Privacy policy

STAYPYRENEES PRIVACY POLICY

At StayPyrenees, accessible via www.staypyrenees.com, we are committed to protecting users’ privacy and to processing personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation – GDPR), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and all other applicable legislation.

This Privacy Policy provides clear information regarding the processing of personal data carried out through this website, as well as data processing carried out by independent third-party providers.

  1. DATA CONTROLLER

Data Controller for personal data processed directly through the website:

Jayne Louise Calvert, self-employed professional, trading under the commercial name StayPyrenees
Tax ID (NIF): X4561921D
Address: Calle Baja 3, 22367 San Juan de Plan, Huesca, Spain
Email: staypyrenees@gmail.com
Telephone: +34 690 039 999

  1. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies exclusively to personal data processed directly by StayPyrenees through this website.

Personal data entered during the booking and payment process is not processed by StayPyrenees, but directly by independent external providers, in accordance with their own privacy policies.

  1. PERSONAL DATA PROCESSED BY STAYPYRENEES

StayPyrenees processes only the personal data strictly necessary for the management of its tourist intermediation activities, which may include:

  • First and last name
  • Email address
  • Telephone number
  • Communications submitted through the website
  • Browsing data (IP address, cookies, and website usage)

StayPyrenees does not access, store, or process credit or debit card details or full payment information.

  1. DATA PROCESSED BY THE BEDS24 BOOKING ENGINE

The booking and payment process is carried out through the external booking engine Beds24, which is embedded in the website.

Beds24 acts as an independent data controller with respect to the personal data entered during the booking process, including:

  • Guest identification data
  • Contact details
  • Payment and credit card data
  • Booking information

Such data is processed in accordance with the Beds24 Privacy Policy, available on its official website.
StayPyrenees does not control or intervene in these data processing activities.

  1. PURPOSES OF DATA PROCESSING BY STAYPYRENEES

Personal data processed directly by StayPyrenees is used for the following purposes:

  • Managing enquiries and customer service requests
  • Facilitating intermediation in the booking of tourist accommodation
  • Sending operational communications related to the stay
  • Complying with legal and administrative obligations
  • Improving the functionality and security of the website
  1. LEGAL BASIS FOR PROCESSING

The legal bases for processing personal data are:

  • Performance of a contract or pre-contractual measures
  • The data subject’s consent, where required
  • Compliance with legal obligations
  • Legitimate interest, for service improvement and website security purposes
  1. RECIPIENTS AND INDEPENDENT DATA CONTROLLERS

In addition to Beds24, the following entities may act as independent data controllers:

  • Chekin, for compliance with guest registration and traveller reporting regulations
  • Public and administrative authorities, where legally required

Additionally, StayPyrenees may use technology service providers acting as data processors, under contract and in compliance with the GDPR.

  1. INTERNATIONAL DATA TRANSFERS

Some external providers, including Beds24, may process personal data outside the European Economic Area (EEA).

In such cases, international data transfers are carried out in accordance with the appropriate safeguards provided for under the GDPR, such as Standard Contractual Clauses or other lawful transfer mechanisms.

  1. DATA RETENTION PERIOD

Personal data processed by StayPyrenees will be retained only for as long as necessary to fulfil the stated purposes and to comply with applicable legal retention periods.

  1. DATA SUBJECT RIGHTS

Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability by submitting a request to staypyrenees@gmail.com.

Users also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD).

  1. SECURITY MEASURES

StayPyrenees implements appropriate technical and organisational measures to ensure the security and confidentiality of personal data processed through the website.

  1. AMENDMENTS TO THIS POLICY

StayPyrenees reserves the right to update this Privacy Policy in order to adapt it to legal, regulatory, or technical changes. Any modifications will be published on this page.