Skip to main content

Legal

Privacy Policy

Last updated: April 2025

This privacy policy explains how Casa Sol y Playa ("we", "us", "our") collects, uses, and protects your personal data when you visit casasolyplaya.eu or contact us directly. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).

1. Data controller

The data controller responsible for your personal data is the owner of Casa Sol y Playa, reachable at info@casasolyplaya.eu.

2. What data we collect

We may collect the following personal data:

  • Contact enquiries: name, email address, and message content when you use the contact form or email us directly.
  • Booking data: name, email, phone number, arrival/departure dates, and payment details when you make a reservation through our booking system (processed by Tokeet / BookSafely).
  • Usage data: anonymised analytics data such as pages visited and approximate location (country/region), collected via Cloudflare analytics. No cookies are placed for analytics.

3. How we use your data

  • To respond to your enquiries and provide customer support.
  • To process and manage your booking and stay.
  • To comply with legal obligations (e.g. guest registration requirements under Spanish law).
  • To improve our website using aggregated, anonymised analytics.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal basis for processing

  • Contract performance: processing necessary to fulfil your booking.
  • Legitimate interests: responding to enquiries, maintaining website security.
  • Legal obligation: guest registration as required by Spanish authorities.
  • Consent: where you have explicitly provided consent (e.g. contact form submission).

5. Third-party services

We use the following third-party services which may process your data:

6. Data retention

Booking records are retained for 5 years as required by Spanish tax law. Contact enquiries that do not result in a booking are deleted after 12 months. Anonymised analytics data is retained by Cloudflare in accordance with their policies.

7. Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your data (where no legal obligation to retain it exists).
  • Restrict or object to processing.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@casasolyplaya.eu. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es.

8. Cookies

This website uses only strictly necessary technical cookies (session management) and no third-party tracking or advertising cookies. See our Cookie Policy for details.

9. Security

This website is served over HTTPS. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

10. Changes to this policy

We may update this policy from time to time. The current version is always published at casasolyplaya.eu/privacy-policy/.