Your Data
Privacy Policy
What data we collect, why, and your rights.
Who processes your data
La Fosca Bay, landlord of the Dalí and Miró apartments in La Fosca (Palamós, Spain), is responsible for data processing. Contact: info@lafoscabay.com.
Data collected and why
- Contact form: first name, last name, email, phone number, message, desired dates and accommodation — to respond to your enquiry (legal basis: your request).
- Booking: identity, date of birth, nationality, address, ID document, email, phone number, number of guests, dates, electronic signature of the contract — to enter into and fulfil the rental agreement (legal basis: the contract).
- Guest registration: Spanish law (Real Decreto 933/2021) requires us to provide authorities (Mossos d’Esquadra) with the identity of each guest (legal basis: legal obligation).
- Payment: card payments are processed by Stripe. Your card details do not pass through this website and are not stored here; we only receive confirmation and the payment amount.
No data is sold or used for advertising purposes.
Who has access
- the landlord and the person welcoming you on site;
- Hostinger (website hosting, servers located in the European Union);
- Titan (email service);
- Stripe (card payments);
- Spanish authorities, for mandatory guest registration.
Retention period
- Contact requests: 1 year after the last exchange.
- Bookings, contracts and guest data: 3 years, as required by Spanish regulations.
- Accounting documents: the applicable legal retention period.
Cookies
The website uses only cookies essential for its operation: storing language preference, light or dark theme, selected dates, and booking basket. There are no advertising cookies or audience measurement tools.
Maps displayed on the site are provided by Google Maps: viewing them transmits your IP address to Google, which may set its own cookies. When making a card payment, Stripe sets security and fraud prevention cookies.
Your rights
You may request access to your data, their rectification, erasure, restriction of processing, objection to processing, and data portability by writing to info@lafoscabay.com. You will receive a response within one month. You may also contact the relevant data protection authority: AEPD in Spain (aepd.es), CNIL in France (cnil.fr), or the authority in your country of residence.
Last updated: 1 October 2026.