1. Data controller
The controller of the data collected through this website and through bookings of the apartment is:
- Holder: Juan Carlos Andrés Fajardo
- Tax ID (NIF): 19002204H
- Address: Carrer de Lluís Vives, 2, 2º F, 12530 Burriana (Castellón), Spain
- Email: [email protected]
- Phone: +34 646 760 633
- Tourism registration: VT-43260A
For anything relating to your personal data, write to [email protected].
2. What data we handle
Booking data. Name and surname, email, phone, postal address, country, number of guests and stay dates. Payment details are collected and processed directly by the payment gateway: we never see or store your full card number.
Guest registration data. During check-in, and never before, we collect identification details for everyone staying (ID card or passport, plus the other details required by law). This is a legal obligation, not an option.
Enquiries. If you contact us by email, WhatsApp or phone, we handle whatever details you provide in that message.
Browsing data. The server hosting this site records technical data such as IP address, browser and pages visited, for security and operational purposes.
3. The contact form does not send data to this website
The form on the contact page has no server behind it: pressing “Send message” opens your own email programme with the text already written, and you are the one who sends the email.
This means this website never collects or stores what you type into that form. Your details only reach us once you send the email, and from then on they are handled like any other email enquiry.
4. What we use the data for, and on what legal basis
- Managing your booking and your stay — performance of the accommodation contract.
- Registering guests and reporting the data to the competent authorities — compliance with a legal obligation.
- Issuing invoices and meeting tax and accounting obligations — compliance with a legal obligation.
- Answering your enquiries — your consent when you contact us, or pre-contractual steps if you are asking about a booking.
- Keeping the website secure and running — legitimate interest.
We do not use your data for profiling or automated decision-making, and we will not send you marketing messages unless you specifically ask us to.
5. How long we keep the data
Booking data is kept for the duration of the stay and, afterwards, for the tax and commercial limitation periods required by Spanish law.
Guest registration data is kept for the period set by the applicable regulations and is reported to the competent authorities.
Enquiries that do not lead to a booking are kept for as long as needed to deal with them, plus a reasonable period afterwards in case you write again about the same matter.
6. Who we share the data with
We do not sell your data or pass it to third parties for commercial purposes. Only those providing a service we need in order to run the accommodation have access to it:
- Smoobu GmbH (Germany, European Union) — booking engine and property management.
- Stripe Payments Europe, Ltd. (Ireland, European Union) — payment gateway built into the booking engine, which processes card payments and runs fraud checks.
- Netlify (United States) — hosting for this website.
- Booking.com and Airbnb, only if your booking was made through those platforms and subject to their own policies.
- The competent authorities, in the case of guest registration, and the Spanish tax authorities, as required by law.
7. International transfers
This website is hosted by Netlify, based in the United States, which involves an international transfer of data. That transfer relies on the safeguards provided for by European data protection law, such as the standard contractual clauses approved by the European Commission.
Stripe operates from Ireland but may process payment data in the United States through its parent company, Stripe, Inc., under the same safeguards: standard contractual clauses and its certification under the EU-US Data Privacy Framework.
The other providers listed operate within the European Union.
8. Cookies and browser storage
This website uses no analytics, advertising or tracking cookies of its own. There is no Google Analytics and no social media pixel, which is why you will not see a cookie notice.
We do use local browser storage for one thing only: remembering that you closed the discount notice, so we do not show it to you again. It is a technical preference that stays on your device, is never sent anywhere, and can be removed by clearing your browsing data.
Fonts are hosted on our own server, so loading the site does not generate requests to third-party servers.
There are two pieces of embedded third-party content that may use their own cookies or storage when they load:
- The Smoobu booking engine, on the booking page only. It and its payment gateway set security cookies that are needed to pay safely: Cloudflare bot protection (
cf_clearance,__cf_bm,__cflb), an invisible hCaptcha challenge (hmt_id) and Stripe fraud prevention (m). None of them is used for advertising or analytics. - The OpenStreetMap map, on the home page.
Both are governed by their own privacy policies.
9. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given. Just write to [email protected] saying which right you wish to exercise.
Please note that some data cannot be deleted while a legal obligation to keep it remains, as is the case with guest registration records and tax documentation.
If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency (www.aepd.es).
10. Data security
We apply reasonable technical and organisational measures to protect data against loss, unauthorised access or misuse. The website is served entirely over encrypted HTTPS.
Booking data is managed within the booking engine platform, with access restricted to those responsible for the accommodation.
11. Children’s data
If a minor is staying as part of a booking, their details are provided by the responsible adult making the booking, who confirms they are entitled to do so.
This website is not aimed at children and does not collect children’s data directly.
12. Changes to this policy
This policy may be updated if the services we use or the applicable regulations change. The date of the latest revision appears at the top of the page.