Casa Care Vacations respects your privacy and handles your personal data with care. This privacy policy explains what data we collect, why we collect it, who we share it with and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and Spanish law (Ley Orgánica 3/2018, LOPDGDD).

Last updated: August 2026.

1. Data controller

Casa Care Vacations, trading name of Servicios Integrales Casa Care Costa Blanca SL

NIF: B27548346 · Calle del Pit Blau 26, 03738 Xàbia (Jávea), Alicante, Spain

Email: info@casacarecostablanca.com

For any questions about this privacy policy or the processing of your data, you can contact us at the email address above.

2. What personal data we process

Depending on your relationship with us, we process, among other things:

• Identity and contact details: name, address, email address and telephone number.
• Identity documents: passport or ID details, required for the mandatory tourist registration.
• Booking and stay details: rented accommodation, arrival and departure date and number of guests.
• Payment details: data needed to process payments and the security deposit.
• Property owner details: contact details, property details and bank details for paying out rental income.
• Data via our website: data you enter in contact forms and technical data via cookies (see point 9).

3. Purposes and legal bases

We process your data only for clearly defined purposes, each based on a valid legal ground:

• Concluding and performing the rental agreement and managing the booking (performance of a contract).
• Managing and renting out properties on behalf of owners (performance of a contract).
• Complying with legal obligations, such as the mandatory tourist registration with the competent authorities and tax obligations (legal obligation).
• Processing payments, the security deposit and any damage (performance of a contract / legitimate interest).
• Answering questions via email or the contact form (legitimate interest).
• Sending information or offers, only when you have given consent (consent).

4. Mandatory tourist registration

As a provider of tourist accommodation, we are legally obliged to register certain guest data and pass it on to the competent authorities, among others via the traveller registration system. Providing this data is a legal requirement; without it we cannot confirm the stay.

5. Who we share data with

We never sell your data to third parties. We only share data when necessary, with:

• the owner of the rented property, insofar as necessary for performing the booking;
• service providers who support us, such as our booking and management system, payment providers, cleaning and key-management partners and our website hosting. We conclude data processing agreements with these parties;
• competent authorities, when we are legally obliged to do so.

6. Retention periods

We do not keep your data longer than necessary for the purposes for which it was collected, or for as long as we are legally required to. We keep booking and administrative data for the legal tax retention periods; we keep tourist registration data for as long as legally required. Data we process on the basis of your consent is kept until you withdraw that consent.

7. International transfers

In principle, your data is processed within the European Economic Area (EEA). When a service provider processes data outside the EEA, we ensure that appropriate safeguards apply, such as standard contractual clauses approved by the European Commission.

8. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Only staff and partners who need the data have access to it.

9. Cookies

Our website may use cookies to make the website function properly and to analyse its use. On your first visit we inform you about this and ask, where required, for your consent. You can manage or delete cookies via your browser settings.

10. Your rights

You have the right to:

• request access to the data we process about you;
• have incorrect data corrected;
• have your data deleted;
• restrict or object to the processing;
• receive your data in a portable format (data portability);
• withdraw any consent given at any time.

You can exercise your rights by sending an email to info@casacarecostablanca.com. We may ask you to confirm your identity. If you believe that we do not handle your data carefully, you have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es).

11. Changes to this privacy policy

We may amend this privacy policy from time to time. The most recent version is always available on our website, stating the date of the last change.

12. Contact

Do you have questions about this privacy policy or about your personal data? Please contact us at info@casacarecostablanca.com.