Privacy policy
Controller and information collected
Contact the controller of Camarón Suite at camaronsuite@gmail.com; full identification is provided only in the legal notice. We process your name, email, optional phone number, country and the information required for compulsory traveller registration. Registration information is collected through the registration service, not the public booking form. Stripe handles payment details; we do not store full card numbers.
Purposes and legal bases
We manage enquiries, bookings, payments and guest support to perform a contract or take pre-contractual steps (GDPR Art. 6(1)(b)). Traveller registration, accounting and tax records are legal obligations (Art. 6(1)(c)). Security and fraud prevention rely on legitimate interests (Art. 6(1)(f)). We do not use your information for advertising without specific consent.
Retention
Booking data is retained while managing your stay and for the applicable legal periods afterwards: accounting records for up to 6 years and tax records normally for 4 years. Traveller registers are kept for 3 years under the applicable rules. Data is then deleted or restricted as required. Enquiries without a booking are kept only as necessary to respond and address potential liabilities.
Recipients and service providers
We use Stripe for payments, Lovable Cloud for hosting and database services, the configured email service when emails are sent, and Partee for traveller registration. Providers may act as independent controllers depending on their service. Legally required information is shared with the authorities. Transfers outside the EEA use GDPR safeguards such as adequacy decisions or standard contractual clauses. We do not sell personal data.
Your rights
Request access, correction, erasure, objection, restriction or portability, or withdraw consent where applicable, by emailing camaronsuite@gmail.com. Proportionate identification is requested only when necessary. You may complain to the Spanish Data Protection Agency (aepd.es).