Privacy policy

Who is responsible for your data

The data controller is Gabriel Caparrós Antón. You can find his identification and address in the legal notice and contact him at info@alquilervacacionalgabriel.com.

What we use your data for

Enquiries about a stay: we use your name, email address and message to handle your enquiry and related communications. When you request information with a view to entering into a contract, processing is based on the pre-contractual steps you request. General enquiries are handled on the basis of our legitimate interest in responding to people who contact us, without turning them into advertising.

Requests and bookings: we use identification, contact and stay details to process your request and manage the contractual relationship. The mandatory fields enable us to do this; if you do not provide them, we may be unable to process your request.

Legal obligations: where applicable, we will process and disclose the data required to comply with accommodation, tax and other applicable obligations. We do not request a full copy of an identity card solely for guest registration.

Reviews: the new review form is being prepared. Permission to publish will be specific and optional, separate from private suggestions. You do not need to agree to advertising to make an enquiry or request a booking.

Who may receive your data

Website hosting and domain email are provided by HostingTG (HOSTING TG S.L.) as our technical provider. We use info@alquilervacacionalgabriel.com for enquiries and reservas@alquilervacacionalgabriel.com to manage bookings. Bank transfers are made through the payer's and recipient's banks. Authorities may receive data where there is a legal obligation. Card payments are processed through Stripe's secure page. External SMS and identity verification services remain disabled for guests.

Card payments through Stripe

If you choose a card payment, we send Stripe the amount, currency and technical references for your request to prepare the authorisation and check its result. You enter your card details directly in Stripe Checkout; this website does not receive or store the full card number or security code. We retain the payment reference, status and amounts needed to manage the booking and transaction. The charge is made only after Gabriel's manual acceptance; an authorisation does not confirm the booking.

Stripe processes payment and technical data collected on its page to process and authenticate the transaction and prevent fraud, in accordance with its privacy policy, which explains its entities, retention, transfers and rights. The processing necessary to manage the payment forms part of the request and contractual relationship.

Bank transfers and payment receipts

To identify a payment, we use the booking reference, amount and payer details supplied by the bank. If you provide a receipt, we use it to review the payment and handle any issues; providing it does not by itself confirm receipt of the funds or the booking. Do not include bank transactions unrelated to this payment, and conceal balances and other unnecessary information.

Security and availability

We use session cookies to maintain access and protect forms. To limit abusive submissions, the contact form records a fingerprint of the IP address and the time of attempts. Each check removes attempts older than one hour from that record. The server may also generate technical access and error logs.

The availability calendars shared through iCal show occupied dates as unavailable, without including the guest's name, telephone number or identity document.

Visitor statistics

If you accept statistics cookies, we use Google Analytics to understand visits to public pages. The legal basis is your consent, which you can withdraw in Cookie preferences. Read about the purposes, provider, transfers and retention periods in our cookie policy. The private panel and booking process do not include this measurement.

How long we keep data

Enquiries that do not become bookings are kept for six months from the last communication. We review enquiries monthly to delete those beyond that period, unless they must be retained for a claim or legal obligation. If an enquiry becomes a booking, the necessary data are transferred to its management. Booking data are used while processing the booking, during the stay and while settling payments and the deposit. Afterwards, only documents needed for legal obligations and possible claims are retained, with restricted access and, where applicable, blocked. For contractual liability, the general period of five years from when the obligation can be enforced is taken into account, unless a special period applies or the limitation period is interrupted. Tax documents are kept for the applicable tax period: generally four years from the day following the deadline for filing the return, without prejudice to interruptions or circumstances requiring a longer period. Receipts follow the retention criteria for their transaction; unrelated banking data are not retained. Where a guest documentary register is mandatory under Royal Decree 933/2021, its specific period is three years from completion of the service. Withdrawal of publication permission allows you to request removal of the review; it does not entail deleting documents that must be retained by law.

Daily website backups are kept for 30 days and removed automatically after that period. They are used to restore the service and have restricted access. Following restoration, applicable deletions are applied again. Earlier one-off preparation backups are kept separately. Reviews of enquiries and documents are manual; bookings are not automatically deleted merely because these periods have elapsed.

Your rights

You may request access, rectification, erasure, restriction, objection or portability where applicable, and withdraw consent without affecting the lawfulness of earlier processing. Write to info@alquilervacacionalgabriel.com with your request. If we need to verify your identity, we will request only the proportionate additional information necessary.

As a general rule, we will respond within one month. If a lawful extension is appropriate because of complexity or the number of requests, we will inform you within the first month. You may lodge a complaint with the Spanish Data Protection Agency.

Contact through WhatsApp

The WhatsApp button opens an external service. It includes only an enquiry text and, where applicable, the property's name. No message is sent automatically and no booking data are included in the link. If you choose to write to us, we will receive the number and profile information displayed by WhatsApp, as well as your message, to handle your enquiry. WhatsApp processes data under its own privacy policy.

Data you share in a message

Include only what is needed for your enquiry. Do not send card details, passwords or identity documents through the contact form.

Version: 22 October 2026.