On this page we explain what personal data we process, why, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

What data we process and why

How long we keep your data

Enquiry data is kept for as long as needed to reply to you. Booking and invoicing data is kept for the periods required by tax and commercial law. Guest register data is kept for the period set by Royal Decree 933/2021.

Who we share it with

We do not sell your data. We only share it with the Spanish State Security Forces (guest register) and the Tax Authority when the law requires it. To provide our service we use providers that process data on our behalf, such as the Amenitiz booking engine, our web hosting and email provider, and WhatsApp (Meta) if you choose to contact us that way. If you book through a platform such as Booking.com, that platform sends us the booking details and also applies its own privacy policy.

Your rights

You can ask to access, rectify or erase your data, to restrict or object to its processing and to data portability, and you can withdraw any consent you have given at any time. Write to us at reservas@casaruralparadareal.com or at the postal address above. If you feel we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).