Privacy Policy

IN JUST 5 POINTS!

1. WHO WE ARE
   We are COSTA DEL SOL STAY, and we process your personal data as the data controller. This means we are responsible for how your data is used and protected.

2. WHAT WE USE YOUR DATA FOR
   We use your data, among other purposes, to manage your user registration, handle your booking, respond to your inquiries, and, if you wish, to send you personalized communications.

3. WHY WE USE YOUR DATA
   We are legally entitled to process your data for several reasons. The main reason is that we need to process it in order to perform the contract you enter into with us when you register, make a booking, or use our services. Other reasons include our legitimate interest in responding to your queries, or the consent you provide to receive newsletters or promotional information.

4. WHO WE SHARE YOUR DATA WITH
   We share your data with service providers and external partners who support us in delivering our services, all of whom are located within the European Union.

5. YOUR RIGHTS
   You have the right to access, correct, or delete your personal data. In certain cases, you also have the right to object to its use or request its portability, as explained in detail below.

You can read our full Privacy Policy below to fully understand how we use your personal data and what rights you have regarding it.

BEFORE WE BEGIN…

In this Privacy Policy, you’ll find all relevant information about how COSTA DEL SOL STAY handles the personal data of our customers and users who interact with us.

We are transparent about what we do with your personal information so that you can clearly understand how and why we use it, and what rights you have over it. This Privacy Policy is permanently available for consultation, and you will also find specific data protection information whenever you interact with us.

WHO IS RESPONSIBLE FOR YOUR DATA?

In compliance with Article 10 of Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE), the General Data Protection Regulation (EU) 2016/679 (GDPR), and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that the data controller is:

Company Name: Viagel Guadalajara S.L.U.
C.I.F.: B-19165935
Address: C/ Molina de Aragón, 1, C.P. 19003, Guadalajara, Spain
Phone: +34 949 25 46 15
Email: info@costadelsolstay.com
Wholesale–Retail License: CICLM 19070 M/m

Apartment Operation Licenses:
H-MA01094
VUT/MA/79483

WHAT DO WE USE YOUR PERSONAL DATA FOR?

COSTA DEL SOL STAY processes personal data provided by interested parties for the following purposes:

• Booking management: To manage your reservations or the contracting of our services, whether online or in person, and to process payments in compliance with Royal Decree 933/2021, which regulates record-keeping obligations for accommodation and vehicle rental providers.

• Responding to requests: To send you the information you request.

• Promotional activities: To organize and manage contests, sweepstakes, or other promotional activities.

• Legal compliance: To provide information to authorities or third parties when required for audits, invoicing, contracts, or claims.

• Website browsing: To enable and improve access, navigation, and use of our website and digital services.

• Service improvement and security: To maintain, improve, and develop our services, protect the security of your data, and prevent fraud.

• Social media: We maintain profiles on various social networks. When you interact with these platforms or their messaging features, we may collect information about your social media account. Each network defines its own privacy terms; please review them carefully before using these platforms.

• Profiling: We do not perform automated profiling or decision-making based on user data. If this changes in the future, we will inform users in advance.

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal grounds depend on the purpose for which your data is processed:

1. User registration: To fulfill the terms governing the use of the website and manage your account. If you register via a social network, processing is based on your consent.

2. Booking management: To perform the booking contract between you and us. Certain optional data uses, such as saving payment details for future reservations, are based on your consent. We also have a legitimate interest in detecting and preventing fraud.

3. Customer service: To respond to your requests or claims. When inquiries relate to your booking, processing is necessary for contractual performance; otherwise, it is based on legitimate interest or legal obligation.

4. Marketing: Based on your consent when you subscribe to receive promotional communications or participate in marketing activities.

5. Website usability and quality: Based on our legitimate interest in analyzing and improving user experience and service quality.

HOW LONG DO WE KEEP YOUR DATA?

The retention period depends on the purpose of processing:

1. User registration: While your account remains active.

2. Bookings: As long as necessary to manage your reservation and handle any associated claims or refunds.

3. Customer service: For as long as needed to address your request.

4. Marketing: Until you unsubscribe or withdraw your consent. For promotions, up to six (6) months after completion.

5. Usability analysis: During the duration of specific surveys or until browsing data is anonymized.

6. Legal obligations (Royal Decree 933/2021): For three (3) years.

WHO HAS ACCESS TO YOUR DATA?

Your data is protected through technical and administrative safeguards to prevent unauthorized access, disclosure, or misuse.

Access to your personal information is limited to:

• Authorized employees who understand its permitted uses.

• Competent public or judicial authorities when legally required.

• External service providers who support us in delivering requested services.

These providers are bound by contract to use your data only for the agreed purposes and to delete or securely block it once their services end.

If any providers are located outside the EU, we ensure that equivalent data protection measures are in place in accordance with applicable regulations.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

We are committed to respecting the confidentiality of your data and ensuring that you can exercise your rights free of charge by contacting info@costadelsolstay.com, indicating the reason for your request and the right you wish to exercise.

If necessary, we may ask for proof of identity. You have the right to:

• Request access to the personal data we hold about you.

• Request correction of inaccurate or incomplete data.

• Request deletion of your data when it is no longer needed or if consent is withdrawn.

• Request restriction of processing in certain circumstances.

• Withdraw consent at any time.

• Request data portability when processing is based on consent or a contract.

• Object to processing based on legitimate interest.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php).

PROVIDING THIRD-PARTY DATA

If you provide personal data belonging to third parties, you confirm that you have informed them about how and why their data will be processed by us.

CONFIDENTIALITY AND DATA DESTRUCTION

Professional secrecy: COSTA DEL SOL STAY and all collaborating entities are committed to maintaining confidentiality regarding any information accessed during service provision. This information will always be treated as confidential and used solely for the contracted services.

Document destruction: To ensure confidentiality, COSTA DEL SOL STAY will destroy all confidential information once it is no longer required for its intended purpose, unless legal obligations require retention. If you wish to retain original documents or copies, you must request them before destruction.

DURATION AND CHANGES TO THIS PRIVACY POLICY

COSTA DEL SOL STAY reserves the right to modify this Privacy Policy at any time by publishing updates on the website. Changes may include modifications, deletions, or additions to services or content without prior notice.

The applicable version is the one published at the time of access. We recommend reviewing this policy periodically.

COSTA DEL SOL STAY may also suspend or terminate access to the website content at any time without prior notice and without entitlement to compensation.

Document drafted and prepared by PROTECTION REPORT S. S.L., which reserves the right to take legal action against anyone who copies or unlawfully uses its content.

Last updated: October 17, 2025