CASITAS SANTA RITA
Privacy Policy
Last updated: 28 September 2026
This Privacy Policy explains how Casitas Santa Rita collects, uses, stores and shares personal data when you visit our website, contact us, make a direct reservation or stay at our accommodation.
We are committed to processing personal data lawfully, fairly and transparently and in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable Spanish and European data-protection legislation.
1. Data Controller
The data controller responsible for the processing of your personal data is:
Dariusz Janczewski, trading as Casitas Santa Rita
NIE: Z0087820B
Calle Ramírez Cerdá 10
35544 Guatiza, Las Palmas
Spain
Email: info@casitaslanzarote.com
For any questions concerning this Privacy Policy or the processing of your personal data, you may contact us at the above email address.
2. Personal data we may collect
Depending on how you interact with us, we may collect and process information including:
your name and surname;
email address;
telephone number;
billing or residential address where required;
reservation details, including accommodation selected, arrival and departure dates, number of guests and price;
communications, requests and information you provide before, during or after your stay;
information required to process payments;
identification and guest-registration information where required by Spanish law;
technical information relating to your use of our website, such as IP address, browser and device information and cookie data, where applicable.
We aim to collect only personal data that is reasonably necessary for the relevant purpose.
3. Why we process your personal data
We may process personal data for the following purposes:
To respond to enquiries and requests
When you contact us regarding availability, accommodation or a possible reservation, we use the information you provide to respond to your enquiry and take steps at your request before entering into a contract.
To manage reservations
We process personal data to create, administer and confirm reservations, manage changes or cancellations and provide the accommodation and services you have booked.
To communicate with guests
We use contact information to provide information relevant to a reservation or stay, including confirmation, arrival information, access instructions and other practical communications.
To process payments and refunds
Payment-related information is processed as necessary to collect payments, administer refunds and manage financial transactions relating to reservations.
To comply with legal obligations
We may collect, retain and communicate information where required by Spanish or European Union law, including applicable accommodation and guest-registration obligations, accounting, tax and regulatory requirements.
To operate and protect our website and business
Certain technical information may be processed where reasonably necessary for website operation, security, fraud prevention, troubleshooting and the establishment, exercise or defence of legal claims.
4. Legal bases for processing
Depending on the purpose, we process personal data on one or more of the following legal bases:
Performance of a contract or pre-contractual measures — where processing is necessary to respond to a booking request, create and administer a reservation or provide the accommodation and services requested.
Compliance with a legal obligation — where we are required to collect, retain or communicate information under applicable law.
Legitimate interests — where processing is reasonably necessary for the operation, security and protection of our business or for the establishment, exercise or defence of legal claims, provided that these interests are not overridden by your fundamental rights and freedoms.
Consent — where applicable, for processing that requires your prior consent, including certain cookies or similar technologies.
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Direct bookings and Smoobu
Our direct online booking system is provided using Smoobu, a property-management and booking platform operated by Smoobu GmbH, Berlin, Germany.
When you make a direct reservation, information necessary to process and manage your booking is processed through Smoobu. This may include your contact details, booking dates, selected accommodation, number of guests, booking value, communications and other information entered during the booking process.
We use Smoobu to manage availability, reservations, guest communications and related booking administration.
Smoobu processes guest data in connection with the services it provides to us and applies its own data-protection and security arrangements.
6. Payments and Stripe
Direct online payments are processed through Stripe.
When you make a payment, the information necessary to process the transaction is transmitted securely to Stripe. Depending on the payment method, this may include your name, contact information, payment-card or payment-method information, transaction amount and technical information required to authenticate and secure the payment.
Casitas Santa Rita does not store your complete payment-card details.
Stripe may process personal data both as a service provider acting on our behalf and, for certain activities such as fraud prevention, security, regulatory compliance and operation of its payment infrastructure, as an independent data controller.
7. Our website and Squarespace
Our website is hosted and operated using Squarespace.
When you visit our website, Squarespace may process technical information necessary to deliver and secure the website, such as your IP address, browser and device information and information relating to your interaction with the site.
