Privacy policy

This policy explains what personal data we collect, what for, how long we keep it and what you can do about it. It is written under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Who is responsible

  • Controller: Karine Roseline Nathalie Le Moën — NIF Z2682852E
  • Address: Calle Los Carujos 39, Barinas, 30648 Abanilla, Región de Murcia, Spain
  • Email: loscarujos39@gmail.com

What we collect

  • When you request a booking: your name, email address, phone number if you give one, dates and number of guests, and whatever you write in the message.
  • Automatically: your IP address, with its last group of digits removed before it is stored. It is there to catch bursts of form submissions, not to identify you.
  • When you pay: nothing. Payment happens on a page hosted by Stripe; no card details pass through this site or are stored on it.
  • When you stay: the identity details the law requires us to report (see below).

What for, and on what legal basis

  • Handling your booking and replying to you — performance of a contract or pre-contractual steps (art. 6.1.b GDPR).
  • Taking payment and invoicing — performance of the contract and a legal tax obligation (art. 6.1.b and 6.1.c).
  • Reporting guest details to the Spanish Ministry of the Interior through SES.Hospedajes — legal obligation (art. 6.1.c), Royal Decree 933/2021.
  • Preventing abuse of the form — legitimate interest (art. 6.1.f).
  • Measuring site audience — only with your consent (art. 6.1.a), which you can withdraw whenever you like.

We send no marketing messages and pass your data to nobody for advertising. There is no automated decision-making and no profiling.

Who else sees your data

  • o2switch (France), which hosts the site and the mail.
  • Stripe Payments Europe Ltd. (Ireland), for payments.
  • Google Ireland Ltd., for audience measurement, only if you accept analytics cookies.
  • The Spanish Ministry of the Interior, as a legal obligation, for the guest register.
  • The tax authorities, where applicable.

Some of these providers may process data outside the European Economic Area. Where they do, it is covered by the European Commission’s standard contractual clauses or by an adequacy decision.

How long we keep it

  • Enquiries that never became bookings: one year.
  • Bookings and invoicing: four years, the Spanish tax limitation period, and six years for accounting records.
  • Guest register: three years, under Royal Decree 933/2021.
  • Truncated IP addresses: one month.

Your rights

You can ask to see your data, to correct it, to have it deleted, to restrict or object to how it is used, and to receive it in a portable form. Write to loscarujos39@gmail.com saying which right you are exercising; we will answer within one month.

If you think we have not dealt with your request properly, you can complain to the Spanish Data Protection Agency, or to the supervisory authority of the country where you live.

Children

This site is not aimed at children under fourteen and we do not knowingly collect their data. Children staying at the house appear on the booking under the responsibility of the adult who made it.

Changes

If this policy changes, the new version will be published on this page with its date.