Skip to content
Back to home page

Privacy Policy

1. Data controller

The data controller for personal data collected through this website is Casa Andaina, located at Rua Mercado, 27200 Palas de Rei, Lugo, Spain. Contact email: casandaina@gmail.com. Galicia Tourism Registry: VUT-LU-003117.

2. Data we collect

We collect data that you voluntarily provide when you:

  • Submit a booking request (name, email, phone, dates, number of guests).
  • Contact us by email, phone or WhatsApp.

3. Purpose of data processing

We use your personal data to:

  • Manage your booking request and communicate with you about it.
  • Respond to your enquiries.
  • Comply with legal obligations (guest registration, invoicing).
  • Analyze site usage to improve it (Google Analytics, Vercel Analytics), only with your prior consent.
  • Show you relevant advertising on other platforms (Meta Pixel, Google Ads), only with your prior consent.

4. Legal basis

The processing of your data is based on your consent when submitting a booking request and for analytics/marketing cookies, the performance of the accommodation contract and compliance with legal obligations.

5. Data retention

We will retain your data for as long as necessary to manage your booking and for the legally required periods under tax and tourism regulations.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to casandaina@gmail.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Disclosure of data to third parties

We do not share your data with third parties, except where required by law (for example, guest registration with the authorities). We use third-party services for sending confirmation emails (Resend) and web hosting (Vercel/Neon), which act as data processors. With your consent, we use Google Analytics (Google LLC), Meta Pixel (Meta Platforms Inc.) and Google Ads (Google LLC) for analytics and advertising. These providers may transfer data to the US under the EU-US Data Privacy Framework.

Last updated: March 2026