1. Introduction

At Casa Anna, we are committed to protecting the privacy and security of all personal data we handle. This Data Policy explains how we collect, process, store, and protect personal information in compliance with the General Data Protection Regulation (GDPR) and all applicable laws in Spain.

2. Scope

This policy applies to all personal data processed by Casa Anna, including data from:

• Guests and customers
• Suppliers and service partners
• Website visitors and online users

3. Data Protection Principles

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

4. Data We Collect

• Identification data: full name, address, nationality, ID/passport number
• Contact details: phone number, email address
• Booking data: stay dates, number of guests, payment details
• Communication: messages and inquiries

5. Purpose of Processing

• Managing bookings and guest stays
• Complying with Spanish legal requirements (e.g. guest registration)
• Processing payments
• Communication with guests

6. Legal Basis

• Contract performance
• Legal obligation
• Legitimate interest

7. Data Retention

• Booking & financial data: up to 5 years
• Guest registration data: as required by Spanish law

8. Data Security

We implement appropriate security measures to protect your data against unauthorized access or misuse.

9. Data Sharing

• Booking platforms (Airbnb, Booking.com, etc.)
• Spanish authorities (mandatory guest registration)
• Service providers (cleaning, IT)

We never sell personal data.

10. Your Rights

You have the right to access, correct, or delete your data at any time.
Contact: [JOUW EMAIL INVULLEN]

11. Updates

This policy may be updated when necessary.

Casa Anna
San Javier, Spain
2026