Data controller
The controller of your personal data is the owner of this website:
- Trade name
- La Casa de Allá
- Address
- Barrio La Llana, 13, 39314 Santillana del Mar, Cantabria (España)
- Phone
- +34 690 910 133
- apartamentoslacasadealla@gmail.com
- Website
- www.lacasadealla.com
What data we process and why
You don't have to give us any data to browse this website. We only process what you give us and, if you accept them, what Google Ads' cookies collect:
- The contact form: your name, email address, the reason and your message, to reply to you. All fields are required: without them we cannot deal with your enquiry. The legal basis is taking steps at your request before entering into a contract or our legitimate interest in answering your enquiry (articles 6.1.b and 6.1.f GDPR).
- The dates search when you press «Book»: the apartment, the dates, the number of guests and the language, with no personal data at all, to know what direct demand we have; then we take you to Airbnb. The legal basis is our legitimate interest in knowing that demand (article 6.1.f GDPR).
- The newsletter: your email address and language, to send you offers, news and tips about La Casa de Allá and its surroundings. The legal basis is your consent, which you give by ticking the two boxes of the form (article 6.1.a GDPR) and can withdraw at any time.
- Emails you send us directly, to reply to you, on the same legal bases as the form.
- Google's advertising, only if you accept their cookies in the website's banner: Google Ads measures whether a visit coming from one of our ads ends with the contact form being sent or a link to Airbnb being clicked, and may use your visit to show you our ads later on. The legal basis is your consent (article 6.1.a GDPR), which you can withdraw at any time from the cookie policy. If you do not accept them, the website does not load Google Ads.
How long we keep it
- Form messages and emails: for as long as needed to deal with them and, afterwards, for the periods required by law.
- Dates searches: eighteen months at most; they are deleted automatically.
- Your email address in the newsletter: until you unsubscribe or withdraw your consent.
- Afterwards, for the periods during which liabilities may arise, blocked and available only to courts and public authorities.
Who we share it with
We do not sell your data or pass it on to third parties, except where required by law. For this website to work, these processors handle it on our behalf, under the contracts required by article 28 GDPR:
- Amazon Web Services EMEA SARL, which hosts the website, keeps the newsletter list and the dates searches, and sends the forms' emails (Amazon SES), on servers in the European Union. Contact form messages are not kept in any database: they arrive by email.
- The provider of our email service, where we receive your messages.
- Google Ireland Limited, which provides Google Ads, only if you accept their cookies. For what it does with the data for its own advertising, Google acts as an independent controller, under its privacy policy.
- When you book on Airbnb, the booking details are handled by Airbnb under its own terms: this website does not receive them.
Google reviews
The reviews shown on the home page are the public ones on our Google Maps listing, with each author's name and Google profile photo. When you view the home page, your browser downloads those photos from Google's servers, which receive your IP address as when loading any image; they set no cookies.
International transfers
Amazon and Google belong to groups based in the United States that adhere to the EU-US Data Privacy Framework. Any transfer of data outside the European Economic Area relies on that framework or on the standard contractual clauses approved by the European Commission.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to apartamentoslacasadealla@gmail.com or by post to the owner's address. We will ask you to prove your identity.
To unsubscribe from the newsletter, just ask us at apartamentoslacasadealla@gmail.com, free of charge: we delete your address from the list. Withdrawing your consent does not affect what was processed before.
You can withdraw the consent you gave to Google Ads' cookies at any time, from the cookie policy.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
This website is not aimed at children under 14, and we do not knowingly process their data.
Security
The website and the forms always travel over an encrypted connection (HTTPS), and only the people who need to deal with them can access the messages and the newsletter list.
Cookies
What this website stores in your browser, and why, is explained in the cookie policy.
Last updated: