Privacy Policy

1. Data Controller

Owner: David Adelanto Gual
Tax Identification Number (NIF): 20243257Z
Address: Masía de Cholito, 4, 12594 Vall d’Alba (Castellón), Spain
Contact Email: [email protected]
Telephone: +34 601 679 523

2. Personal Data We Collect

Through our website and booking engine, we collect strictly necessary data to provide our services, which may include:

Identification and contact details: Full name, ID/passport number (upon booking confirmation or check-in), postal address, email address, and telephone number.
Booking details: Arrival and departure dates, number of guests, special requests, and stay preferences.
Payment and billing details: Credit card or payment gateway data necessary to process booking payments or deposits (processed securely via encrypted payment platforms).
Browsing data: IP address, cookie identifiers, and browsing patterns (as detailed in our Cookie Policy).

3. Purpose of Processing

We process your personal data for the following purposes:

Managing bookings and stays: Processing booking enquiries, managing stays at Masía de Cholito, confirming availability, issuing invoices, and handling all communication prior to and following your arrival.
Handling enquiries: Answering questions, messages, or requests sent through our contact forms, email, or WhatsApp Business.
Legal compliance: Complying with statutory guest-registration obligations (such as traveler reporting to public authorities / SES Hospedaje) and applicable accounting and tax laws.
Marketing communications: Where you have granted explicit consent, sending you updates, special offers, or news about Masía de Cholito.

4. Legal Basis for Processing

The processing of your data is based on:

Performance of a contract / Pre-contractual measures: Required to formalize and execute the accommodation booking or answer your pre-booking requests.
Consent of the data subject: When you check the consent box on our web forms and booking engine.
Legal obligation: Compliance with statutory regulations regarding tourist accommodation registers and tax duties.
Legitimate interest: Ensuring website security and service improvements.

5. Data Retention

Your personal data will be kept:

For the duration required to manage your booking, answer your queries, and provide the agreed services.
For the statutory periods required by applicable civil, commercial, tax, and public security regulations.
For promotional communications, until you request their erasure or revoke your consent.

6. Recipients and Third-Party Disclosures

We do not sell, rent, or transfer your personal data to third parties, unless legally required. However, in order to deliver our services, certain technical service providers acting as data processors may access your data:

Lodgify: Accommodation management software and booking engine platform.
Payment gateways and financial institutions: For secure payment processing and refunds.
Public authorities and Law Enforcement Agencies: To comply with mandatory tourist registration laws.
Analytics and technical service providers: Google, Meta, or other integrated services, in accordance with their privacy policies.

7. User Rights

You may exercise your data protection rights under the GDPR at any time:

Access: To know what personal data we hold about you.
Rectification: To request the correction of inaccurate or incomplete data.
Erasure: To request the deletion of your data when they are no longer needed.
Objection: To object to data processing for specific purposes.
Restriction of processing: To request limitation of processing under statutory circumstances.
Data portability: To receive your personal data in a structured, commonly used format.
Withdraw consent: At any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please send an email to [email protected] or a postal letter to our address, including a copy of your identity document to verify your identity. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Amendments to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect regulatory changes or modifications in our web operations.

Last updated: 20/08/2026