Privacy policy

Data controller

• Controller: Marc Margall Grau
• Tax ID (NIF): 40442191A
• Address: Ctra. Besalú-Roses, 22, 17740 Vilafant (Girona), Spain
• Email: esther@canmartinot.com

What data we process

The data you give us in the enquiry form: name, email, phone (optional), type of stay, dates, number of guests, whether you will bring pets and your message. To prevent mass sending of messages, the server temporarily keeps an encrypted fingerprint of your IP address for up to one hour.

What we use it for

To answer your enquiry and, where applicable, to manage your booking. We do not use it to send you advertising.

Data of guests staying at the house

On arrival, the Spanish guest registration rules (Royal Decree 933/2021) require us to ask each guest for an identity document and to report their details to the Mossos d’Esquadra (Catalan police) within 24 hours. The data is what the law requires: identity, contact details, dates of the stay and payment method. The legal basis is compliance with a legal obligation (Art. 6(1)(c) GDPR), and it is kept for 3 years.

Availability calendar and private area

The availability calendar only shows which nights are booked: it contains and stores no personal data. The private admin area, used only by the person who manages the house, stores the administrator user name and, for security, failed login attempts with an encrypted fingerprint of the IP address, for up to one hour.

Legal basis

Your consent, given by ticking the box in the form (Article 6(1)(a) GDPR), and taking pre-contractual steps at your request (Article 6(1)(b) GDPR).

How long we keep it

• Enquiries: enquiry emails are kept for about 3 months and then deleted, whether they lead to a booking, are cancelled or are not accepted.
• Guest register: 3 years.
• Invoices and data from confirmed bookings: the period required by tax and commercial law (at least 4 years).

Who we share it with

We do not share your data with third parties unless legally required. The website and email are hosted by IONOS Cloud S.L.U. (tax ID B85049435, Madre de Dios 21, 26004 Logroño, La Rioja, Spain), acting as data processor.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to esther@canmartinot.com. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).