At a glance
| Controller | Anita Rhyner — Casa la Cometa, Calp (Alicante) |
| Purpose | Handling your booking or tenancy, payment and billing, meeting the legal obligations of providing accommodation, and staying in touch with you |
| Legal basis | Performance of a contract; compliance with legal obligations; legitimate interest |
| Recipients | Providers for hosting, database, payment, email and translation, each named below. Transfers to the United States take place |
| Your rights | Access, rectification, erasure, restriction, portability, objection, and a complaint to the AEPD |
That is the summary. Everything in detail follows.
Controller
Anita Rhyner Giessenstrasse 12, 9491 Ruggell (Liechtenstein) Place of business in Spain: Partida Cometa I, 84, 03710 Calp (Alicante) Email: info@casarhyner.com Phone: +423 787 63 49
No data protection officer has been appointed: none of the cases in Article 37 GDPR or Article 34 of Spanish Ley Orgánica 3/2018 applies.
What we process, why, and on what basis
Booking enquiry and booking. Name, email, phone, country, arrival and departure, number of guests, number of dogs, your message, and the language you read the page in. Purpose: preparing, concluding and carrying out the booking. Legal basis: contract and pre-contractual steps at your request, Article 6(1)(b) GDPR.
Payment. You enter card details directly with the payment provider. We never see or store the card number. We do store the card brand, the last four digits and the provider's references, which we need in order to collect the agreed balance. Legal basis: contract, Article 6(1)(b) GDPR.
Guest registration. Where the Spanish traveller-registration rules apply to your stay, the required data is passed to the competent authorities and kept for three years. Legal basis: legal obligation, Article 6(1)(c) GDPR, together with Real Decreto 933/2021.
Messages. What you write to us through the site or by email, and our replies. Legal basis: contract and, outside a booking, our legitimate interest in answering your enquiry, Article 6(1)(f) GDPR.
Machine translation. Free text — your message, our replies, descriptions — is translated into the reader's language. For this, the text is sent to a machine-translation provider. We ask you for no additional data for this. Legal basis: contract and legitimate interest in understanding each other across languages.
Long-term tenancy. For longer tenancies we additionally process the contract data, meter readings, the utilities settlement, the deposit balance, the cleaner's hours and, where they arise, photographs of damage or extraordinary soiling, plus an assessment of the tenant at the end of the tenancy. Legal basis: performance of the tenancy agreement, Article 6(1)(b), and our legitimate interest in documenting the state of the dwelling in order to settle the deposit, Article 6(1)(f) GDPR. As a tenant you may at any time ask for a copy of the photographs and the assessment that concern you.
Returning guests. If we give you a returning-guest discount, we keep your name and email address in order to recognise you. Legal basis: legitimate interest in maintaining the business relationship, Article 6(1)(f) GDPR. You may object at any time.
Cookies
The site sets only cookies that are necessary for it to work. There are no advertising cookies and no third-party analytics.
- `gastsprache` — the language you read the page in
- `meinebuchung` — lets you find your booking again without an account
- `gastcode` — the code from the flat, so you do not have to scan it again every time you open the guest guide
- sign-in cookies, if you have an account in the app
Because they are strictly functional, these cookies are exempt from the prior consent requirement in Article 22.2 of Spanish Ley 34/2002.
Recipients and processors
This list matches the services the app actually uses:
| Provider | For what | Location |
|---|---|---|
| Vercel Inc. | Website hosting | United States |
| Supabase Inc. | Database, sign-in, photo storage | United States |
| Stripe | Payment processing | United States / Ireland |
| Resend | Sending and receiving email | United States / Ireland |
| Anthropic | Translating free text, reading meter readings from photos | United States |
In addition, data required under the traveller-registration rules goes to the competent authorities, and data needed for tax obligations to the tax administration.
From the Airbnb calendar, only the occupied periods are read. No personal data is sent there.
International transfers
Some of the providers listed process data in the United States. Depending on the provider, the transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses approved by the Commission. You can ask us which safeguard applies to which provider.
How long we keep things
| Data | Period |
|---|---|
| Booking and payment | For the duration of the contract and then until the tax and commercial limitation periods arising from it have expired |
| Traveller-registration data | Three years |
| Messages | Two years from the last contact |
| Meter readings and settlements | As long as needed for the settlement and for the applicable tax periods |
| Photographs of damage | Until the deposit is settled and, in case of disagreement, until that is finally resolved |
| Tenant assessment | Two years after the end of the tenancy |
| Returning-guest data | Until you object |
Automated decisions
No automated decisions with legal effect are taken, and we build no profiles for that purpose. Machine translation and the automatic reading of meter photographs are technical aids; a person always makes the decision.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent where processing rests on it. Write to info@casarhyner.com. We will reply within one month.
If you believe we have not handled your request properly, you may complain to the supervisory authority:
Agencia Española de Protección de Datos (AEPD) C/ Jorge Juan 6, 28001 Madrid www.aepd.es
Changes
The date of the last update is shown at the foot of this page. If something material changes, it will be stated here.