1. Data Controller
Identity: La Casa de Aza
Address: Plaza de la Fuente 1, 09463 Haza, Burgos, Spain
Phone: +34 642 753 485
Email: alojamientosaza@gmail.com
2. Personal Data We Process
At La Casa de Aza we may process the following personal data:
- Identification data: name, surname, ID/Passport
- Contact data: phone, email, postal address
- Booking data: stay dates, room preferences
- Browsing data: cookies and technical data from web visits
3. Purpose of Processing
We process your personal data for the following purposes:
- Managing accommodation and restaurant reservations
- Communicating with you to confirm reservations and handle inquiries
- Complying with legal obligations (traveler registration, billing)
- Improving our services and your experience on our website
- Sending commercial communications (only with your consent)
4. Legal Basis for Processing
The processing of your data is based on:
- Contract execution: to manage your reservation and provide our services
- Legal obligation: to comply with traveler registration and tax regulations
- Legitimate interest: to improve our services and ensure security
- Consent: for sending commercial communications and using non-essential cookies
5. Data Retention
Your personal data will be kept for as long as necessary to fulfill the purpose for which it was collected and to determine any responsibilities arising from said purpose and the data processing.
- Reservation data: during the business relationship and 5 additional years
- Tax data: 4 years (legal obligation)
- Traveler registration data: 3 years (legal obligation)
6. Data Recipients
Your data may be shared with:
- Competent authorities (National Police for traveler registration)
- Tax Administration (for compliance with tax obligations)
- Technology service providers (hosting, email) acting as data processors
We do not make international data transfers outside the European Economic Area.
7. User Rights
As a data subject, you have the right to:
- Access: know what personal data we process about you
- Rectification: request correction of inaccurate data
- Erasure: request deletion of your data when no longer necessary
- Objection: object to the processing of your data
- Restriction: request limitation of processing in certain circumstances
- Portability: receive your data in a structured format
- Withdraw consent: at any time, without affecting the lawfulness of prior processing
To exercise these rights, you can contact us at alojamientosaza@gmail.com indicating your request and attaching a copy of your ID document.
You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you consider that the processing of your data is not appropriate.
8. Data Security
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or accidental damage.
9. Changes
We reserve the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments, as well as industry practices. Changes will be published on this page with the last updated date.
10. Contact
For any questions related to the processing of your personal data, you can contact us at:
Email: alojamientosaza@gmail.com
Phone: +34 642 753 485
Address: Plaza de la Fuente 1, 09463 Haza, Burgos