1. Data controller
The data controller is the owner indicated in the Legal Notice, with the following contact details:
- Owner
- José Luis Lorente Aragón
- valledearbas@gmail.com
Legal information
Privacy Policy
At Casa Rural Valle de Arbas we respect your privacy. Here we explain what personal data we process when you visit this website or contact us, for what purpose, and what rights you have.
2. What data we process and why
This website has no forms and does not automatically collect personal data. The only personal data we process is what you voluntarily provide when contacting us by email, phone or WhatsApp (name, email, phone number and details of your stay), for the sole purpose of responding to your enquiry and managing your booking. The website stores your preferred language in the browser's local storage (localStorage) to remember it on your next visit; this data never leaves your device, is not a cookie, and does not identify any person.
3. Legal basis
The legal basis for processing your contact details is your own consent when writing to us, and the performance of pre-contractual or contractual measures necessary to manage your booking (Articles 6.1.a and 6.1.b of the GDPR).
4. Data retention
We keep your data for as long as the relationship arising from your enquiry or booking lasts, and afterwards for the legally required periods (for example, tax obligations), after which it is deleted or anonymised.
5. Recipients and data processors
We do not share your data with third parties except where legally required. This website checks the house's availability through the public Google Calendar API, which is only used to read an availability calendar; none of your personal data is sent to Google while browsing the website. The site is hosted on GitHub Pages (GitHub, Inc.), which acts as a data processor solely to serve the website's static files.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to the contact email indicated in section 1. You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you believe your data is not being processed correctly.
7. Security measures
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, to the extent appropriate for a website of this nature.