Your privacy, handled with care

This website (lasabinahomes.com) is operated by the owners of the holiday apartment registered with the Junta de Andalucía under Registro de Turismo de Andalucía VUT/MA/97039 (referred to in this policy as "we", "us" or "the host"). For all matters concerning your personal data, you can reach us at info@lasabinahomes.com.

We act as the data controller for the personal data described below. Some processing is carried out on our behalf by carefully selected service providers, who act as our data processors under written agreements.

We process the following categories of personal data:

• Booking enquiry data — name, email, phone number, dates of stay, number of guests, and any message you choose to send us.
• Contact form data — the information you voluntarily submit when you write to us.
• Booking & stay data — confirmation, payment status, dates, signed rental agreement, and correspondence relating to your stay.
• Mandatory guest registration data — full name, identity document type and number, nationality, date of birth, address, and signature, as required by Spanish Royal Decree 933/2021 and Order INT/1922/2003.
• Technical data — IP address, browser type, device type, approximate location and pages visited, collected automatically through cookies and similar technologies.

We do not intentionally collect special categories of data (health, religion, political opinions, etc.). Please do not include such information in messages to us.

• To respond to your enquiry and quote availability.
• To prepare and manage your booking, including the rental agreement and check-in.
• To comply with Spanish tourist accommodation, guest registration and tax obligations.
• To send essential communications about your stay (arrival information, house rules, emergency contacts).
• To handle accounting, invoicing and our legal obligations.
• To improve the website, prevent fraud and keep our systems secure.

We do not use your data for automated decision-making or profiling.

Under Article 6 of the GDPR we rely on the following legal grounds:

• Consent — when you submit a contact or enquiry form.
• Performance of a contract — to manage your booking and stay once confirmed.
• Legal obligation — to register guests with the Spanish authorities and meet tax and accounting duties.
• Legitimate interest — to keep our website secure, prevent fraud and improve our service, balanced against your rights.

We do not sell your personal data. We share strictly necessary data with:

• Spanish authorities — the Guardia Civil / Policía Nacional registration platform, as required by law.
• Payment providers — to process deposits and balances securely.
• Hosting and software providers — for the website, database and email infrastructure.
• Professional advisers — accountants and lawyers, only when strictly necessary.
• Online travel agencies — only if you booked through them; in that case they are joint controllers under their own privacy policies.

Our infrastructure is primarily hosted within the European Economic Area. Where a provider processes data outside the EEA (for example certain analytics or email tools), we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard to protect your data.

• Enquiries that don't lead to a booking: up to 12 months, then deleted.
• Booking & stay records: kept for the periods required by Spanish tax and tourist accommodation law (typically up to 6 years for accounting).
• Mandatory guest registration data: retained for the period required by Royal Decree 933/2021 (currently 3 years from the date of stay).
• Website analytics: aggregated and anonymised after 14 months.

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (TLS), access controls, role-based permissions, and regular review of our suppliers. No system is perfectly secure, so we ask you to tell us promptly if you ever suspect your information has been compromised.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate or incomplete data corrected.
• Request deletion ("right to be forgotten") where there is no overriding legal duty.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where consent is the basis for processing.
• Lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos).

To exercise any of these rights, write to info@lasabinahomes.com. We will respond within 30 days. We may need to verify your identity before acting on the request.

See our dedicated Cookie Policy for the cookies and similar technologies used on this site, and how to manage them.

Our site is not directed at children under 14. We do not knowingly collect personal data from minors without parental consent. If you believe a child has submitted information here, please contact us so we can delete it.

We may update this policy as the website evolves or the law changes. The "last updated" date at the top of this page reflects the most recent revision. Significant changes will be highlighted on the homepage.

For any privacy question, please email info@lasabinahomes.com. We read every message and will reply personally.