Last updated: 31 March 2026
1. Who We Are
This website is operated by Estepona Life & Stay (“we”, “us”, “our”), providing holiday rental accommodation at Tranquil Sea Breeze Apartment, Las Mesas, Estepona, Spain. Our Junta de Andalucía tourist registration numbers are VFT/MA/503149 and VFT/MA/50314.
For any privacy-related enquiries, please contact us at: hello@visitestepona.info
2. What Information We Collect
We may collect and process the following personal data:
Information you provide directly: name, email address, phone number, and message content when you contact us via our website forms, email, or WhatsApp; booking dates, guest names, and payment details when you make a reservation; passport or ID details if required by Spanish law for guest registration (Parte de Viajero).
Information collected automatically: IP address, browser type, device information, and pages visited through cookies and similar technologies (see our Cookie Policy); referral source and browsing patterns on our website.
3. How We Use Your Information
We process your personal data for the following purposes and legal bases:
To manage bookings and provide our accommodation service (contractual necessity): processing reservations, communicating check-in details, managing your stay, and handling payments.
To comply with legal obligations (legal obligation): registering guests with Spanish authorities as required by Royal Decree 933/2021, retaining financial records for tax purposes, and responding to lawful requests from authorities.
To respond to your enquiries (legitimate interest): replying to messages submitted through our contact form, email, or WhatsApp.
To improve our website and services (legitimate interest): analysing website usage patterns, maintaining site security, and enhancing user experience.
To send occasional updates about the property or local area (consent): only if you have opted in via our newsletter signup. You can withdraw consent at any time.
4. Who We Share Your Data With
We may share your personal data with:
Booking platforms: Airbnb, if your booking originates through their platform (subject to their own privacy policy).
Spanish authorities: Policía Nacional or Guardia Civil, as required by law for guest registration.
Payment processors: to securely process booking payments.
Website hosting and analytics providers: who process data on our behalf under strict data processing agreements.
We do not sell your personal data to third parties.
5. International Transfers
Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, to service providers in the UK or US), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
6. How Long We Keep Your Data
Booking records and guest registration data: retained for 3 years after your stay, or longer if required by Spanish tax law (typically 4 years for financial records).
Contact form enquiries: retained for 12 months after your last communication.
Newsletter subscribers: retained until you unsubscribe.
Website analytics data: retained for up to 26 months in anonymised form.
7. Your Rights
Under the EU General Data Protection Regulation (GDPR) and the Spanish Ley Orgánica de Protección de Datos (LOPDGDD), you have the right to:
Access the personal data we hold about you. Rectify inaccurate or incomplete data. Erase your data (“right to be forgotten”) where there is no compelling reason to continue processing. Restrict processing in certain circumstances. Object to processing based on legitimate interests. Data portability — receive your data in a structured, machine-readable format. Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at hello@visitestepona.info. We will respond within one month.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es, or with the UK Information Commissioner’s Office (ICO) if you are a UK resident.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption on our website, secure password practices, and limiting access to personal data to those who need it.
9. Children
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when it was last revised. We encourage you to review this page periodically.
11. Contact
For any questions about this Privacy Policy or our data practices, please contact:
Estepona Life & Stay
Email: hello@visitestepona.info
Website: visitestepona.info