Privacy policy

Last updated: August 2026

Who is the controller

Data controller: Larraitz Alkorta Aizporoa y otro, C.B., tax ID E75141945, address Otabardi Baserria – Upazan Auzoa, 20159 Asteasu (Gipuzkoa), email otabardibaserria@gmail.com.

What data we collect and why

Through the contact form we collect your name, email address and the content of your message. If enabled, we also collect your phone number, the dates you are interested in and the number of people.

The sole purpose is to deal with and answer your enquiry. We do not use this data to send you marketing communications, nor do we pass it to third parties for advertising purposes.

We also record aggregated technical browsing data if you accept analytics cookies.

Legal basis

Processing is based on your consent, given by ticking the acceptance box before submitting the form (article 6.1.a GDPR). You may withdraw it at any time by writing to us.

If you go on to make a booking, the basis will be performance of a contract (article 6.1.b) and compliance with the legal obligations of the accommodation sector, including the traveller register.

How long we keep your data

Enquiry data is kept for as long as needed to deal with it and, after that, for a maximum of twelve months, unless a legal obligation requires longer retention.

Who we share it with

Web hosting and email are provided by Hostalia, a brand of Telefónica Soluciones de Informática y Comunicaciones de España, S.A.U. (tax ID A78053147, Ronda de la Comunicación s/n, Edificio Norte 2, 28050 Madrid), which acts as a processor with servers in the European Union and only accesses the data in order to provide us with the service.

The Dinatur booking engine processes booking data under its own privacy policy.

No international transfers outside the European Economic Area take place, other than any arising from the Google services listed in the cookie policy.

Your rights

You may request access to your data, its rectification or erasure, restriction of or objection to processing, and data portability, by writing to otabardibaserria@gmail.com and stating which right you wish to exercise.

If you believe your request has not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply reasonable technical and organisational measures to protect your data, including encrypted transmission via HTTPS and restricted access to the management panel.