• Home>
  • Privacy Policy

Privacy Policy

1) INFORMATION ABOUT THE DATA CONTROLLER

Data controller: GOETTEN APARTAMENTOS, S.L.
Tax identification number: B17532508
Registered address: Av. Madrid, 21, 17250, Platja d'Aro, Girona, Spain
Telephone: 972 81 85 08
Email address: info@goettenmar.es
Girona Commercial Registry: Volume 1237, Page 112, Section 8, Sheet GI-21615.
Joint and several directors: Erich Götten and Caroline Hoffmann.

2) APPLICABLE LEGISLATION

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR).
  • Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
  • Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

3) PERSONAL DATA WE COLLECT

We collect personal data through the following channels:

  • Booking engine (Egluu/Bookipro): first name, surname, email address, telephone number, postal address, city, postcode, country, identification document type, identification document number (DNI/NIE/Passport) and comments concerning the booking. The website does not include a payment gateway and no card details are collected through the website. Payment is managed by bank transfer, with a 20% deposit. [Fields confirmed by Egluu, 1 July 2026]
  • Guest registration and check-in: first name, surname, identification document type and number, country of issue, date of birth, sex, nationality, usual residential address, arrival and departure dates and family relationship in the case of minors.
  • Contact form: name, email address and message.
  • Cookies: browsing data. Please see our Cookie Policy for further information.

4) PURPOSES OF THE PROCESSING

  • Managing bookings and providing tourist accommodation services.
  • Complying with the legal obligation to register guests under Spanish Royal Decree 933/2021.
  • Communicating with guests before, during and after their stay.
  • Invoicing and administrative management.
  • Sending marketing communications, only where the data subject has given their express consent.
  • Managing enquiries received through the contact form.

5) LEGAL BASIS FOR THE PROCESSING

  • Performance of a contract: managing the booking and providing the contracted service.
  • Legal obligation: guest registration under Spanish Royal Decree 933/2021 and compliance with tax and accounting obligations.
  • Consent: sending marketing communications.
  • Legitimate interests: improving our services and carrying out anonymised statistical analysis.

6) RECIPIENTS OF THE DATA

Your personal data may be disclosed to:

  • Mossos d'Esquadra / Spanish law enforcement authorities: guest registration data, in compliance with the legal obligation established by Spanish Royal Decree 933/2021.
  • Spanish Tax Administration: invoicing data, in compliance with the applicable legal obligations.
  • Banking institutions: payment processing and management.
  • Data processors: Egluu/Bookipro, as the booking engine provider; Brevo, for marketing emails and booking confirmations; and the website hosting provider.

It has been confirmed that both Brevo and Bookipro (Egluu) host their servers within the European Economic Area. No international transfers of personal data are made outside the EEA. [Bookipro confirmed by Egluu, 2 July 2026. Brevo: servers located in the EU, verified.]

7) DATA RETENTION PERIODS

  • Booking and invoicing data: for the duration of the contractual relationship and for an additional 5 years in order to comply with tax obligations.
  • Guest registration data: for 3 years, in accordance with Spanish Royal Decree 933/2021 and public safety regulations.
  • Marketing communications data: until consent is withdrawn.
  • Contact and enquiry data: for 1 year after the enquiry has been resolved.

8) RIGHTS OF THE DATA SUBJECT

You may exercise the following rights:

  • Right of access.
  • Right to rectification.
  • Right to erasure or the “right to be forgotten”.
  • Right to restriction of processing.
  • Right to data portability.
  • Right to object.
  • Right not to be subject to automated decision-making.

To exercise these rights, please send a written request to info@goettenmar.esor to Av. Madrid, 21, 17250, Platja d'Aro, Girona, Spain, enclosing a copy of your DNI or an equivalent identification document.

If you believe that the processing of your personal data does not comply with the applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency.

9) SECURITY MEASURES

We have implemented the technical and organisational measures necessary to ensure the security of your personal data and to prevent its alteration, loss, unauthorised processing or unauthorised access.