Privacy notice

DRAFT FOR OWNER REVIEW. The controller’s identity, legal bases, retention periods and service-provider arrangements must be confirmed before this policy is finalised.

Who handles your data

Controller: [FULL LEGAL NAME], [ADDRESS], [TAX IDENTIFICATION]. Contact for privacy requests: hello@bookandenjoy.com [CONFIRM MONITORING OF THIS ADDRESS]. Book and Enjoy is the website’s brand name, not a substitute for identifying its legal operator.

Information you provide

Enquiries may include your name, email, dates, number of guests, reason for staying and any optional pet or practical accessibility requests. Please do not send diagnoses, identity documents or payment-card details through these forms. Owner enquiries contain contact details and the property description you choose to provide. Accounts store registration details and saved apartments; newsletter requests store the submitted email address.

Purpose and legal basis

We use enquiries to respond to your request and discuss a possible stay or collaboration. Account information supports access and saved apartments. Technical information supports operation and protection against abuse. [CONFIRM THE APPROPRIATE LEGAL BASIS FOR EACH PURPOSE: requested pre-contractual steps, account service, legitimate security interests, or consent where required]. Reading this notice is not consent to every possible use of your data. A newsletter request is separate from an accommodation enquiry; automated marketing campaigns are not currently connected.

Access and retention

Requests are stored in the site’s administration area; email notifications direct the team there rather than reproducing sensitive form details. Hosting, email and maintenance providers may process information to deliver their services. [CONFIRM PROVIDERS, PROCESSING AGREEMENTS, INTERNATIONAL TRANSFERS AND SAFEGUARDS]. [SET RETENTION PERIODS FOR ENQUIRIES, ACCOUNTS, NEWSLETTER REQUESTS, SECURITY RECORDS AND BACKUPS].

Your choices and rights

You may contact the controller about access, correction, deletion, restriction, objection or portability, as applicable, and withdraw consent where processing relies on it. You can also raise a complaint with the Spanish Data Protection Agency at aepd.es. Identity verification may be needed to protect your information. [CONFIRM THE INTERNAL PROCESS FOR HANDLING THESE REQUESTS].