PRIVACY POLICY

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), Crisrentsan, S.L. informs users about the processing of their personal data through this website.

Browsing this website implies full acceptance of these conditions and the Cookie Policy. If you do not agree with them, you may contact us through the contact details provided on this website.

The current version of this Privacy Policy is the only one applicable while using this website until it is replaced by a new version.

For more information regarding personal data protection, you may consult the website of the Spanish Data Protection Agency (AEPD): https://www.aepd.es.

1. Data Controller

Data Controller: Crisrentsan, S.L.
Tax Identification Number (NIF): B22937387

2. Data We Collect

The personal data that may be collected through contact forms, information requests, booking requests, or any other communication channel available on this website may include:

  • Full name.

  • Email address.

  • Contact telephone number.

  • Preferred stay dates.

  • Company or organization from which the enquiry is made, where applicable.

When a booking, reservation agreement, or service contract is formalized, we may also request:

  • Identity document number (ID card, passport, or equivalent identification document).

  • Tax or billing address.

  • Any other information required to comply with legal, tax, administrative, or tourism regulations.

We will only request the personal data strictly necessary to manage enquiries, bookings, reservations, and the services provided.

3. Purpose of Processing

The personal data provided will be processed for the following purposes:

  • Managing enquiries, information requests, and availability requests.

  • Processing and managing accommodation reservations.

  • Communicating with guests before, during, and after their stay when necessary for the proper provision of services.

  • Preparing quotations and proposals related to the services offered by the establishment.

  • Complying with legal obligations arising from tourism, tax, accounting, administrative, and security regulations.

  • Improving the quality of customer service and the user experience.

Personal data will be retained for as long as necessary to fulfill the purposes described above and, subsequently, for the periods required by applicable legislation.

4. Legal Basis for Processing

The legal basis for processing personal data is:

  • The consent provided by the data subject when voluntarily submitting their personal data.

  • The implementation of pre-contractual measures requested by the data subject when requesting information or availability.

  • The performance of a contract resulting from a reservation, booking, or stay at the accommodation.

  • Compliance with legal obligations applicable to Crisrentsan, S.L.

5. Disclosure of Data to Third Parties

Personal data will not be disclosed to third parties except in the following circumstances:

  • When required by law.

  • When necessary for managing reservations, payments, or services related to the stay.

  • When necessary for the provision of technological services related to the accommodation business, such as booking engines, property management systems, web hosting providers, payment processors, or email service providers, acting as data processors on behalf of Crisrentsan, S.L.

In all cases, appropriate measures will be adopted to ensure the security and confidentiality of personal data.

No international transfers of personal data will be carried out unless there is a lawful basis for doing so and the data subject is informed beforehand.

6. Cookies

This website uses its own and/or third-party cookies to improve the browsing experience and analyze website usage.

Upon accessing the website, users will be informed about the use of cookies through a cookie banner.

Detailed information regarding the use of cookies can be found in our Cookie Policy.

7. Data Subject Rights

Data subjects may exercise the following rights at any time:

  • Right of access.

  • Right to rectification.

  • Right to erasure.

  • Right to object.

  • Right to restriction of processing.

  • Right to data portability.

  • Right to withdraw consent at any time.

To exercise these rights, data subjects may contact the Data Controller through the contact details provided on this website.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they believe that the processing of their personal data does not comply with applicable regulations.

8. Data Security and Accuracy

Crisrentsan, S.L. implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of personal data.

However, users should be aware that no Internet security system is entirely immune to potential unauthorized access.

Users guarantee that the information provided is true, accurate, and up to date and are responsible for any damage or loss resulting from the provision of false, inaccurate, or outdated information.

9. Changes to this Privacy Policy

Crisrentsan, S.L. reserves the right to modify this Privacy Policy in order to adapt it to legislative developments, case law, or changes in its business activities.

The version published on this website at any given time shall be considered the current version.

Last updated: June 2026