At Little Home Girona Apartments SL we take privacy seriously. This policy explains what personal data we collect, why, how long we keep it and what rights you have as a user.
1. Data controller
| Identity | Little Home Girona Apartments SL |
|---|---|
| VAT (CIF) | ESB55315907 |
| Address | Pujada Rei Martí 8, 17004 Girona, Catalonia, Spain |
| info@littlehomegirona.com | |
| Phone | +34 610 994 407 |
2. What data we collect
Through this website we may collect the following categories of personal data:
2.1 Data you provide directly
- WhatsApp communication: phone number and content of the messages you send us.
- Email communication: email address and message content.
- Direct bookings: booking data (first name, surname, email, phone, dates, payment details) is processed directly through the Rentlio reservation system. See section 7 for details.
2.2 Data collected automatically
- Technical cookies: the site only uses strictly necessary cookies for operation. See cookie policy.
- Server logs: the hosting provider (Hostinger) records basic technical data (IP, browser, time of access) for security and diagnostic purposes. This data is not linked to personal information and is deleted periodically.
3. Purposes and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Responding to your enquiries by WhatsApp or email | User consent (art. 6.1.a GDPR) — implied in sending the message |
| Managing direct bookings and the contractual relationship | Contract performance (art. 6.1.b GDPR) |
| Complying with legal obligations (invoicing, tax, mandatory police registration) | Legal obligation (art. 6.1.c GDPR) |
| Ensuring site security and proper operation | Legitimate interest of the controller (art. 6.1.f GDPR) |
4. Retention period
- Enquiries not converted into bookings: 6 months from the last contact.
- Booking and invoicing data: the time required to comply with tax and commercial legal obligations (minimum 4 years under the Spanish General Tax Law, up to 10 years under the Commercial Code for certain documents).
- Mandatory guest register: the period set by current police regulations.
- Server logs: as per the practices of the hosting provider Hostinger (consult their policy).
5. Recipients and data transfers
Your personal data is shared only with the following third parties, in the strict context of providing the service:
- Rentlio (booking system, data processor): to manage the booking and payment.
- Hostinger (web hosting, data processor): to serve the website.
- Holded (accounting software): for invoicing and tax obligations.
- Public administration: in cases where it is legally required (police guest register, judicial requirements, tax obligations).
No international transfers of data outside the European Economic Area are carried out, beyond those that may be carried out by Rentlio or Hostinger under their data processing contracts, always with the guarantees required by the GDPR.
Personal data is not sold, rented or transferred to third parties for commercial purposes.
6. User rights
As the data subject, you may exercise the following rights at any time:
- Access: obtain confirmation of whether we process your data and, if so, access it.
- Rectification: request the correction of inaccurate or incomplete data.
- Erasure: request the deletion of data when no longer necessary.
- Restriction: request that processing be restricted in certain circumstances.
- Portability: receive your data in a structured format and transfer it to another controller.
- Objection: object to processing based on legitimate interests.
- Withdrawal of consent: revoke consent given, without affecting the lawfulness of previous processing.
To exercise these rights, write to info@littlehomegirona.com indicating the right you wish to exercise and attaching a copy of your ID document. We will respond within a maximum of 1 month from receipt of the request.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) if you consider that the processing of your data infringes the regulations.
7. Bookings via Rentlio
When you book an apartment directly from our website, you are redirected to the Rentlio booking system. Rentlio acts as a data processor for Little Home Girona Apartments SL and processes your data only to manage the booking, payment and confirmation.
For more information, see the Rentlio privacy policy.
8. Bookings via Booking or Airbnb
If you book through Booking.com or Airbnb, these platforms act as data controllers and only transfer to us the data essential for service provision. To find out how they process your data, see:
9. Security measures
We apply appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of data, including HTTPS encryption on the site, restricted access to authorised personnel and periodic review of security procedures.
10. Modifications
This policy may be updated to adapt to regulatory or operational changes. The date of last update appears at the top of the document.