We hold what you send us, and not much else.
There is no form on this site, no account and no newsletter. What exists is what you choose to write to us, what a booking needs, Vercel's cookie-free page counts and, if you separately accept it, Google Analytics measurement.
Who holds it
The person named here decides what is done with your data and answers for it. Anything on this page can go to the email address below, and it reaches them rather than a department.
Dan Herold
Camino del Volcán L, 29, 35571 Mácher, Tías, Las Palmas
What is held, and where it came from
Nothing is collected by filling anything in here, because there is nothing to fill in. The sources of data are described below.
What you send us. If you write, call or message, we hold what you chose to say and the address you said it from — for as long as it takes to answer, and afterwards as part of the record of a letting if one follows.
What a booking needs. Names, dates, contact details and payment particulars are taken by Beds24's booking system at the moment you book, and held there on our behalf rather than on this site, which has no database of any kind.
How the site is used. Page views are counted in aggregate by Vercel, who serve it. That measurement puts nothing on your device and does not identify you: it says how many people read a page, not who.
With your separate analytics permission, Google Analytics 4 also receives information about pages viewed, site interactions, your browser and device, and identifiers from cookies with the _ga prefix. This measurement is separate from the booking calendar and Vercel's cookie-free counts.
Why, and on what basis
To answer you, and to prepare and carry out the letting. That is the contract you are entering into, or the steps leading to it — Art. 6.1.b of the GDPR.
To keep the site working and to know roughly how much it is used, which is our own legitimate interest in running it at all, weighed against how little an aggregate count reveals about anyone — Art. 6.1.f.
To do what Spanish law requires of a holiday let, which includes keeping accounting and tax records and reporting guests' details to the authorities — Art. 6.1.c. That last one is an obligation rather than a choice, and no guest can be exempted from it.
To understand visits and improve the site using Google Analytics, only with your consent — Art. 6.1.a of the GDPR. Analytics does not load before you accept it. You can withdraw that consent in the cookie preferences at any time; collection then stops and this site's analytics cookies are deleted. Withdrawal does not affect the lawfulness of processing before it.
Who else sees it
Beds24, whose booking system holds the booking and does so on our instructions. Vercel, who serve this site. The authorities, where a law requires it — chiefly the guest report above and the tax office.
Google receives the analytics data only if you allow Google Analytics. Its privacy policy describes its handling of data.
Nothing is sold, rented or handed to an advertising network. Google Analytics is used for site measurement, not advertising: advertising storage, advertising user data and advertising personalisation remain denied, and advertising signals are disabled.
Whether it leaves Europe
Beds24 is a European operation working under German law, so a booking stays inside the EU. Vercel is a company in the United States, and serving this site means your browser's request reaches them; that transfer runs on the standard contractual clauses their data-processing terms provide.
If you allow Google Analytics, its processing may involve transfers outside the EU, including to the United States. Google Analytics is optional and is kept off if you do not consent.
For how long
An enquiry that comes to nothing is kept while it might still turn into a stay, and then deleted. A booking is kept for the stay and afterwards for the periods Spanish tax and accounting law fix, which run to several years and are not ours to shorten.
Vercel's aggregate page counts are attached to no one and are not kept as a record of anybody.
Google Analytics cookies on this site expire one year after being set, without renewal on later visits, and are deleted if you withdraw analytics consent. The retention period for data in the Google Analytics account depends on its settings; the one-year cookie lifetime does not determine that period.
What you can ask for
A copy of what is held about you. A correction. Deletion. That a use stops or is limited. The data in a form you can take elsewhere. Write to the email address above and say which — no particular wording is needed, you do not have to give a reason, and it costs nothing.
You are also entitled to complain to the Spanish data-protection authority. We would rather you came to us first, but that is a preference and not a condition.
Cookies
Beds24 sets its booking cookie when you allow automatic calendar loading or explicitly open it. Google Analytics sets cookies with the _ga prefix only after separate analytics consent. The two answers are stored separately on your device and nowhere else. You can change either in the cookie preferences.