Privacy Policy

In accordance with the General Data Protection Regulation (GDPR), we inform you that we will process your personal data for the purposes detailed below. Your data will be retained while the business relationship is maintained, unless you request its deletion, or for a maximum period of two years from the last confirmation of interest, or for the time necessary to comply with legal obligations. The company does not make automated decisions.

Data Controller

San Martín Tarifa S.L. (operating as Tarifa Chic)
B16811580
C/ Carnicería 11, 11380, Tarifa (Cádiz)
Email: [email protected]

Purpose

We process your data to:

• Provide the requested service and inform you about our products or services.
• Manage administrative and operational services necessary for service provision.
• Send commercial communications, subject to your prior consent.

Legal Basis

The processing of your data is based on:

• The execution of a contract for service provision.
• Your consent for commercial communications.
• Our legitimate interest in maintaining business relationships with our clients.

Recipients

Your data will not be disclosed to third parties unless there is a legal obligation. However, some of your data may be shared with third-party service providers who help us operate our website, manage reservations, and process payments. These providers include Lodgify, which acts as our booking and property management platform, ensuring compliance with GDPR regulations.

For more details, you can check Lodgify's Privacy Policy: https://www.lodgify.com/privacy-policy/

Additionally, payment transactions are securely processed through third-party payment providers such as Stripe and PayPal, which comply with GDPR and PCI DSS security standards.

International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). In such cases, we ensure that they provide an adequate level of data protection by signing Standard Contractual Clauses (SCCs) approved by the European Commission.

Lodgify, as our booking management platform, may store personal data on servers outside the European Economic Area (EEA). In such cases, Lodgify ensures an adequate level of data protection through the use of Standard Contractual Clauses (SCCs) approved by the European Commission.

Your Data Protection Rights

You may exercise the following rights:

• Access: Know what personal data we process about you.
• Rectification: Correct any incorrect or outdated data.
• Erasure: Request the deletion of your data when legally possible.
• Restriction: Limit the processing of your data under certain circumstances.
• Objection: Object to certain types of processing, such as direct marketing.
• Data portability: Request the transfer of your data to another entity.
• Withdraw consent: At any time for marketing communications or data processing based on consent.

If you have made a booking through our website, you can access or modify your reservation details through Lodgify’s guest portal. For additional requests regarding your personal data, please contact us at [email protected] with a copy of your ID for identification purposes.

If you believe your rights have been violated, you can file a complaint with the Spanish Data Protection Agency (AEPD): www.agpd.es.

Data Source

The data processed comes directly from the data subject or their legal representative.

Data Retention: How Long Do We Keep Your Data?

• Data related to contractual services: Retained for the duration of the contract and a minimum of five years after termination for legal compliance.
• Commercial communications: Retained until you revoke consent or exercise your right to object.
• Customer requests (information, complaints, etc.): Retained as long as necessary to process the request and for compliance with legal timeframes.

Once the required period has passed, your data will be properly blocked until it can be permanently deleted.

Security: How Do We Protect Your Data?

We implement strict security measures to protect personal data from loss, misuse, unauthorized access, and disclosure. However, users should be aware that security measures on the internet are not infallible. Our personnel follow strict privacy policies, and third-party providers must also comply with GDPR standards.

Social Media

Our social media profiles do not involve data processing beyond what the platform allows for corporate accounts. We may use these profiles to inform users about our activities, promotions, or updates, but we do not extract any data directly from social networks.

Cookies

Our website, powered by Lodgify, uses cookies to enhance user experience, personalize content, and analyze traffic. Some cookies may be set by Lodgify or third-party analytics and marketing providers.

Additionally, we share site usage information with our advertising and analytics partners, who may combine it with other data you provide or data they collect through their services.

Cookies are small text files used by websites to enhance user experience. We may store cookies on your device if they are strictly necessary for the site's operation. For all other types of cookies, we need your consent.

This website uses different types of cookies, some of which are set by third-party services. You can change or withdraw your consent at any time through our Cookie Policy.

For more information about how we handle personal data, please contact us at [email protected].