Privacy & Data Protection Policy (GDPR)
We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

Data Controller
The data controller is the owner of the property located at Calle Las Naciones 10, Benalmádena, Spain.

What Data We Collect
We may collect personal information such as name, address, email address, telephone number, booking details, and identification document details (passport or ID), as well as technical data such as IP address when using our website.

Purpose of Processing
Personal data is processed for the following purposes: – Managing reservations and guest communication – Complying with legal obligations, including mandatory guest registration with Spanish authorities – Processing payments via booking platforms or payment providers – Improving our services and website functionality

Legal Basis
Data is processed based on contractual necessity, legal obligations, and legitimate business interests.

Data Sharing
Personal data may be shared with: – Spanish police authorities, as required by law – Booking platforms (e.g. Airbnb, Booking.com) – Property management and software providers such as Smoobu We do not sell personal data to third parties.

Data Retention
Guest registration data is stored for the period required by Spanish law (currently up to 3 years). Other personal data is stored only as long as necessary for the purposes stated above.

Your Rights
Guests have the right to access, correct, or request deletion of their personal data where legally permitted, and to object to certain processing activities. Requests can be made via the contact details provided on this website.

Complaints
Guests have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).

Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access or misuse.