Updated: 10 November 2026. This notice describes the current technical setup. A final legal review is still pending.

The campsite and current contact route

This notice applies to costabrava-camping.com. The campsite presented here is operated by CAMPING MAS SANT JOSEP S.L., Ctra. de Sta. Cristina a Platja d’Aro, Km. 2, 17246 Sta. Cristina d’Aro, Girona, Spain. The allocation of data protection responsibilities for this website and its current form handling is still being clarified. Receiving messages technically does not, by itself, establish a particular legal role.

Camping contact details: +34 972 835 108, info@yellohvillage-mas-sant-josep.com; massantjosepcamping@gmail.com.

Form enquiries are currently sent first to the recipient mailbox configured for this website. For questions about this transmission route, you can use the contact details above. Responsibility for handling enquiries and any onward sharing with the campsite still need to be agreed.

Accessing and operating the website

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit, the server processes technical connection data, including your IP address, the page requested, the time and browser information. This enables the website to be delivered and helps detect and resolve faults and attacks.

Provider details are available in STRATO’s legal notice. Specific contractual responsibilities and retention procedures for this installation are not inferred from general provider information.

Contact forms, email and WordPress storage

The forms are used to handle your enquiry. First name, last name, email address and message are required; a phone number is optional. Technical details such as submission time, the page visited, IP address and browser information are also processed.

The current setup emails your enquiry to the configured WEB.DE recipient mailbox and also saves it as a submission in the WordPress database of this STRATO-hosted website. Deleting an email does not automatically delete the WordPress copy, or vice versa. Enquiries are currently not sent directly to the campsite’s contact mailbox.

The recipient mailbox is hosted by WEB.DE, a service of 1&1 Mail & Media GmbH. The provider processes message content and technical delivery data to operate email services. See the WEB.DE privacy notice. The specific contract type and allocation of data protection roles are not presented here as settled. Submitting a form does not subscribe you to a newsletter.

The deletion process and responsible person for WordPress submissions, the WEB.DE mailbox and additional backups still need to be confirmed. We therefore state no fixed retention period for these copies and do not claim automatic deletion. Their purpose, any statutory obligations and the actual need for each copy must inform that process. The legal bases for the current interim organisational arrangement also require final review.

Spam protection with Cloudflare Turnstile

The twelve public contact and homepage forms use Cloudflare Turnstile, provided by Cloudflare, Inc. It loads when these form pages are opened and helps detect automated abuse. Cloudflare receives technical connection and browser signals, including IP address and information about the browser and website visited.

When a form is submitted, our server validates the verification token with Cloudflare. This request contains the token and technical service key, not your name, email address or message. An enquiry is not sent unless verification succeeds. Analytics and debug features of the WordPress plugin are disabled.

Cloudflare also describes its own processing to improve bot detection. Its purposes, roles and international transfers are explained in the Turnstile Privacy Addendum and Cloudflare Privacy Policy. The agreements, legal bases and assessment required for this website remain subject to final review; no blanket assurance of legal compliance or exemption from consent is given.

Language selection and font files

The website may use the language set in your browser to open an available language version that matches it. Your IP address is not used to determine your location for this purpose. You can switch to another language version yourself using the language selector.

Our font files are loaded from costabrava-camping.com. Loading these font files does not establish a connection to Google Fonts. External content that you enable separately loads its own resources as described by the relevant provider.

Cookies and privacy settings

We use our own cookies to remember language choices and your decisions about optional content. Cookies are small pieces of information that your browser stores for a website. We also use temporary storage limited to the browser session. Consent on this website is managed using Complianz.

The following overview describes our configured storage settings. Not every entry is necessarily set during every visit.

  • Language selection: wp-wpml_current_language and _icl_visitor_lang_js store the language in use or prevent repeated language redirects. Duration: 24 hours.
  • Language redirect: wpml_browser_redirect_test checks whether cookies work in the browser. Duration: browser session.
  • Category choices: cmplz_functional, cmplz_preferences, cmplz_statistics and cmplz_marketing store the selection status for each category. Duration: up to 365 days.
  • Individual services: cmplz_consented_services stores your choices for external services. Duration: up to 365 days.
  • Policy version and banner: cmplz_policy_id and cmplz_banner-status associate your selection with the policy version and remember the banner status. Duration: up to 365 days.
  • Technical cache: cmplz_cookie_data in Session Storage holds the technical list used for cookie cleanup. Duration: browser session.
  • Emoji support: wpEmojiSettingsSupports in Session Storage stores the result of the WordPress test for emoji support in your browser. Duration: browser session.

