Last updated: 11 August 2026. This notice explains how El Bufón de la Corte handles personal data when you visit the website, make an enquiry, request or confirm a reservation, register as a guest or communicate with us. It should be reviewed again before the website goes live to reflect the final analytics, advertising, booking and cookie tools.
Who is responsible for your data?
The controller is El Bufón de la Corte, operated by Frank and Saskia Baeten in Carratraca, Málaga, Spain. Accommodation registration number: CR/MA/02689. Tax identifier supplied by the operator: NIE ES Y7673722Q. You can contact us at info@elbufondelacorte.com.
What information may we process?
Depending on your interaction with us, we may process your name, contact details, preferred dates, guest numbers, booking messages, reservation and payment information, invoice details, arrival information and correspondence. For legally required guest registration, we process the information prescribed for overnight guests. The website may also receive technical data such as IP address, browser information, device details, cookie choices and page interactions.
Why do we use personal data?
We use personal data to answer enquiries, prepare offers, manage reservations and payments, provide accommodation, communicate about arrival and departure, administer optional services, protect the website and property, resolve problems, maintain business records and comply with legal obligations. We may use aggregated information to understand and improve the website.
Legal bases
Processing may be necessary to take steps at your request before entering a contract, perform the accommodation contract, comply with legal obligations, protect legitimate interests such as security and service improvement, or act on your consent. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.
Guest registration
Spanish accommodation providers must collect and report specified guest information under applicable registration rules, including Royal Decree 933/2021. Required information may be shared with competent authorities. See our guest registration page for the practical process.
Who may receive information?
Where necessary, information may be handled by hosting and website providers, booking-system providers, email and communications services, accountants or professional advisers, banks and payment services, external booking platforms, technical support providers and competent public authorities. Providers may process information only for the relevant service and under appropriate obligations.
International data transfers
Some technology providers may process information outside the European Economic Area. Where this occurs, we expect an applicable legal transfer mechanism and appropriate safeguards to be used. The final live-site review should identify the specific providers and transfer arrangements actually in use.
How long do we keep information?
We retain personal data only for as long as needed for the purpose for which it was collected and to meet applicable tax, accounting, accommodation-registration, dispute and security requirements. Different categories therefore have different retention periods. Information that is no longer required should be deleted or anonymised securely.
Your data-protection rights
Subject to the conditions in applicable data-protection law, you may request access to your personal data, correction of inaccurate data, erasure, restriction, portability or objection to certain processing. You may also withdraw consent where consent is the legal basis. We may need to verify your identity before completing a request.
How to exercise your rights
Email info@elbufondelacorte.com and describe your request. You also have the right to lodge a complaint with the Spanish Data Protection Agency, the Agencia Española de Protección de Datos.
Cookies
Cookies and similar technologies can store or access information on your device. Strictly necessary cookies support functions such as security, language preferences, booking steps and consent choices. Analytics or advertising technologies should be activated only in accordance with the consent choices shown by the live website.
Managing cookies
Use the cookie banner or preference panel to review and change non-essential cookie choices. You can also restrict or delete cookies in your browser, although blocking necessary cookies may affect parts of the website. The final cookie list should identify each active provider, purpose and duration after the live integrations have been completed.
External websites
The website may link to Booking.com, Google, social media, activity providers or other external services. Those organisations control their own websites and privacy practices. Review their notices before providing personal information.
Changes to this notice
We may update this notice when the website, services or legal requirements change. The revision date at the top indicates the latest published version. Material changes should be communicated where appropriate.
