Privacy statement

1. Introduction

At Hacienda El Mirador, we highly value the privacy of our guests. This statement explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and Spanish national laws.

2. Data Controller

Hacienda El Mirador is the controller of your personal data. For any questions regarding your privacy or to exercise your rights, please contact us at: haciendaelmirador1991@gmail.com.

3. Data We Collect

To facilitate your stay and comply with legal requirements, we collect the following information:

  • Full name and contact details (email address, phone number, and home address).

  • Identity document details (passport or national ID card).

  • Payment and transaction information.

  • Booking dates and specific guest preferences.

  • Video footage from our security cameras in designated public areas.

4. Why We Process Your Data

We use your information for the following purposes:

  • Reservation Management: To confirm, manage, and communicate with you regarding your booking.

  • Legal Obligation: In accordance with Spanish law (Decree 93/2013 and Organic Law 4/2015), we are legally required to register all guests over the age of 14 with the local authorities.

  • Financial Administration: For invoicing, tax compliance, and internal bookkeeping.

  • Security: To ensure the safety of our guests, staff, and property through video surveillance.

5. Legal Basis for Processing

We process your data based on:

  • Contractual Necessity: To fulfill your booking and provide our hospitality services.

  • Legal Obligation: To comply with mandatory Spanish tourism and safety regulations.

  • Legitimate Interest: To maintain secure business records and protect the safety of our property and guests through CCTV.

6. Data Sharing and Third-Party Processors

We do not sell or lease your personal data. To ensure a professional and legal operation, we share your data with the following trusted partners:

  • MyTourist: Our Property Management System (PMS). They process your booking details, contact information, and payment status to manage your stay and invoicing.

  • Check-in Scan: A specialized service used to comply with Spanish security laws. This service securely processes your identity documents and automatically transmits the mandatory data to the Guardia Civil or Policía Nacional.

  • Local Authorities: As required by law, identity data is shared directly with Spanish national security forces.

7. Video Surveillance (CCTV)

For the safety of our guests and the protection of our property, Hacienda El Mirador is equipped with a closed-circuit television (CCTV) system.

  • Locations: Cameras are strategically placed at the main entrance gate, the house exterior, and the private parking area. No cameras are placed inside the Casas or in any areas where guests have a high expectation of privacy (such as the interior of the pool area or private terraces).

  • Purpose: The system is used exclusively for security purposes, crime prevention, and the protection of guest property.

  • Data Retention: Video footage is stored securely and is automatically overwritten after 30 days, unless a specific incident requires the footage to be retained for legal investigations.

8. Data Retention Personal data (excluding video footage) is stored for as long as necessary to fulfill the purposes mentioned above, or as required by statutory retention periods (such as tax laws and police registration regulations, which typically require a 3-year retention of guest records).

9. Your Rights

Under the GDPR, you have the following rights:

  • Access: The right to request a copy of the data we hold about you.

  • Rectification: The right to ask us to correct any inaccurate information.

  • Erasure: The right to request the deletion of your data (provided it is no longer required for legal or contractual obligations).

  • Portability: The right to receive your data in a structured, machine-readable format.

10. Security

We, along with our partners MyTourist and Check-in Scan, implement high-level technical and organizational security measures. Your personal details and document scans are encrypted and stored according to strict industry standards to prevent unauthorized access, loss, or alteration.

11. Cookies

Our website uses minimal cookies to enhance your browsing experience. We do not use tracking cookies for advertising purposes without your explicit consent.

12. Changes to this Statement

We reserve the right to update this Privacy Statement to reflect changes in our practices or legal obligations. The latest version will always be available on our website.