This website (casamalaga.eu) is operated by the owner of CasaMálaga, a private holiday rental property located in Málaga, Andalucía, Spain. For any data-related enquiries, please contact us at:
As the property is based in Spain, this policy is governed by the EU General Data Protection Regulation (GDPR) (Regulation 2016/679) and the Spanish Ley Orgánica de Protección de Datos y Garantía de los Derechos Digitales (LOPDGDD).
This website is a static informational site. We do not operate our own booking system or contact form. The data we may collect or process is limited to:
We do not use analytics tools (such as Google Analytics), run advertising, or track visitors across other websites.
Where we process personal data, we rely on the following legal bases under GDPR Article 6:
This website uses a small number of third-party services. Each processes data under their own privacy policies:
Under Spanish law (Royal Decree 933/2021), all tourist accommodation operators in Spain are required to collect and register guests' personal data — including full name, nationality, document type and number, and date of birth — and submit it to the Spanish authorities within 24 hours of check-in.
This data is collected at check-in, processed solely for legal compliance, and is not used for any marketing purpose. Retention is governed by the applicable statutory periods.
As a data subject under EU law, you have the following rights. To exercise any of them, contact us at hello@casamalaga.eu.
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data, where no legal obligation requires us to keep it.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests.
Request that we limit processing of your data in certain circumstances.
You also have the right to lodge a complaint with the Spanish data protection authority: Agencia Española de Protección de Datos (AEPD).
This website does not use cookies for tracking, analytics, or advertising. The only cookies that may be set are technical session cookies placed by embedded third-party content (such as the OpenStreetMap iframe). These are not used to identify you and are not accessible by us.
We take reasonable technical and organisational measures to protect personal data. The website is served over HTTPS. Direct communications (email, WhatsApp) are encrypted in transit by the respective platforms.
In the unlikely event of a data breach that risks your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33.
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the website after changes are posted constitutes acceptance of the updated policy. For material changes, we will notify guests who have an active booking.
For any questions about this privacy policy, please contact us at hello@casamalaga.eu.