Last updated: November 2026. This is a translation provided for information purposes; in the event of any discrepancy, the Spanish version shall prevail.
1. Data controller
Owner: CONTADERO DE AVENTURAS, S.L. · Tax ID (CIF): B85234151
Registered address: Ctra. de Beas, km 23,5 · 23293 Cortijos Nuevos (Jaén, Spain)
Email: info@contaderoaventuras.es · Phone: +34 648 183 026 / +34 953 100 988
Companies Register: Madrid, volume 24456, folio 33, section 8, sheet M-458628
Andalusian Tourism Register: VTAR/JA/[pendiente]
2. What data we process
We process the data you provide through the contact form, email, phone or WhatsApp (name, email, phone, dates and number of guests, and the content of your message) and, if you stay with us, the data needed to manage the booking and comply with the legal obligations to register guests.
3. Purposes and legal basis
- Answering enquiries and requests for quotes or availability. Basis: pre-contractual measures at the request of the data subject and consent (art. 6.1.b and 6.1.a GDPR).
- Managing the booking and the stay (payments, invoicing, communication with the guest). Basis: performance of a contract (art. 6.1.b GDPR).
- Guest registration and reporting to the Spanish law enforcement authorities, in accordance with Royal Decree 933/2021 and Organic Law 4/2015. Basis: legal obligation (art. 6.1.c GDPR).
- Accounting and tax obligations. Basis: legal obligation (art. 6.1.c GDPR).
- Sending information and offers about the accommodation, only if you have expressly authorised it. Basis: consent (art. 6.1.a GDPR), which you can withdraw at any time.
4. Retention period
Enquiries are kept for as long as necessary to answer them and for a maximum of one year if no booking is made. Guest data are kept for the duration of the relationship and, afterwards, for the legal periods (guest register: 3 years; tax and accounting records: up to 6 years). Data for commercial communications are kept until you withdraw your consent.
5. Recipients
We do not share your data with third parties except where required by law (law enforcement authorities, the Tax Agency, courts). Service providers who work for us (web hosting, email, accountancy, booking or payment platforms) may access them, under the corresponding data processing agreement.
6. International transfers
Some third-party services integrated into the website (for example, Google Maps or Google reviews) may involve transfers to the United States, covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to info@contaderoaventuras.es or by post to the address above, stating the right you wish to exercise. If you consider that we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Minors
Children under 14 may not provide us with personal data without the consent of their parents or guardians. Bookings must be made by adults.
9. Security
We apply appropriate technical and organisational measures to guarantee the security of your data and prevent its loss, alteration or unauthorised access, in accordance with the GDPR (EU) 2016/679 and Spanish Organic Law 3/2018 (LOPDGDD).
10. Social networks
If you interact with our social media profiles, we will process your data within each platform and in accordance with its own privacy policy, in order to answer your messages and keep you informed about our activity.
