Legal
Privacy Policy
Last updated: 28 April 2025
1. Data Controller
The data controller responsible for your personal data is: Special Rentals Málaga, Calle Virgen del Carmen 2, 29787 Maro, Málaga, Spain. Email: info@specialrentalsmalaga.com.
2. Data We Collect
We collect the following personal data:
- Name, email address and phone number — when you make a booking or contact us
- Payment data — processed via Stripe (we do not store card details)
- Travel details (check-in/check-out dates, number of guests)
- Nationality and ID number — required by Spanish law for guest registration (RD 933/2021)
- IP address and cookie data — for technical functionality and analytics
3. Purpose and Legal Basis
We process your data for the following purposes:
- Processing and managing your booking (Art. 6(1)(b) GDPR — contract performance)
- Compliance with Spanish legal reporting requirements (Art. 6(1)(c) GDPR)
- Responding to your enquiries (legitimate interest)
- Sending our newsletter, where you have opted in (Art. 6(1)(a) GDPR)
- Improving our website (legitimate interest)
4. Third Parties
We share your data only where necessary for contract performance or where you have given explicit consent. Service providers we use: Stripe Inc. (payment processing), Resend (email delivery), Supabase (database hosting). All providers are bound by data protection obligations and EU Standard Contractual Clauses where applicable.
5. Retention
We retain booking data for the legally required period of 6 years (Spanish tax law). Guest registration data is kept for 3 years as required by RD 933/2021. Newsletter addresses are deleted immediately upon request.
6. Your Rights
Under GDPR, you have the right to:
- Access your personal data we hold
- Rectify inaccurate data
- Erasure (subject to legal retention requirements)
- Restriction of processing
- Data portability
- Object to processing based on legitimate interests
- Lodge a complaint with the supervisory authority (AEPD in Spain)
To exercise your rights, email us at: info@specialrentalsmalaga.com. We will respond within 30 days.
7. Cookies
For full details on the cookies we use, please see our Cookie Policy