Data Controller
The data controller for the personal data collected through this website is:
Business name: Casa Playa Patinas
Address: Playa Patinas, San Miguel, 36620 Vilanova de Arousa, Pontevedra, Spain
Email: contacto@casaplayapatinas.com
Phone: +34 652 148 594
Purposes of Processing
The personal data provided through this website will be processed for the following purposes:
Booking management: processing and managing accommodation bookings requested through the web form, phone call, email or WhatsApp.
Query response: responding to information requests made through the contact form, WhatsApp, email or phone call.
Stay management: registering guest check-in and check-out, completing traveler reports required by current regulations.
Commercial communications: only when the user has given express consent, communications about offers and promotions may be sent.
Legal Basis for Processing
The legal basis for processing personal data is:
Contract execution: management and confirmation of bookings made, as well as the provision of accommodation services.
Consent of the data subject: sending commercial communications and responding to queries.
Compliance with legal obligations: transferring data to competent authorities when required by law (traveler reports, tax obligations).
Legitimate interest: improving service quality and managing the website.
Retention Periods
Personal data will be kept for the time necessary to fulfill the purpose for which they were collected and, in any case, for the legally established periods:
Tax and accounting data: 4 years.
Contractual data: 5 years.
Traveler reports: 3 years.
Commercial communications data: until the data subject withdraws consent.
Data Recipients
Personal data will not be transferred to third parties, except in the following cases:
Legal obligation: when required by competent authorities in the exercise of their functions (Security Forces, courts and tribunals, Tax Agency).
Traveler reports: in compliance with Organic Law 4/2015 on the protection of citizen security, traveler data must be communicated to the competent authorities.
No international data transfers are made outside the European Economic Area.
Rights of the Data Subject
The data subject may exercise the following rights regarding data protection:
Access: right to know what personal data is being processed.
Rectification: right to request correction of inaccurate data.
Erasure: right to request deletion of data when no longer necessary.
Restriction: right to request restriction of processing.
Portability: right to receive data in a structured, commonly used format.
Objection: right to object to the processing of data.
To exercise these rights, the data subject must send a written request accompanied by a copy of their ID to contacto@casaplayapatinas.com. If a satisfactory response is not obtained, a complaint may be filed with the Spanish Data Protection Agency (www.aepd.es).
Social Media
Casa Playa Patinas has profiles on social networks. The processing of data of users who follow these profiles will be governed by the terms of use and privacy policies of each platform.
Security Measures
The data controller applies the necessary technical and organizational measures to ensure the security and integrity of personal data, in accordance with Article 32 of the GDPR: SSL encryption, restricted database access, protection against unauthorized access and periodic backups.