Last Updated: May 2026

This Privacy Policy applies to the website https://lust4life.info and the rental of holiday homes under the trade name Lust4Life Residences in Lanzarote (Spain) and Malta.

Data Controller:
Andreas Lorenz Geyer
4, Triq il Knisja l-Qadima
MLH5200 Manikata, Malta
VAT Number: MT25349132
Email: [email protected]
Phone: +356 99312025

The processing of your data is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the Malta Data Protection Act (Chapter 586).

1. Categories of Personal Data Collected

We process the following categories of personal data:

• Identification Data: First name, last name, email address, phone number, postal address.
• Booking Data: Stay dates, number of guests, payment information (processed via third parties such as Lodgify, Stripe, or PayPal).
• Technical Data: IP address, browser type, device information (for analytics and security purposes).
• Communication Data: Email content, chat messages (e.g., via Lodgify).

Special categories of personal data (e.g., health data, ethnic origin) are not processed.

2. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): For marketing purposes (e.g., newsletters) and non-essential cookies.
• Contract Performance (Art. 6(1)(b) GDPR): For handling booking requests, contract fulfillment, and payment processing.
• Legitimate Interest (Art. 6(1)(f) GDPR): For website analytics (e.g., Google Analytics) and security measures.

3. Recipients of Your Data

Your personal data may be disclosed to the following recipients:

• Lodgify: For booking management and website hosting. Location: Ireland (EU).
  → Privacy Policy: https://www.lodgify.com/privacy-policy
• Stripe/PayPal: For payment processing. Location: USA/EU.
  → Privacy Policy: https://stripe.com/privacy / https://www.paypal.com/us/webapps/mpp/ua/privacy-full
• Google Analytics: For website usage analysis. Location: USA.
  → Privacy Policy: https://policies.google.com/privacy
• Airbnb/Booking.com: If bookings are made through these platforms. Location: Global.
  → Privacy Policy: https://www.airbnb.com/privacy / https://www.booking.com/content/privacy.html

Note: Some recipients are located outside the EU (e.g., USA). We ensure that appropriate safeguards (e.g., EU Standard Contractual Clauses) are in place for data transfers.

4. Data Retention Periods

Your data will be stored as follows:

• Booking Data: 6 years (due to tax obligations in Malta/Spain).
• Contact Data (e.g., inquiries): Until the inquiry is answered + 1 year (for follow-ups).
• Payment Data: Not stored by us (handled by Stripe/PayPal).
• Cookie Data: See our Cookie Policy.

5. Your Rights

Under the GDPR, you have the following rights:

• Right of Access (Art. 15 GDPR): You may request confirmation of whether we process your data and obtain information about the data we hold.
• Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate data.
• Right to Erasure ("Right to be Forgotten", Art. 17 GDPR): You may request the deletion of your data, unless legal retention obligations apply.
• Right to Restriction of Processing (Art. 18 GDPR): You may request the restriction of processing (e.g., if data is inaccurate).
• Right to Data Portability (Art. 20 GDPR): You may receive your data in a machine-readable format.
• Right to Object (Art. 21 GDPR): You may object to the processing of your data (e.g., for marketing purposes).

To exercise your rights, please send an email to [email protected] with the subject "GDPR Request" and include the following:

• Your first name, last name, and a copy of your ID (or other proof of identity).
• The specific request (e.g., "Deletion of my data").
• Your address for correspondence.

6. Right to Lodge a Complaint

If you believe your rights have been violated, you may file a complaint with the competent supervisory authority:

Information and Data Protection Commissioner (IDPC)
2, Airports Industrial Zone,
Ħal Luqa, LQA 9023, Malta
Email: [email protected]
Website: https://idpc.org.mt

7. Data Security

We implement technical and organizational measures to protect your data from loss, misuse, or unauthorized access, including:

• SSL encryption for all data transmissions.
• Regular security audits.
• Access restrictions for employees.

Despite these measures, we cannot guarantee absolute security on the internet. In the event of a data breach, we will notify you without delay if there is a high risk to your rights and freedoms.

8. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy. Changes will be published on this page. We recommend checking it regularly.

Last Updated: May 2026