Legal information
Privacy Policy
How we process users’ personal data.
Last updated: 20 July 2026
1. Data controller
Controller: Daniel Paris
ID: 39938958X
Address: Carrer de Cambrils nº 3, 43202 Reus, Tarragona, España
Phone: +34 635 051 772
Email: reservas@stayliocostadaurada.com
Website purpose: information, promotion and booking of holiday rentals, collection of tourism tax where applicable, and extra packs linked to the stay.
2. Personal data we process
We may process identification and contact data (name, email, phone), booking data (dates, number of guests, reference), payment data needed to process the transaction via the card payment gateway (without storing the full card number on our servers), and limited browsing data (IP address, browser type, pages visited, and technical or analytics cookies).
If you also book through Airbnb or another external platform, processing on that platform is governed by its own privacy policy.
3. Purposes of processing
Manage bookings, payments, confirmations and guest communications.
Collect tourism tax and issue receipts.
Ensure the proper operation and security of the website.
Improve browsing experience and analyse site use in aggregate.
Respond to enquiries or information requests.
Comply with applicable legal obligations.
4. Legal basis
Processing is based, as applicable, on performance of a contract or pre-contractual steps, user consent, the controller’s legitimate interest in maintaining and improving the website, or compliance with legal obligations.
For non-essential cookies, we will request consent before activation.
5. Retention
We retain personal data for as long as needed for the purpose collected and thereafter for periods required by applicable law (including tax and accounting rules).
6. Recipients
We do not disclose personal data to third parties except where required by law or necessary to provide services (hosting, card payment gateway — e.g. Santander/Redsys, Stripe or another authorised provider —, transactional email, or other technical tools).
Bookings on external platforms involve independent processing by those platforms.
7. Your rights
You may exercise rights of access, rectification, erasure, objection, restriction of processing and portability where applicable.
You may withdraw consent at any time and lodge a complaint with the Spanish Data Protection Agency (AEPD).
To exercise your rights, contact us at reservas@stayliocostadaurada.com or +34 635 051 772, or at the address in section 1.
8. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Card payments are processed in the payment provider’s PCI DSS–certified environment.
