Data controller

Purposes

Manage bookings and payments; answer enquiries; send necessary booking communications; manage check-in and checkout; issue invoices and comply with legal duties; maintain website security and operation; and, when the chatbot is active, handle the conversation started by the user.

Legal basis

Performance of a contract or pre-contractual measures for bookings; legal obligations; legitimate interests for security and service management; and consent where a specific feature requires it.

Data processed

Identification and contact data, booking and stay details, communications, invoicing information and, during check-in, data and documents legally required for the stay.

Recipients

Data may be processed by necessary providers for hosting, email, payments, invoicing, customer support and technology services. When a booking is paid through Stripe or PayPal, payment may take place on the relevant provider systems.

Retention

Data is retained for as long as necessary to manage the contractual relationship and comply with legal duties. Check-in document images are stored privately for the period configured in the system and automatically deleted according to that setting.

Your rights

You may request access, rectification, erasure, objection, restriction and, where applicable, portability. You may also withdraw consent where processing is based on consent and lodge a complaint with the Spanish Data Protection Authority (AEPD).

Privacy contact

calafigueraapartamentos@gmail.com