Privacy policy

[Draft based on how this website works. Fill in the bracketed details, have it reviewed by a lawyer or gestor in Spain, and delete this note before launch.]

This policy explains how SOLiSRA handles personal data when you visit this website, contact us or stay with us, in line with the EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 on Data Protection (LOPDGDD).

Who is responsible for your data

• Data controller: [LEGAL ENTITY NAME] (SOLiSRA)
• NIF/CIF: [NIF/CIF]
• Address: [REGISTERED ADDRESS]
• Privacy contact: info@solisra.com

What this website does and does not collect

This website has no contact forms, user accounts, advertising or tracking cookies, and it never asks you to type in personal details. It only processes:

• Technical data needed to deliver the site securely, such as your IP address, browser type and the pages requested. This is handled by our hosting provider, Cloudflare (see below).
• Your language choice, saved in your own browser so the site opens in the same language next time (see our Cookie policy).
• [If enabled: anonymous visit statistics from Cloudflare Web Analytics, which does not use cookies or identify you.]

When you contact us on WhatsApp

The WhatsApp buttons open WhatsApp with a message prepared for you; nothing is sent until you press send. If you write to us, we receive your name, phone number and messages, and use them to answer your questions and, if you wish, to arrange your stay. WhatsApp is provided by WhatsApp Ireland Ltd (part of Meta) under its own terms and privacy policy.

When you book

• Through Airbnb: Airbnb collects your booking and payment details as an independent data controller under its own privacy policy, and shares with us what we need to host you, such as your name, dates, number of guests and messages.
• Directly with us on WhatsApp: we use the contact, booking and payment details you give us to manage your booking, payments and stay.

Guest registration required by law

Spanish law (Royal Decree 933/2021) requires accommodation providers to record certain details of every guest, such as name, identity document, nationality and date of birth, and to report them to the Ministry of the Interior. We collect these details before or at check-in, use them only for this legal purpose and keep them for the period the law requires (currently three years).

Why we use your data (legal bases)

• To answer your questions and to arrange or provide your stay: steps taken at your request and performance of a contract (Article 6.1.b GDPR).
• To register guests and keep tax and accounting records: legal obligation (Article 6.1.c GDPR).
• To keep the website secure and working: our legitimate interest (Article 6.1.f GDPR).

We do not use your data for automated decisions or profiling, and we never sell it.

Who else receives your data

• Cloudflare, Inc., our hosting and security provider, which processes technical data on our behalf.
• Airbnb and WhatsApp, as described above, when you choose to use them.
• Google, if you choose to show the map on a property page.
• [Your bank or payment provider, for direct-booking payments.]
• The Spanish authorities, for guest registration, and our tax advisers or accountants where needed.
• [Other service providers, such as cleaning or check-in staff, who receive only what they need to prepare your stay.]

International transfers

Cloudflare and Meta may process data outside the European Economic Area, including in the United States. Where this happens, the transfer is protected by appropriate safeguards, such as the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.

[If fonts are still loaded from Google Fonts: our pages load typefaces from Google, which receives your IP address when you visit. Delete this paragraph once the fonts are hosted on our own site.]

How long we keep your data

• WhatsApp enquiries that do not lead to a booking: up to [12 months].
• Booking records: for as long as needed to provide your stay, and then for the periods required by tax and commercial law (generally four to six years).
• Guest registration data: three years, as required by law.
• Technical server data: for the short periods set by Cloudflare for security and performance.

Your rights

You can ask us at any time to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. Write to info@solisra.com and tell us which right you want to exercise; we may ask you to confirm your identity. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es.

Children

This website is not aimed at children under 14. Bookings must be made by adults.

Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version.