Squarespace and its service providers may process data in countries outside the European Economic Area. Where required, appropriate safeguards are used for international transfers of personal data.
8. Cookies and similar technologies
Our website may use cookies and similar technologies that are necessary for the website to function and, depending on our configuration and your choices, for analytics or other purposes.
Where consent is legally required for non-essential cookies, such cookies will be used only in accordance with your consent choices.
You can manage your cookie preferences through the cookie controls provided on our website where available.
More detailed information about the cookies and similar technologies used on our website is provided in our Cookie Policy.
9. Guest registration and legal obligations in Spain
Accommodation providers in Spain are subject to legal obligations concerning the collection and communication of certain information relating to guests and reservations.
Where applicable, we therefore collect the information required by Spanish law and communicate the required information to the competent authorities through the legally prescribed systems.
This processing is carried out because it is necessary for compliance with a legal obligation to which we are subject.
Information collected for these purposes is used only as permitted or required by applicable law.
10. Local property management and service providers
Where necessary to provide your stay, limited personal information may be shared with persons or service providers assisting us with the operation of Casitas Santa Rita.
This may include our local property manager or other service providers where they need the information to coordinate your arrival, provide assistance during your stay, resolve a maintenance issue or otherwise provide a service connected with your reservation.
Only information reasonably necessary for the relevant purpose is shared.
11. Other recipients of personal data
We may also disclose personal data where reasonably necessary to:
professional advisers such as accountants, tax advisers or legal advisers;
banks and payment providers;
IT, hosting and technical service providers;
public authorities where disclosure is required by law;
law-enforcement or regulatory authorities where we are legally required to provide information.
We do not sell guest personal data.
We do not disclose guest information to third parties for their own direct-marketing purposes without an appropriate legal basis.
12. International transfers
Some of the technology providers used in connection with our website, booking system or payments may process personal data outside Spain or the European Economic Area.
Where personal data is transferred to a country that is not covered by an applicable adequacy decision, the relevant provider is expected to use appropriate safeguards recognised under applicable data-protection law, such as Standard Contractual Clauses or another legally recognised transfer mechanism.
13. How long we keep personal data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting, tax, regulatory and contractual obligations.
Reservation and transaction information may therefore be retained after a stay has ended where necessary for accounting, taxation, legal compliance or the establishment, exercise or defence of legal claims.
Guest-registration information subject to specific statutory retention requirements will be retained for the period required by applicable Spanish law.
Where data is no longer required and there is no legal or legitimate reason to retain it, it will be deleted or securely anonymised where reasonably practicable.
14. Security
We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
We also use established service providers for key functions such as website hosting, reservation management and payment processing.
However, no internet-based transmission or storage system can be guaranteed to be completely secure.
15. Your data-protection rights
Subject to the conditions and limitations established by applicable law, you may have the right to:
request access to the personal data we hold about you;
request correction of inaccurate or incomplete data;
request deletion of your personal data;
request restriction of processing;
object to certain processing based on legitimate interests;
receive certain personal data in a portable format;
withdraw consent where processing is based on consent;
lodge a complaint with a competent data-protection supervisory authority.
These rights are not absolute. For example, we may be required to retain certain information despite a deletion request where retention is necessary to comply with a legal obligation.
To exercise your rights, please contact:
We may request reasonable information to verify your identity before responding to a request.
16. Complaints
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can investigate and respond.
You also have the right to lodge a complaint with the competent data-protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).
17. Third-party websites
Our website may contain links to external websites or services.
We are not responsible for the privacy practices of independent third-party websites. We recommend reviewing their privacy information when you visit them.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, service providers or legal requirements.
The current version will be published on our website together with its last-updated date.
19. Contact
For questions concerning this Privacy Policy or the processing of your personal data, please contact:
Casitas Santa Rita
Dariusz Janczewski
NIE: Z0087820B
Calle Ramírez Cerdá 10
35544 Guatiza, Las Palmas
Spain
Email: info@casitaslanzarote.com