Privacy Policy

Data controller

In compliance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), we inform you about the processing of your personal data.

Controller: [OWNER NAME] Tax ID: [NIF-PLACEHOLDER] Address: Carrer del Puig 353, L'Escala, Girona, Spain Email: canratxa1@gmail.com

Data we collect

We collect the personal data that you voluntarily provide through: • Contact form: name, email and message. • Booking form: name, email, phone, country and notes. • Payment processing: payment data is managed directly by Stripe, Inc., acting as payment processor. We do not store credit card data on our servers.

Purpose of processing

• Managing your enquiries and information requests. • Processing and managing accommodation bookings. • Sending booking confirmations and related communications. • Complying with legal and tax obligations.

Legal basis

• Consent of the data subject when submitting forms. • Execution of a holiday rental contract. • Compliance with applicable legal obligations.

Data recipients

Your data may be disclosed to: • Stripe, Inc.: payment processor (headquartered in the US, with adequate safeguards under the EU-US framework). • Cloudinary Ltd.: image hosting service for property photos. • Competent authorities when required by law.

User rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection by sending an email to canratxa1@gmail.com, attaching a copy of your identity document. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Retention period

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and for the legally established periods.

Security measures

We have adopted the necessary technical and organisational measures to ensure the security of your personal data, including the use of encrypted connections (SSL/TLS) and secure servers.