Privacy policy
The Spanish version of this document prevails in case of discrepancy.
This policy explains what personal data we process when you visit this website or book the apartment, why we use it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.
1. Data controller
María Teresa Pinedo Sánchez · Tax ID 07563895T · Avenida de las Naciones, 16, 03540 Alicante/Alacant, España · terepinedotorremar@gmail.com
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone, language, dates, number of guests and message | Managing your booking, sending you the confirmation and contacting you about your stay | Performance of a contract (Art. 6(1)(b) GDPR) |
| Payment data (amount, date, payer and payment method: the account you make the bank transfer from or, if you pay by card on the website, its last digits) | Charging the booking, refunding it where applicable and reporting the payment in the guest register. If you pay by card on the website, full card details are processed by Stripe; we never see them | Performance of a contract and legal accounting, tax and guest-registration obligations (Art. 6(1)(b) and (c)) |
| ID document and details of each adult guest | Guest registration with the Spanish Ministry of the Interior (SES.Hospedajes) | Legal obligation: Organic Law 4/2015 and Royal Decree 933/2021 (Art. 6(1)(c)) |
| Technical connection data (IP address, browser) | Website security and abuse prevention (e.g. automated date blocking) | Legitimate interest (Art. 6(1)(f)) |
We do not make automated decisions or create profiles, and we never use your data for advertising.
3. How long we keep it
- Booking data: up to two years after your stay; invoicing data for the periods required by tax and commercial law.
- Guest registration: the period set by Royal Decree 933/2021 (three years).
- Booking requests that are not confirmed: deleted as soon as they are no longer needed (unfinished card payment attempts, automatically within minutes or hours).
4. Who we share it with
Only with the providers needed to deliver the service, acting as processors under GDPR-compliant agreements:
- Cloudflare, Inc.: website hosting and booking storage.
- Stripe Payments Europe, Ltd.: only if you pay by card on the website, payment processing (Stripe also processes certain data as a controller to prevent fraud).
- Resend: sending automatic confirmation emails, when the website sends them.
- Google: only if you click “Show map” does your browser connect to Google Maps.
Some of these providers are based in the United States; transfers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses. We also disclose data to public authorities when required by law (Ministry of the Interior, Tax Agency).
5. Cookies
This website does not use tracking or advertising cookies, which is why there is no cookie banner. We only store the dates you selected temporarily in your browser so they are not lost if you reload the page (strictly necessary storage). If you pay by card on the website, Stripe’s payment page, to which you are redirected, uses its own cookies to prevent fraud.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing terepinedotorremar@gmail.com. If you are not satisfied with our response, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or the authority in your country.