Summary
- This website has no forms, does not ask you to register and does not use analytics or advertising tools.
- The Google map only loads if you press “Show map” on the contact page.
- We only process your data if you write to us, call us or book, and when the law requires us to register our guests.
Data controller
- Controller
- LAAN Gestiones y Servicios Inmobiliarios, S.L. (CIF B16352783). Further details in the legal notice.
- Contact
- reservaslaanarcos@gmail.com · +34 682 175 008
What data we process and why
If you write to us or call us
We process the data you give us (for example, your name, your email address or your phone number, and whatever you tell us) in order to answer your enquiry. If you message us on WhatsApp (for example, to ask about one of our experiences), we also receive your phone number and your messages.
Draft · pending legal review
Legal basis: if you ask us about a stay or a booking, taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For other enquiries, our legitimate interest in answering those who write to us or call us (Article 6(1)(f) GDPR).
Retention: as long as needed to answer you. If you do not go on to book, we delete your messages no later than [[COMPLETAR: (inglés) plazo, por ejemplo un año]] after the last contact. If you book, they are kept as part of the booking (see “If you book”).
If you book
Bookings are made through the AvaiBook booking engine, which is shown within the Booking page. The data the engine asks for is used to manage your booking and payment.
Draft · pending legal review
AvaiBook (AvaiBook On-line, S.L.U., CIF B99279622, Madrid) processes your booking data on our behalf, as a data processor, under the contract required by Article 28 GDPR. Card payments are processed by PAYCOMET, a payment institution registered with the Bank of Spain.
Legal basis: the performance of the accommodation contract (Article 6(1)(b) GDPR) and, for invoicing and accounting, compliance with legal obligations (Article 6(1)(c) GDPR). The data the engine asks for is needed to process the booking: without it we cannot make it.
Retention: for the duration of the booking and your stay. Afterwards we keep it restricted, only to meet legal obligations and deal with possible claims. Business records are kept for six years (Article 30 of the Spanish Commercial Code). For tax purposes, until the tax obligations become time-barred, generally four years (Articles 66 to 70 of the Spanish General Tax Act). [[COMPLETAR: (inglés) asesor: se cobra con la pasarela de AvaiBook, cuyas condiciones obligan a guardar al menos 10 años los justificantes y las condiciones aceptadas de los cobros con tarjeta; decidir si se añade este plazo y con qué base jurídica]]
Guest registration
When you stay with us, the law requires us to record your identity details and the details of your stay and to send them to the Spanish Ministry of the Interior (Royal Decree 933/2021 of 26 October).
Draft · pending legal review
How we collect it: through AvaiBook’s online registration (Fast Check-in), a form you fill in before you arrive. We send it to the Ministry of the Interior through its SES.HOSPEDAJES platform. AvaiBook and its provider Chekin send it on our behalf, as data processors. [[COMPLETAR: (inglés) ¿pide el Fast Check-in foto del documento de identidad? Si la pide, decirlo aquí y cuánto tiempo se guarda]]
Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR), laid down in Article 25 of Organic Law 4/2015 on the Protection of Public Safety and in Royal Decree 933/2021.
It is mandatory: the law requires us to ask you for it. If you do not provide it, we cannot register your check-in. [[COMPLETAR: (inglés) asesor, confirmar esta consecuencia]]
Retention: three years from the end of your stay (Article 5(3) of Royal Decree 933/2021). After that, we delete it.
When you visit the website
As any web server does, the provider that hosts this website (Cloudflare) receives your IP address and the technical details of each visit (browser, page requested, time) in order to display the website and protect it from attacks. We do not use this data to find out who visits the website.
Draft · pending legal review
Legal basis: our legitimate interest in displaying the website and protecting it from attacks (Article 6(1)(f) GDPR). Cloudflare, Inc. acts as a data processor under its data processing agreement (Cloudflare Data Processing Addendum (opens in a new tab)), which forms part of its terms of service.
Retention: We do not keep logs of visits.
Who else receives the data
- AvaiBook: booking engine and payments.
- Google: the email address reservaslaanarcos@gmail.com is a Gmail account. If you load the map, Google Maps receives data about your browsing.
- WhatsApp (Meta): if you message us on WhatsApp, your messages go through its service.
- Cloudflare: website hosting.
- Spanish Ministry of the Interior: guest registration, as required by law.
Draft · pending legal review
- [[COMPLETAR: (inglés) nombre de la gestoría, si ve datos de huéspedes]] (accountancy firm): keeps the accounts and handles tax obligations, as a data processor.
- Booking platforms (Booking.com, AlohaCamp and Airbnb): if you book through one of them, it sends us the data needed for your stay. Each platform tells you how it processes your data.
- Public authorities and courts, where required by law (for example, the Spanish Tax Agency).
Transfers outside the European Economic Area
Draft · pending legal review
Some of our providers may process data in the United States: Google (our email address is a Gmail account, and Google Maps if you load the map) and Cloudflare, Inc. (website hosting). Google LLC and Cloudflare, Inc. participate in the EU-U.S. Data Privacy Framework, which the European Commission considers to provide an adequate level of protection (Implementing Decision (EU) 2023/1795). You can check this at dataprivacyframework.gov (opens in a new tab). They also apply the European Commission’s standard contractual clauses where necessary.
[[COMPLETAR: (inglés) AvaiBook, según lo que responda: si trata los datos solo en el Espacio Económico Europeo o con qué garantías los transfiere]]
Your rights
You can ask to access your data, have it rectified or erased, object to or restrict its processing, and request its portability. If you have given your consent to anything, you can withdraw it at any time. To exercise your rights, write to us at reservaslaanarcos@gmail.com.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es (opens in a new tab)).
Draft · pending legal review
We will reply within one month, which may be extended by two further months where necessary, taking into account the complexity and number of requests (Article 12(3) GDPR). Exercising your rights is free of charge. Only if we have reasonable doubts about your identity will we ask you for the information strictly needed to confirm it (Article 12(6) GDPR). We will not ask you for a copy of your identity document unless it is necessary.