Privacy policy

Last updated: October 2026

This policy explains how we handle the personal data of people who visit casablancacastells.com or get in touch with Casa Blanca, in line with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD).

1. Who is responsible for your data

2. What data we use and why

Enquiries. If you contact us by WhatsApp, phone or email, we use the details you give us (your name, phone number or email address and your message) to reply to you. There is no contact form on this website. WhatsApp is provided by WhatsApp Ireland Ltd., which handles messages under its own privacy policy.

Bookings. Room bookings are handled by Booking.com, which processes your data as an independent controller under its own privacy policy. When we receive your booking details, we use them to manage your stay and to meet the legal obligations that apply to accommodation providers, such as guest registration.

Website statistics. If you accept it in the cookie notice, we use Google Analytics to understand, in aggregate, how the website is used (pages visited, where visits come from, type of device). See our Cookie policy for details.

3. Legal basis

4. How long we keep your data

Enquiry data is kept for as long as needed to deal with your enquiry, and afterwards for the legal limitation periods for any possible claims. Data relating to stays is kept for the periods required by tax law and guest registration rules. Statistical data is kept in line with our Google Analytics settings, for a maximum of 14 months.

5. Who we share data with

We do not pass your data to third parties unless required by law. Some providers process data on our behalf so we can run the website, with the safeguards required by the GDPR:

Some of these services may involve transfers of data to the United States. For Google, these transfers are covered by the EU-US Data Privacy Framework and by standard contractual clauses approved by the European Commission.

6. Your rights

You can request access to, correction or deletion of your data, object to or restrict its use, ask for data portability, and withdraw your consent at any time, by writing to amecha96@hotmail.co.uk or to the postal address above. We may need to confirm your identity.

If you feel your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Children

This website is not aimed at children under 14, and we do not knowingly collect their personal data.

8. Security

We use appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access. The website uses an encrypted connection (HTTPS).

9. Changes to this policy

We may update this policy if the law changes or if we change how we handle data. The date of the latest update is shown at the top of this page.