Privacy policy

The protection of your personal data is of particular concern to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

1. person responsible

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is

Daniel Schwarz & Sandy Hase
Casa Feliz
Via Real 48
29780 Nerja, Málaga
Urbanización San Juan de Capistrano
Spanien

Contact: preferably via the contact form on this website.

2. collection and storage of personal data and the nature and purpose of their use

2.1 Accessing the website (server log files)

When you visit our website, the browser on your device automatically sends information to our website server. sent to the server of our website. This information is temporarily stored in so-called stored in server log files. It is recorded in particular:

• IP address of the requesting end device,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access was made (referrer URL),
• the browser used and, if applicable, the operating system of your end device and the name of your access provider.

The aforementioned data is processed for the following purposes

• Ensuring a smooth connection to the website,
• Ensuring a comfortable use of our website,
• Evaluation of system security and stability and
• administrative purposes (e.g. error analysis, abuse tracking)

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above. This data will not be merged with other data sources does not take place. The log files are usually deleted after no more than 30 days at the latest, unless longer storage is required for security reasons (e.g. in the in the context of specific incidents).

2.2 Making contact via the contact form

If you send us enquiries via the contact form provided on the website, your your details from the enquiry form, including the contact details you provide there, will be contact details you provide there in order to process your enquiry and in the event of follow-up questions. The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR) or, in the case of pre-contractual or contractual or contractual enquiries, on the basis of Art. 6 para. 1 lit. b GDPR.

As a rule, the following data is processed

• Name,
• E-mail address,
• Phone number, if applicable,
• Your message and, if applicable, travel / booking details (e.g. desired period, number of persons)

You can revoke this consent at any time. All you need to do is send us an informal by e-mail. The lawfulness of the data processing operations carried out up to the point of revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until the purpose of data the purpose of data storage no longer applies (e.g. after your enquiry has been processed) or you ask us to erase it, provided that there are no statutory retention obligations to the contrary. conflict with this.

2.3 Making contact by email

If you contact us by email, the data you send us (e.g. name, email address, content of the message, if applicable, e-mail address, content of the message, booking data if applicable) for the purpose of processing your enquiry and in the event of follow-up questions. The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as it concerns pre-contractual or contractual enquiries, otherwise Art. 6 para. 1 lit. f GDPR.

2.4 Booking enquiries, bookings and contract processing via our website

The following data in particular may be processed as part of the booking enquiry or booking

• Surname, first name,
• E-mail address,
• Address,
• Phone number (if specified),
• Date of arrival and departure,
• Number of persons travelling,
• If applicable, dates of birth of the travellers (fulfilment of official registration obligations in Spain),
• Remarks or comments on the booking,
• Payment information (e.g. down payments, balance payments - but no credit card credit card details, as we do not process online payments via our website)

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR (fulfilment of contract or pre-contractual measures). Without the provision of this data we cannot process your enquiry or carry out a stay.

Invoicing and financial accounting

For the issuing of invoices, requests for payment, booking confirmations, cancellation cancellation invoices or other documents relevant to the contract, we continue to process your your personal data even after the booking has been made. This is done on the basis of Art. 6 para. 1 lit. b GDPR (contract) and Art. 6 para. 1 lit. c GDPR (statutory retention retention obligations under tax law).

Tax-relevant data is stored in accordance with the legal requirements in Spain for the prescribed duration and then deleted or anonymised.

Forwarding to our letting agency

For the realisation of your stay (e.g. key handover, cleaning, guest registration with the Policía Nacional / Guardia Civil in accordance with Spanish Spanish reporting obligations), it may be necessary to transfer your data to our local administration / rental agency in Nerja.

The transfer is exclusively for a specific purpose and is based on Art. 6 para. 1 lit. b GDPR.

Spanish guest registration

Landlords of tourist accommodation in Spain are legally obliged to report certain guest guest data to the responsible police authority. This includes, among other things:

• Surname and first name,
• Identity card/passport number,
• Date of birth,
• Country and place of residence,
• Duration of stay

This processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR (legal obligation under Spanish law).

3. transfer of data

Your personal data will not be transferred to third parties for purposes other than those listed below. purposes listed below.

We only pass on your personal data if:

• you have given your express consent to this in accordance with Art. 6 para. 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 lit. b GDPR for the fulfilment of a contractual relationship with you or for the implementation of pre-contractual measures,
• there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 lit. c GDPR or
• the disclosure pursuant to Art. 6 para. 1 lit. f GDPR is necessary to safeguard legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data

As part of the rental of Casa Feliz, it may be necessary to pass on your data (e.g. name, period of stay, number of persons) to our local administration / rental agency in rental agency in Nerja, insofar as this is necessary for the realisation of your booking, handover of keys, cleaning, guest registration with authorities or similar purposes. is necessary.

4. Booking via third-party platforms

If you book our accommodation via third-party platforms (e.g. Airbnb, Booking.com, etc.), the collection and processing of your personal data is primarily carried out by the your personal data is primarily carried out by the respective platform operator. The privacy policies and terms of use of the respective platform then apply.

We only receive the data from these platforms that is necessary for processing the booking and and the realisation of your stay (e.g. name, travel period, number of guests, contact details). We process this data in accordance with this privacy policy.

5. cookies

To the best of our knowledge, our website does not currently use any cookies that require consent pursuant to Art. 6 para. 1 lit. a GDPR (e.g. for tracking or advertising). If technically necessary cookies are to be used in the future (e.g. to display the contact the contact form or to ensure the functionality of the website), this is done on the basis of basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in a functioning website). website).

Should we use a consent / cookie banner in the future or additional services services (e.g. analysis tools, embedded maps, fonts from third-party servers), this privacy policy will be supplemented and adapted accordingly.

6. hosting

Our website is operated by an external service provider (hoster). The hoster provides the infrastructure for the secure and reliable operation of the website. As part of hosting, all data generated in connection with the operation of this website is stored on the hoster's servers. processed on the hoster's servers.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our online services. With the hoster there is a contract for order processing in accordance with Art. 28 GDPR.

7. duration of storage

Personal data is only stored for as long as is necessary for the respective purpose or as required by statutory retention obligations. Once the purpose no longer applies or the statutory periods have expired, the data is deleted or anonymised.

8. Your rights as a data subject

You have the right at any time within the framework of the applicable legal provisions to:

• information about your personal data processed by us (Art. 15 GDPR),
• Correction of incorrect or completion of your data stored by us (Art. 16 GDPR),
• Erasure of your data stored by us (Art. 17 GDPR), insofar as there are no statutory retention obligations to the contrary,
• Restriction of the processing of your data (Art. 18 GDPR),
• Data portability (Art. 20 GDPR),
• Objection to the processing of your data (Art. 21 GDPR), provided that the processing is based on Art. 6 para. 1 lit. e or f GDPR.

If you have given us your consent to process your data, you can revoke this consent revoke it at any time with effect for the future (Art. 7 para. 3 GDPR).

To exercise your rights, you can contact us at any time using the contact details provided. contact us.

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the believe that the processing of your personal data violates the GDPR. As a rule, the supervisory authority of the place where you have your habitual residence or residence or your place of work.

10. status of this privacy policy

This privacy policy is currently valid. It may be adapted to changes in legal or technical requirements. The current version is available at any time available on this website at any time.

Back to the homepage