Casa Vidana – Holiday accommodation
1. Data Controller
The controller responsible for processing the personal data collected through this website and Casa Vidana’s services is:
- Owner: María Rosario Bedmar Sánchez
- Tax ID/ID number: 52156208M
- Address: Calle La Oliva, 6, 38280 Tegueste, Santa Cruz de Tenerife, Spain
- Email: hola@casavidana.com
- Telephone: +34 618 188 048
- Website: https://casavidana.com
2. Applicable Legislation
Personal data will be processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights, and any other applicable legislation.
3. Personal Data We Process
Casa Vidana may process the following categories of data:
- Identification and contact details: name, surname, identity document, nationality, address, telephone number and email address.
- Booking and stay details: dates, number of guests, accompanying guests, preferences, communications and incidents.
- Traveller registration data: information required by the regulations applicable to accommodation providers.
- Financial and billing information: amounts, payment method and status, and the information required to issue receipts or invoices.
- Information provided in enquiries: information voluntarily included in forms, emails, telephone calls or other means of contact.
- Technical and browsing data: IP address, device, browser, technical logs and data obtained through cookies, according to the consent preferences selected.
Complete bank card details are processed by the authorised payment providers and are not stored directly by Casa Vidana.
4. Source of the Data
Data may be obtained:
- Directly from the data subject through forms, bookings, email, telephone or other communication channels.
- From the person responsible for a booking when they provide information about accompanying guests.
- From external booking platforms, such as Airbnb or Booking.com, when the booking is made through them.
- From payment or booking-management providers in relation to the status of a transaction.
- Through cookies and similar technologies, where necessary or where consent has been given.
5. Purposes of Processing
Personal data will be processed for the following purposes:
- Responding to enquiries, requests for information and communications.
- Checking availability and managing and confirming bookings.
- Providing the accommodation service and dealing with incidents during the stay.
- Managing payments, refunds, invoicing and accounting.
- Complying with legal obligations concerning the registration and reporting of traveller information.
- Complying with tax, accounting, administrative and security obligations.
- Preventing fraudulent use and protecting the website and its systems.
- Analysing and improving the operation of the website where consent has been given or where legally permitted.
- Sending marketing communications only where express consent has been given.
6. Legal Bases for Processing
The legal bases that allow the processing of personal data are:
- Performance of a contract or steps taken prior to entering into a contract: managing enquiries, availability, bookings, payments and the provision of accommodation.
- Compliance with legal obligations: traveller registration, invoicing, accounting, tax obligations and responding to requests from the authorities.
- Consent: non-essential cookies, marketing communications and other processing activities that require it.
- Legitimate interests: website security, fraud prevention, handling complaints and defending legal rights, while always respecting the rights of the data subjects.
Consent may be withdrawn at any time without affecting the lawfulness of any processing carried out before its withdrawal.
7. Mandatory Information
Information marked as mandatory is required to manage an enquiry, formalise a booking or comply with a legal obligation. If this information is not provided, Casa Vidana may be unable to respond to the enquiry, confirm the booking or provide the requested service.
8. Recipients of Personal Data
Where necessary, personal data may be disclosed or made accessible to:
- Law enforcement agencies and other competent authorities, in order to comply with traveller registration and reporting obligations.
- Tax authorities, courts and other authorities where there is a legal obligation.
- Payment providers, solely for the purpose of managing payments and refunds.
- Booking platforms when the booking has been made through them.
- Providers of web hosting, email, forms, booking management, technical support, analytics or maps, which will act in accordance with the legally required safeguards.
- Advisers or other professionals where necessary to comply with legal obligations or defend legal rights.
Casa Vidana does not sell or disclose personal data for commercial purposes.
9. International Data Transfers
Some technology providers may process data outside the European Economic Area. Where international data transfers take place, they will be carried out under adequacy decisions, standard contractual clauses or other safeguards recognised by data-protection legislation.
10. Data Retention
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and subsequently for the periods required to address any potential legal liabilities.
- Enquiries will be retained while they are being dealt with and for the time necessary to address any potential liabilities.
- Booking, payment and billing information will be retained for the applicable tax, accounting and statutory periods.
- Traveller information will be processed and reported for the periods and in the manner required by accommodation regulations.
- Data processed on the basis of consent will be retained until that consent is withdrawn.
- The retention periods for cookies are explained in the Cookie Policy.
11. Rights of Data Subjects
Data subjects may exercise the following rights:
- Access to their personal data.
- Rectification of inaccurate or incomplete data.
- Erasure of their data where applicable.
- Restriction of processing.
- Objection to processing.
- Data portability where applicable.
- Withdrawal of consent at any time.
To exercise these rights, you may write to hola@casavidana.com, indicating the right you wish to exercise and providing only the information necessary to verify your identity.
You may also lodge a complaint with the Spanish Data Protection Agency if you believe that the processing of your personal data does not comply with the applicable legislation.
12. Data Relating to Accompanying Guests and Minors
The person making a booking and providing information about accompanying guests must ensure that the information is accurate and that those individuals have been informed about the processing of their personal data.
Bookings must be made by adults. The personal data of accompanying minors will be processed only where necessary to manage the stay or comply with legal traveller-registration obligations.
13. Security
Casa Vidana applies reasonable technical and organisational measures to protect personal data against loss, alteration, unauthorised access or unlawful processing. However, no system connected to the Internet can guarantee absolute security.
14. Automated Decision-Making
Casa Vidana does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect data subjects.
15. Cookies and External Services
The website may use external services, such as analytics tools or maps. Non-essential services and cookies will be activated according to the consent preferences selected by the user.
Detailed information is available in the Cookie Policy, where users may also modify their preferences.
16. Changes to This Policy
Casa Vidana may update this Privacy Policy to reflect legal or technical changes or changes relating to its services. The version published on this page will be the version in force at any given time.
Last updated: 21 September 2026.