The names statistics and marketing are categories used by the consent tool. They do not mean that we use our own analytics or advertising trackers. Google services that you enable separately may use their own storage.

Remembering your chosen language and privacy settings allows us to provide these functions. The legal basis for the associated processing of personal data is Article 6(1)(f) GDPR. Storage access that is necessary to provide a function you have expressly requested falls within the exemption under Article 22.2 of Spain’s LSSI. Optional external media is loaded on the basis of your consent under Article 22.2 LSSI and Article 6(1)(a) GDPR.

You can reject optional content and change your choices at any time through Privacy settings. You can also delete or block cookies in your browser; doing so may remove saved settings.

Optional videos and maps

You can enable YouTube videos and Google Maps on this website. For users in the European Economic Area and Switzerland, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Your browser loads the relevant service only after you give your consent. Google then receives data including your IP address and technical browser information. Google may use cookies and similar storage and may associate activities with your Google account, depending on whether you are signed in and on your account settings. We embed these services to display videos and help you find your way using the map. The legal basis is your consent under Article 6(1)(a) GDPR and Article 22.2 LSSI for the associated storage access.

Google also processes data outside the European Economic Area, including in the USA. Google describes its use of the EU-US Data Privacy Framework and, where necessary, Standard Contractual Clauses. Further information is available in the Google privacy policy and its information about international data transfers.

The storage Google uses and the length of time it retains data depend on the service, how it is used and your settings. Google provides details in its cookie information and data retention information.

You can withdraw your consent for the future through Privacy settings. After the page is reloaded, the relevant services are blocked again. Withdrawal does not undo earlier transfers or automatically delete data already stored in your browser or by Google. You can use the rest of the website without these external media services.

Checking availability and booking with Yelloh! Village

The availability enquiry starts only when you initiate a search. Our website first checks your selection. Your browser then sends the travel dates, accommodation category, language and campsite identifier to the eSeason Resa/Webcamp search service at thelisresa.webcamp.fr. The service is part of the offering of Septeo Hospitality Solutions, formerly Sequoiasoft.

The search service also processes the technical data required for the connection, including your IP address. Contact form details and our website’s cookies are not included in this search request. The purpose is to provide the offers you have requested. The legal basis is Article 6(1)(b) GDPR for the steps you request before entering into a contract.

Our availability module does not store offers permanently. Travel dates may, however, appear in the URL requested and therefore in your browser history or technical access logs. Provider information is available in eSeason’s privacy information and the technical provider’s data processing annex.

If you then select Reserve with Yelloh, you are taken to booking.yellohvillage.com with your selected offer, dates, language and campsite identifier. The reservation then continues in accordance with the booking service’s information. Yelloh! Village names EUROPE PLEIN AIR SA, 496 Rue des Marchands, ZA Terre de Camargue, Aigues-Mortes, France, as the controller for its platform. Processing there is explained in the Yelloh! Village privacy policy.

Technical backups

Backups may contain saved form submissions and are used to restore data after technical failures or data loss. The website database, mailbox and additional project or migration backups are separate storage locations. A provider’s general retention period does not establish a deletion deadline for every copy. The specific retention and deletion procedures for this setup still need to be defined or confirmed.

The social media references in the footer are links to the respective services. You visit the other provider’s service only when you follow such a link. That provider processes the connection in accordance with its own privacy information. A linked profile is not an embedded social media feed.

Your data protection rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation.

You can withdraw consent at any time for the future. This does not affect the lawfulness of processing carried out before withdrawal. For enquiries about processing by the campsite, please contact massantjosepcamping@gmail.com or use the contact details above.

You also have the right to lodge a complaint with a competent data protection supervisory authority, in particular Spain’s Agencia Española de Protección de Datos (AEPD).

For questions about the current form handling, you can use the contact details above. Final organisational responsibility for fulfilling your rights still needs to be allocated.