Information pursuant to Regulation (EU) 2016/679 (GDPR) and LO 3/2018 (LOPDGDD).
[TO COMPLETE BY OWNERS: operator legal name, NIF/CIF, registered address, contact email, phone]
Data controller
[OPERATOR NAME], NIF [NIF], [ADDRESS], [EMAIL].
What we process and why
Booking data (name, surname, email, phone, country, stay dates, payment reference): to conclude and manage your accommodation contract (Art. 6(1)(b) GDPR). Kept for the legal retention periods applicable to contractual and tax records.
Guest registration data (identity document details of guests aged 14+): collected at or before check-in because Spanish law (Royal Decree 933/2021) obliges accommodation providers to report guest data to the Ministry of the Interior (SES.Hospedajes) within 24 hours of check-in (Art. 6(1)(c) GDPR — legal obligation). Retained for 3 years as required.
Contact form / email inquiries: to answer your inquiry (Art. 6(1)(b) GDPR, pre-contractual steps).
Cookies and similar technologies: only with your consent — see the Cookie Policy.
Recipients
The owner of the property you book; payment providers (PayPal, Stripe) for payment processing; our hosting provider; the Ministry of the Interior (SES.Hospedajes) where legally required. No transfers outside the EEA except those inherent to the payment providers under their safeguards.
Your rights
You may request access, rectification, erasure, restriction, portability and object by writing to [EMAIL]. You may complain to the Spanish supervisory authority (AEPD, aepd.es).