Who we are (Data Controller)


Carmen Tur (Sa Vinya · Casa de Campo)
NIF/DNI: 41461703V
Address: Sa Vinya, Diseminado Polígono 29, 3051 Cala d’Hort, PMV-803-1, 07839 Es Cubells, Balearic Islands, Spain
Email / WhatsApp: info@savinyacasadecampo.com · +34 607 241 589
We do not have a Data Protection Officer.

What personal data we collect

Booking & billing: name, postal/billing address, email, phone, country, dates of stay, party size, special requests, invoice/tax details (if needed), payment confirmations (via Stripe).

Guest registration (Spanish law): for all guests, full name, date of birth, nationality, ID document type and number (DNI/NIE/Passport), issuing country, and check-in date. For minors under 14, an ID number is not required.

Payment info: handled by Stripe; we do not store full card numbers.

Marketing & newsletter (optional):

  • If you subscribe to our “offers & news” newsletter, we collect your name, email address and, if you wish, your phone number to send occasional offers via WhatsApp.
  • We may also contact former guests once in a while by email or WhatsApp to invite them to subscribe formally to our newsletter. You can ignore the invitation or unsubscribe at any time.

Why we use your data (lawful bases)

  • Booking management (contract).
  • Compliance with Spanish hospitality law (guest registry) (legal obligation).
  • Payments, fraud prevention, property security (legitimate interests/contract).
  • Sending occasional information and discounts about Sa Vinya Casa de Campo:
    • to former guests (legitimate interests – keeping in touch with people who have already stayed with us);
    • to newsletter subscribers (consent – you choose to join the list and can withdraw consent at any time).

Guest registration (Spain)

To comply with Spanish regulations, we collect guest details and submit them to the authorities’ lodging system. We use Check-in Scan to securely collect your information online and transmit it to “Ses Hospedajes”. Registry data is retained only for the legally required period and then deleted.

Payments

Card payments are processed by Stripe. We receive payment confirmations and limited card details (e.g., last 4 digits) for reconciliation. Full card data is handled by Stripe on their systems.

Marketing: email, newsletter & WhatsApp

We may use your email and/or WhatsApp number to send you occasional discounts and news related only to Sa Vinya Casa de Campo, for example special offers for future stays.

  • Former guests: you may receive a small number of messages inviting you to subscribe to our newsletter of offers and updates.
  • Newsletter subscribers: if you fill in our MailerLite subscription form, we will send you occasional emails (and, if you gave your phone number and agreed, some offers via WhatsApp). Every newsletter email sent through MailerLite includes an “Unsubscribe” link.

You can exercise your right to object or withdraw consent at any time:

  • Email: click “Unsubscribe” in any email or write to info@savinyacasadecampo.com asking not to receive any more marketing messages.
  • WhatsApp: reply STOP (or “Unsubscribe”) or send us a message asking to opt out.

Once you object or unsubscribe, we will stop using your data for marketing purposes. We do not sell or trade your data.

Who we share data with

  • Check-in Scan (guest registry tool) → Ses Hospedatges (legal obligation).
  • Stripe (payment processing).
  • MailerLite (newsletter and email marketing provider, used to manage subscription forms, mailing lists and the sending of our newsletters).
  • IT/hosting providers strictly to operate our website and bookings.

We share only what’s necessary under appropriate data-processing terms.

International transfers

Our operations are based in the EU/EEA. If any provider (for example, Stripe or MailerLite) stores data outside the EEA, we rely on GDPR safeguards (e.g., Standard Contractual Clauses).

Data retention

  • Booking & billing records: retained for the period required by tax/accounting law.
  • Guest registry: kept only for the legal period and then deleted.
  • Marketing contacts and newsletter subscribers: kept until you unsubscribe, object to marketing or we no longer need the data for this purpose.

Your rights (GDPR)

You can access, rectify, erase, restrict, object to processing (including marketing), and exercise data portability, and you have the right to complain to the AEPD (Spanish Data Protection Agency).

To exercise your rights, contact info@savinyacasadecampo.com.

Security

We apply technical and organisational measures (encrypted transport, access control, limited retention). No method is 100% secure, but we work to protect your data.

You can access, rectify, erase, restrict, object to processing (including marketing), and exercise data portability, and you have the right to complain to the AEPD (Spanish Data Protection Agency).

To exercise your rights, contact info@savinyacasadecampo.com.

Security

We apply technical and organisational measures (encrypted transport, access control, limited retention). No method is 100% secure, but we work to protect your data.