Privacy Policy

This policy describes how the personal data of visitors and customers of the casita-sierramaris.com website is collected and processed, in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Law No. 78-17 of January 6, 1978, as amended).

1. Data Controller

Data is processed by SAS YOAMATEA (operator of Casita Sierramaris), represented by Jean-Claude Guillot, data controller. Contact for any questions regarding your data: contact@casita-sierramaris.com.

2. Data collected, purposes and legal basis

Contact form

Data: first and last name, email, phone number, subject and content of the message. Purpose: to respond to your request and follow up on the exchange. Legal basis: your request and the hosts’ legitimate interest in responding to it (or pre-contractual measures if the request concerns a booking).

Booking a stay

Data: identity, contact details, dates of stay, number of people, information necessary for the stay. The booking engine (HBook) is integrated into the site and hosted on the publisher’s server. Purpose: to manage the booking and the rental agreement. Legal basis: performance of the contract.

Traveler registration

Identity data (type and number of ID document, etc.) required upon arrival. Purpose: to comply with the legal obligation to report travelers to the Spanish authorities (Guardia Civil / SES.Hospedajes platform). Legal basis: legal obligation.

3. Recipients and processors

  • The hosts: data controllers.
  • Accounting firm: AXE Experts, 19 avenue de Landouge, 87100 Limoges (France), for accounting documents related to bookings.
  • Hosting provider: OVH (data hosted within the European Union).
  • HBook: self-hosted booking extension on the site’s server; booking data is therefore not transmitted to a third party.
  • Cloudflare Turnstile: anti-spam device protecting the form (company established outside the EU; governed by standard contractual clauses).
  • Google Maps: map integrated via Elementor (Google LLC). This service sets cookies and involves a transfer of data to Google, outside the EU; it is only loaded after your consent has been obtained.
  • Google Analytics: site audience measurement (Google LLC). This service sets cookies and involves a transfer of data to Google, outside the EU; it is only loaded after your consent has been obtained.
  • Authorities: transmission of traveler data required by law (Guardia Civil / SES.Hospedajes).

4. Retention periods

  • Contact messages: 1 year.
  • Bookings and accounting documents: 10 years (accounting obligation, kept by the AXE Experts firm).
  • Traveler data: period required by applicable regulations.
  • Cookie consent: 13 months maximum, then renewed collection.

5. Security

The site is secured by an SSL certificate (active HTTPS). Appropriate technical and organizational measures protect data against unauthorized access, loss, or disclosure. Access to data is limited to individuals who need it for the purposes described.

6. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, oppose, limit, and port your data. You can exercise these rights at contact@casita-sierramaris.com.

You can also file a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL) — https://www.cnil.fr. If you reside in another EU country, you can also contact your country’s data protection authority.

7. Cookies

Our site uses cookies to ensure its proper functioning, secure payments and, with your consent, measure its audience.

  • Necessary cookies (always active): essential for the functioning of the site, they cannot be disabled. They include in particular a consent management cookie (CookieYes, kept for 1 year), a WordPress technical cookie, as well as Stripe cookies (__stripe_mid, __stripe_sid) used to secure transactions and prevent fraud during bookings.

  • Audience measurement cookies (subject to your consent): we use Google Analytics (via Google Tag Manager) to understand how visitors use our site and improve it. These cookies are only set after your acceptance via our consent banner. You can refuse them without this affecting your browsing.

You can at any time change your preferences by clicking on “Cookie Preferences” at the bottom of the page.

8. Transfers outside the European Union

Certain technical service providers are established outside the European Union, notably Cloudflare (anti-spam) and Google LLC (Google Maps and Google Analytics). These transfers are governed by appropriate safeguards (European Commission standard contractual clauses).

9. Modifications

This policy may be modified to reflect changes to the site or regulations. The applicable version is the one published on this page, the update date of which appears at the top.

Last updated: 2026-07-02