Privacy policy

1. Data controller

• Controller: Beñat Zapirain
• Contact email: info@aldatsea.com
• Accommodation: Casa rural Aldatsea, Etxalar (Navarra)

2. Purpose of processing

The data collected through the online check-in is used exclusively to:

• Comply with the legal obligation of traveller registration established by Royal Decree 933/2021, by communicating the data to the SES.Hospedajes system of the Ministry of the Interior.
• Manage your booking and stay (confirmation, contact and access to the accommodation).

We do not use your data for commercial, advertising or profiling purposes.

3. Data we collect

The following data is requested for each guest during the check-in process:

• First and last name, gender and date of birth.
• Type and number of identity document.
• Residential address (street, postal code and country).
• Contact details (email and/or phone).

If you choose the automatic document scan, the photo is sent to a recognition service (Google Cloud Vertex AI) solely to extract this data and fill in the form. The image is deleted immediately after processing and is never stored. If you prefer, you can enter the data manually without uploading any photo.

4. Legal basis

The processing is based on the fulfilment of a legal obligation (art. 6.1.c GDPR): Royal Decree 933/2021 requires accommodation providers to register and communicate travellers' data. Booking management is based on the performance of the accommodation contract (art. 6.1.b GDPR).

5. Recipients

• Ministry of the Interior (SES.Hospedajes): mandatory communication of the travellers' registration form.
• Google Cloud (Vertex AI): data processor only if you use the automatic document scan. Processing takes place in data centres in the European Union (europe-west1 region, Belgium) and the image is not stored.

Data is not disclosed to any other third party.

6. Data retention

The data collected for online check-in is kept only and exclusively for the time strictly necessary to process and confirm the submission of information to the Ministry of the Interior (SES.Hospedajes).

As this is a rental managed by a non-professional host, the data is permanently deleted from our systems within 24 hours of successful notification to the state registry. Images of scanned identity documents are destroyed immediately after the automatic text extraction and are never stored.

7. Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to info@aldatsea.com.

Since the data entered is deleted from our systems once it has been sent to the Ministry of the Interior (SES.Hospedajes), we will no longer hold a copy of it after that communication. For any question about the management of your data, you can contact us directly at the address indicated.

8. Security

This website uses an encrypted connection (HTTPS), access to the management panel is protected and logged, and sensitive data is stored on servers located in the European Union. Document images are transmitted encrypted and discarded after processing.