Privacy policy

Data controller

The person responsible for processing the personal data collected through this website is the owner of Casa Xoubiña:

• Address: Avenida de Sanguiñeda 33, Sanguiñeda, Mos (Pontevedra), Galicia, Spain
• Email: info@casaxoubina.com

What data we process

We process the data you voluntarily provide when contacting us by WhatsApp or email (name, phone number, email address and the content of your message), as well as the data needed to manage a booking through the booking engine (dates, number of guests, contact details and, where applicable, payment details handled directly by that provider).

Why we process your data

• To respond to enquiries made via WhatsApp or email.
• To manage bookings at Casa Xoubiña.
• To comply with the legal obligations applicable to holiday-let accommodation (such as guest registration requirements).

We do not use your data for marketing purposes unless you give us your express consent to do so.

Legal basis for processing

The legal basis for processing is the performance of a pre-contractual or contractual relationship (booking management), the consent of the data subject when submitting an enquiry, and compliance with the legal obligations of the holiday-let activity.

Who we share your data with

The data needed to manage a booking is shared with the booking engine embedded at /reservar/, an external provider that acts as a data processor and applies its own security measures. We do not share your data with third parties for other purposes, except where legally required.

How long we keep your data

We keep your data for as long as necessary to manage your enquiry or booking, and afterwards for the periods required by law (for example, tax or guest-registration obligations).

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability (ARCO+ rights) by contacting the owner at info@casaxoubina.com. You are also entitled to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe your data has not been processed in accordance with applicable law.