Rural holiday house in La Guancha · Tenerife

Privacy policy

This policy describes how we process the personal data of people who contact us or stay at Casa Cho Juan, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD).

1. Data controller

2. What data we process

  • Contact form: name, e-mail address, phone number (optional), the content of your message and the language you are browsing in.
  • Bookings and stays: the data needed to manage a booking by phone or e-mail (name, contact details, dates, number of guests) and, during the stay, the identification details of the guests that Spanish traveller-registration rules require.
  • Browsing: this website uses no analytics or advertising cookies. The hosting provider may log technical data (IP address, browser, pages visited) for security and to operate the service. See the cookie policy.

3. Purposes and legal basis

  • Answering your enquiries sent through the form, by phone or by e-mail. Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
  • Managing the booking and the stay, including communication before and after. Legal basis: performance of the accommodation contract or pre-contractual steps at your request (Art. 6(1)(b) GDPR).
  • Complying with legal obligations: reporting guests' details to the authorities (Spanish Royal Decree 933/2021 and public-security legislation), tax and accounting duties. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

We do not profile you or make automated decisions. We do not send marketing communications.

4. Retention

Enquiry data is kept until the enquiry is resolved and for no more than one year. Booking data is kept for the duration of the relationship and afterwards for the periods required by tax and traveller-registration law (currently three years for the traveller register and up to six years for accounting and tax records).

5. Recipients

We do not share your data with third parties except where legally required (law-enforcement authorities and the Spanish Ministry of the Interior for the traveller register; the tax administration). To provide the service we use providers acting as processors under Art. 28 GDPR:

  • Cloudflare, Inc. (website hosting and form processing), based in the United States and certified under the EU-US Data Privacy Framework.
  • Web3Forms (web3forms.com), servicio de envío de formularios por correo electrónico (delivery of form messages by e-mail).
  • Our e-mail provider, to receive and reply to your messages.

If you follow the links to review and booking portals (TripAdvisor, HolidayCheck, sonnenklar.TV), load the Google Maps map or play the YouTube video, those third parties will process your data under their own policies.

6. International transfers

Some providers may process data outside the European Economic Area. In those cases we make sure an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or standard contractual clauses apply.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent, by writing to info@casachojuan.com or to the postal address above, enclosing a copy of an identity document. If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your data: the website is served encrypted (HTTPS), access to messages is restricted to the owner, and booking data is kept only as long as necessary.

9. Minors

The contact form is not intended for children under 14. Data on minors staying at the house is collected only from their parents or guardians to meet legal registration duties.

10. Changes

This policy may be updated to reflect regulatory or service changes. The version in force is always the one published on this page.

Last updated: 2026-10-04.