Last updated: 7 October 2026.
Bellevila, a trading name of Alex Puigdemont Da Silva, NIF 41001532F, Av. Can Baró 21, 3º 3ª, 08024 Barcelona, Spain. Privacy contact email: info@bellevila.com.
We process your data to create, publish and maintain your website, manage the subscription and billing, and communicate with you about the service. Legal basis: performance of the contract (art. 6.1.b GDPR) and, where applicable, your consent (art. 6.1.a) and legitimate interest in the security of the service (art. 6.1.f).
To provide the service we rely on providers acting as processors, grouped by categories:
Some providers may process data outside the European Economic Area; in that case the appropriate safeguards provided for by the GDPR apply (standard contractual clauses or equivalent).
We keep your data for as long as the contractual relationship lasts and, after its termination, for the legally required periods (tax, commercial). The data of an expired demo is deleted within approximately 30 days.
You can exercise the rights of access, rectification, erasure, objection, restriction and portability, as well as withdraw your consent, by writing to the privacy contact email. You may also lodge a complaint with the competent supervisory authority if you consider that the processing does not comply with the regulations.
We apply reasonable technical and organisational measures to protect your data.
We store in your browser only what the site needs to work: your language, whether you prefer light or dark mode, and your own cookie decision. That identifies nobody and never leaves your device.
Anything else, such as measuring how the site is used or knowing which ad brought you here, is only switched on if you accept it in the cookie notice; until then no third-party tool is loaded and nothing else is stored in your browser. The only thing that happens without that permission is that our own server adds the visit to some anonymous counters, without cookies and without any data that identifies you (section 10). You can change or withdraw that decision whenever you like from the Cookies link in the footer, where you will also find the detail of what is stored in each case.
The three tools that depend on that decision are explained one by one in sections 9, 10 and 11.
To see where people get stuck and improve the site we use Microsoft Clarity, a Microsoft tool that records how the page is used (where you move the pointer, how far you scroll, where you click and which pages you go through) and builds heatmaps out of those visits. It is not a survey and it is not a profile: it is the replay of a visit, with no name on it.
What you type is not recorded. Microsoft always masks the content of form fields and drop-down menus, in every one of its recording modes, and in the mode it applies by default it also masks what it classifies as sensitive, namely numbers and email addresses. On our side we have not marked any element of the site to be recorded unmasked.
Clarity is only loaded if you accept usage measurement in the cookie notice. Until then nothing is requested from Microsoft and none of its cookies are stored. If you accept, it stores the cookies _clck and _clsk in your browser, plus one more on its own domain, so that the same visit is not counted twice. If you later withdraw your permission, those cookies are deleted and the recording stops.
The data from this tool is processed by Bellevila and Microsoft. You can read Microsoft's privacy information at privacy.microsoft.com.
On our own server we record the steps of the journey up to signing up: arriving at the site, viewing the home page or another page, using the calculator, opening the breakdown of a plan, clicking the button to create the site, reaching the sign-up form, pasting the link of your rental listing and submitting the form. It tells us at which step people stop and which channels and ads bring us sign-ups.
Without your permission, only a counter. Even if you do not accept usage measurement, your browser tells our server about those steps and the server adds one to a counter for the day. That counter only stores the day, the step, the page, the type of device (mobile, tablet or computer) and the channel you came through, with the campaign and the ad if the link carried them in its tags. It does not store your IP address, your browser, the time or any identifier, so it cannot tell who you are or link two visits. To carry the channel from one page to the next we do not use cookies: it travels in the tab itself and in the link you click, and it disappears when you close the tab.
With your permission for usage measurement, each step is also recorded with the date and time and with a random session number generated by your browser that is erased when you close the tab, and when you leave a page we record how far you scrolled and the last section you saw. With that same permission we store our own cookie sl_at1 in your browser, which for 90 days remembers how you arrived the first time (the link code, its campaign tags, the ad click identifier if there was one, the domain of the page you came from and the first page you opened), so that we know which channel really brought each sign-up. It is not renewed by later visits and, if you withdraw your permission, it is deleted.
