is only for us: FREEDOLIA has an internal screen on this site to handle the contacts from the form. Whoever signs in there stores their session in their own browser, because otherwise they would have to sign in on every page. If you do not sign in, nothing is stored but the language.

We do count how many visits each page gets, with Cloudflare's analytics: it sets no cookies, it does not fingerprint your browser, and it does not let us know who you are. We see that a page was viewed and from which country; we do not see who viewed it.

What you can demand of us

Access your data, correct it, delete it, object to the processing, restrict it, and take it elsewhere. Write to hello@freedolia.com and we do it.

If you think we have got it wrong, you can complain to the Spanish Data Protection Agency (www.aepd.es). We would rather you told us first, but it is your right and you do not have to come through us.

If you are a hotel guest

If you got here because a hotel sent you a link to check in, we do not handle that data on our own account: the hotel is the controller and we act only on its instructions. Ask the hotel for access or deletion.

We keep no copy and no photograph of your identity document. The image is processed there and then and discarded; what remains are the traveller-register fields the law requires the hotel to hold.