Section 1
Who we are
This privacy statement applies to La Casa Alegría, a privately owned holiday apartment located in Los Alcázares, Murcia, Spain.
La Casa Alegría is the data controller responsible for the processing of personal data as described in this statement. For any privacy-related questions, please contact us at:
La Casa Alegría
Email: [email protected]
Section 2
What personal data we collect
We collect personal data in the following situations:
When you make a booking:
- Name, e-mail address and phone number
- Arrival and departure dates
- Number of guests
- Payment information (processed securely via our booking platform)
For the mandatory Spanish guest registration (SES.HOSPEDAJES):
- Full name of each guest aged 14 and over
- Date of birth
- Nationality
- Identity document type and number
- Document issue date
- Home address and contact details
When you contact us:
- Name and e-mail address
- The content of your message
Section 3
Why we process your data
We process personal data for the following purposes:
- To fulfil your booking — processing your reservation, sending confirmation and managing your stay
- Legal obligation — registering guest identity details with the Spanish authorities via SES.HOSPEDAJES, as required by Royal Decree 933/2021
- Communication — answering your questions and sending practical information about your stay
- Payment processing — handling booking payments securely via our booking platform
We do not use your personal data for marketing purposes and we never sell your data to third parties.
Section 4
Legal basis for processing
We process your personal data on the following legal grounds under the GDPR:
- Contract — processing your booking details is necessary to fulfil the rental agreement
- Legal obligation — registration of guest identity data with SES.HOSPEDAJES is required by Spanish law
- Legitimate interest — responding to your enquiries and managing communication about your stay
Section 5
How long we retain your data
- Booking data — retained for 7 years for tax and administrative purposes
- SES.HOSPEDAJES registration data — retained for 3 years as required by Spanish law (Royal Decree 933/2021)
- Communication data — retained for 2 years after the last contact
After these retention periods, your data is securely deleted.
Section 6
Who we share your data with
We only share your personal data with third parties where necessary:
- Spanish authorities — identity data is reported to the Ministerio del Interior via SES.HOSPEDAJES as required by law
- Booking platform — your booking details are stored and processed via our booking system
- Payment processor — payment data is handled securely via our payment provider; we do not store your payment card details
- Local key holder — your name and arrival details are shared with our local contact person solely for the purpose of managing your check-in
We do not share your data with any other parties.
Section 7
Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — you may request a copy of the personal data we hold about you
- Right to rectification — you may request correction of inaccurate or incomplete data
- Right to erasure — you may request deletion of your data, subject to legal retention obligations
- Right to restriction — you may request that we limit the processing of your data in certain circumstances
- Right to data portability — you may request your data in a structured, machine-readable format
- Right to object — you may object to processing based on legitimate interest
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
If you believe your rights have not been respected, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or the Spanish data protection authority (AEPD, aepd.es).
Section 8
Cookies & website
Our website (lacasa-alegria.com) does not use tracking cookies or analytics tools that collect personal data. The booking widget on our website may use functional cookies to operate the booking process.
Section 9
Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Data submitted via our guest registration form is transmitted securely and delivered directly to our inbox. We do not store submitted form data on public servers.
Section 10
Changes to this statement
We may update this privacy statement from time to time. The most recent version is always available on this page. The date at the top of this page indicates when it was last updated.
Questions about this privacy statement? Please contact us at [email protected].