If you sign up, we store with your sign-up that origin (the one of your first visit, if the cookie exists, and the one of the visit in which you signed up), your cookie decision at that moment, the type of device and the steps you complete (email verified, move to payment, active trial, first payment, cancellation or termination), to manage your sign-up and to know which channels bring us customers (art. 6.1.b and 6.1.f GDPR). If you had accepted usage measurement, we also store the identifier that this measurement leaves in your browser, and if you had accepted advertising, the advertising identifiers described in section 12.
The counters and the entries are kept for 24 months and then deleted automatically. We also still keep the earlier six-step log (viewing the home page, using the calculator, opening the sign-up fee breakdown, clicking the button to create the site, reaching the form and submitting it), which is only sent with your permission for usage measurement, does not store your IP address or your browser and is kept for ninety days.
The site has a chat for questions before you subscribe. It is provided by an external supplier, Gnosari, and it runs on a component of theirs loaded from app.gnosari.com.
The chat is not in the cookie notice because it is not loaded in advance. The bubble you see is drawn by us and asks nothing of anybody; when you press it we explain what is about to happen and ask your permission for that specific service. The supplier's component is only loaded if you accept.
Once you accept, the supplier stores information in your browser and the conversation is recorded in their systems, where we can read it in order to answer you and to improve our replies. Bear in mind that whatever you write in the chat stays there: it is not the place for health data, identity documents or card details.
You can withdraw your permission whenever you like from the Chat: withdraw permission link in the footer, which appears as soon as you have granted it. The legal basis is your consent (art. 6.1.a GDPR).
If you accept the advertising category in the cookie notice, the website loads the pixel of Meta Platforms Ireland Limited, the company that runs Facebook and Instagram. It tells us whether one of our ads on those networks brought someone who then used the calculator, started the sign-up, started the free trial or became a paying customer, and it lets Meta show the ads to people more likely to be interested. If you do not accept that category, the pixel is not loaded and nothing is sent to Meta, neither from your browser nor from our server.
With your permission, your browser sends Meta the page you visit, your IP address, technical browser data and the _fbp and _fbc cookies, which the pixel itself stores in your browser, together with these events: viewing a page (PageView), viewing the sign-up form or an offer page (ViewContent), using the calculator, starting the sign-up (Lead), completing it (CompleteRegistration) and starting the free trial (StartTrial).
So that those events are not lost if your browser blocks the pixel, our server also sends them to Meta through its Conversions API: PageView, ViewContent, Lead, CompleteRegistration and StartTrial, plus Purchase when your first fee is charged, with its amount and currency. Each submission carries your IP address and technical browser data (except those triggered by the payment, which have no browser behind them), the page address without parameters, those same cookies if they exist or the click identifier of the ad you came through, the chosen plan and the origin of the visit. Meta discards the duplicate between browser and server.
Your email, turned into an irreversible code. In the events for starting and completing the sign-up, starting the trial and the first payment, our server also sends your email address turned into an irreversible code (SHA-256 hash, in lower case and without spaces) and a customer identifier encoded in the same way, so that Meta can recognise which user the event belongs to. Meta does not receive your email in clear text. We do not send Meta your name, your phone number or anything else you type in the form. All of this only happens if you accepted advertising: if you signed up without that permission, none of these events goes to Meta.
For the collection and transmission of these data to Meta, Bellevila and Meta are joint controllers; what Meta does with them afterwards is decided by Meta as controller and explained in its privacy policy (facebook.com/privacy/policy). Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time from the Cookies link in the footer. Meta may process the data outside the European Economic Area with the safeguards provided for in the GDPR.
To make Bellevila known to those who may need it, we show ads on Facebook and Instagram to holders and managers of tourist accommodation and to companies in the sector, based on a list of email addresses.