Version 30 October 2026
Privacy contact
For questions or requests about your personal information in connection with accommodation enquiries and direct bookings, contact pueblaaidamijas@gmail.com.
Information we use
We use the information you provide in an enquiry or booking: your name, email address, contact details, stay dates, guest numbers, arrival information and messages. The booking form identifies required fields. Without the required name and contact information, we cannot process a booking or contact you about it. Optional fields can be left blank.
For bank transfers, we use the payer and payment information available from our bank to match payments to your booking. The bank-transfer booking process does not ask for payment-card details. Technical records may include your IP address, request time and information needed to operate the website or prevent spam. Please do not put sensitive personal information in an optional message.
Why we use it
| Purpose | Basis |
|---|---|
| Answering your enquiry, arranging a booking, communicating about payment and managing your stay | Steps at your request before a contract, or performance of the booking contract (GDPR Article 6(1)(b)) |
| Accounting and guest-registration records where legally required | Compliance with the applicable legal obligation (Article 6(1)(c)) |
| Operating the website, diagnosing delivery problems and preventing spam or misuse | Our legitimate interest in a reliable and secure service (Article 6(1)(f)) |
Who receives information
We use service providers for website hosting, booking management and email delivery. Information is shared as needed for those services, payment processing, or a legally required disclosure to public authorities.
- Smoobu GmbH: the availability calendar, direct booking engine and booking communication. Smoobu publishes its data-processing terms and subprocessor list.
- AhaSend: delivery of messages submitted through the website’s contact form. Its data-processing terms describe its handling of email content and delivery information.
- Google: Gmail is used for accommodation enquiries and correspondence. Google Maps displays the location map. See Google’s privacy policy.
- Cajamar Caja Rural and the banks involved in your transfer: processing and identifying bank payments.
- Website hosting and technical-content providers: serving pages, protecting the service and delivering fonts, icons or images. Some existing pages load resources from cdnjs/Cloudflare and Unsplash; your browser connects to those providers when loading the resources.
International processing
Some providers operate internationally, so information may be processed outside the European Economic Area. Smoobu’s published list identifies EU hosting and describes the EU–US Data Privacy Framework and standard contractual clauses for relevant international processing. AhaSend’s published terms describe EEA processing and safeguards where transfers outside the EEA are necessary. Google describes its use of adequacy decisions, the Data Privacy Framework and standard contractual clauses in its transfer frameworks. The linked provider documents explain these arrangements; you may also contact us for information about the safeguards relevant to your data.
How long information is kept
Retention depends on the purpose of the record. Enquiries are retained while the request and any follow-up need to be handled. Information needed for a resulting booking becomes part of the booking record. Booking and payment records are retained for the stay, applicable accounting or guest-registration requirements, and the handling of any outstanding dispute or legal claim.
Technical and anti-spam records are retained according to the need to diagnose problems, investigate incidents and prevent repeated misuse. Information is reviewed against these purposes and removed or anonymised when no longer required, subject to any obligation to preserve it. You may ask which retention criteria apply to your information.
Cookies and embedded content
The contact form uses a session for its anti-spam checks. Smoobu’s calendar and booking form, Google Maps and external technical resources connect your browser to their providers when loaded. These providers may use cookies or similar technologies as described in their notices. You can manage cookies through your browser, although blocking necessary cookies can affect forms or embedded services. A link to Airbnb or Booking.com takes you to that platform, where its own privacy notice applies.
Your rights
Subject to the applicable conditions, you can request access, correction, deletion, restriction or portability of your information. You can object to processing based on legitimate interests. If processing is based on consent, you can withdraw it without affecting earlier lawful processing. We may need enough information to verify your identity before responding.
You may lodge a complaint with a data-protection supervisory authority, including the authority where you live or work, or where the alleged infringement occurred.
Marketing
Making an enquiry, booking or accepting the booking terms does not sign you up for marketing. Any future marketing subscription will require a separate optional choice.