Privacy Policy

Privacy Policy

This legal notice gives you details of how we collect and process your personal data through the use of our website, including any information you may provide to us through the site when you contract a service or purchase a product (personalize), register for our newsletter or provide your contact details through the form provided for this purpose.

By providing the data, we inform you that our services are not possible for those people who are prevented by law from giving consent, so when you send us the forms ensures that you have sufficient capacity to give consent.

Responsible for the treatment.
Contact details of the person in charge: RANTAHUONE SL with address at C/Pintada, nº 105. Nerja. Nerja. CP 29780. Telephone 633335423 and e-mail

Data mercantile inscription.

RANTAHUONE SL, is responsible for your data. (hereinafter we or our).

What data do we collect? (to personalize)
The General Data Protection Regulations tell us that personal data is all information about an identified or identifiable physical person, that is to say all information capable of identifying an individual. This would not include anonymous or percentage data.

On our site we may process certain types of personal data, which may include:

Identity data: name, surname and user name.
Contact details: email or billing address.
Financial data: bank details and other details of purchases made.
Technical data: login data, Internet protocol addresses, browser type and version, time zone settings and location, operating system, browser plug-in types and versions, and any other technology on the devices you use to access our website.
Profile data: username and password, purchases made, comments and survey responses. (optional depending on the provision of the service)
Usage data: information about how you use our website, products and services.
Marketing and communications data: preferences for receiving marketing communications from us and preferred means of communication.
We do not collect any data relating to special categories of personal data (those revealing your ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership and health information, genetic or biometric data).

If you are required to collect personal data by law or under the terms of a contract between us and you refuse to provide it to us, we may not be able to perform such a contract or provide the service, and you must notify us in advance.

How do we collect your personal data? (personalize)
The means we use to collect personal data are:

Through the form on our website, through our contact email, by phone or postal mail, when:
Request information about our products or services
Contract the provision of our services or products
Request a quote
You subscribe to one of our services or publications
Send your comments
To ensure the quality of our website, we reserve the right to refuse any request for registration or to suspend or cancel a previously accepted registration if we believe that it does not meet these requirements or any other law or regulation. If this occurs, we will attempt to state the reasons for our decision, but we cannot commit to doing so in all cases.

Through technology or automated interactions: On our site we may automatically collect technical data about your equipment, navigational actions and usage patterns. This data is collected through cookies or similar technologies. If you would like more information, you can consult our cookie policy here (link)
Through third parties:
Google: Analytical data or search data. Outside the European Union.
Social Networks: (Facebook, Instagram, Twitter, Linkedin…) outside the European Union.
Purpose and legitimacy for the use of your data.
The most common uses of your personal data are:

For the formalization of a contract between RANTAHUONE SL and you.
When you give your consent to the processing of your data
When we need them to comply with a legal or regulatory obligation
When it is necessary for our legitimate interest or that of a third party.
The User may revoke the consent given at any time by sending an email to or by consulting the section on the exercise of rights below.

Below is a table in which you can consult the ways in which we will use your personal data and the legitimacy for its use, as well as knowing what type of personal data we are going to use.

We may process some personal data for some additional legal reason, so if you need details you can send an email to


Purpose Type of data Legitimacy for your treatment
To request information through the contact form – Name

– Surname

– Email

Consent of the interested party
To conduct commercial communications, delivering relevant content that may be of interest to you – Name

– Surname

– Email

Consent of the interested party
To manage and protect our business and website – Technical data

– First name

– Surname



– Email

Legitimate interest

Legitimate interest
Commercial communications: you will only receive communications if

You requested information or made a contract with us for a product or service.
If you gave us your information, accepting the box enabled in this respect on our form.
As long as you have not expressed your willingness to stop receiving such communications.
We obtain your express consent before sending any communication, being able to request at any time that we stop sending you communications in the email

When you choose to stop receiving our communications, your personal data will remain stored as a result of the contract made by you to comply with legal requirements.

Purpose: we will only use your data for the purposes for which we collect it, unless we reasonably believe that we must use it for another reason, notifying you in advance so that you are informed of the legal reason for processing it and provided the purpose is compatible with the purpose original.

Conservation period: They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from said purpose and the treatment of the data. The provisions of the files and documentation regulations will apply.

Subscriber data by e-mail or form: From the moment the user subscribes until they unsubscribe.

Data of the users uploaded by RANTAHUONE SL to their Social Networks or pages: Since the user gives his consent until he withdraws it.

Your Rights in Data Protection
How to exercise these rights? Users may send a communication to the registered office of RANTAHUONE SL or email address, including in both cases a photocopy of your D.N.I or other similar identification document, to request the exercise of the following rights:

Access to your personal data: you can ask RANTAHUONE SL if you are using your personal data.
To request their rectification, if they were not correct, or to exercise the right to oblivion with respect to them.
To request the limitation of the treatment, in this case, they will only be conserved by RANTAHUONE SL for the exercise or defense of claims
To oppose your treatment: RANTAHUONE SL will stop processing the data in the manner you indicate, except that for legitimate reasons or for the exercise or defense of possible claims, these should continue to be treated.
To the portability of the data: in case you want your data to be treated by another firm, RANTAHUONE SL, will facilitate the portability of your data to the new manager.
You can use the models placed at your disposal by the Spanish Agency for Data Protection, to exercise your previous rights: Here

Claim before the AEPD: if you consider that there is a problem with the way in which RANTAHUONE SL is dealing with your data, you can direct your claims to the corresponding control authority, being in Spain, competent for it: Spanish Agency for Data Protection.

We may have to request specific information to help us confirm your identity and guarantee your right to access your personal data (or exercise any of the other rights mentioned above). This is a security measure to ensure that personal information is not disclosed to any person who does not have the right to receive it.

All the requests are solved within the legal term indicated 1 month. However, it can take more than a month if your request is particularly complex, or if you have already performed a series of actions previously. In this case, we will notify you and keep you updated.

Transfer of personal data
It is possible that, in the performance of our work, we need the help of third parties, who will only process the data to provide the contracted service, and with whom we have the corresponding measures to guarantee their rights:

Service providers that provide systems management and information technology services.

Professional advisors that include lawyers, auditors and insurers that provide banking, legal, insurance and accounting consulting services
All those in charge of treatment to whom we transfer your data respect the security of your personal data and treat them in accordance with the RGPD.

We only allow such persons to process your data for specific purposes and in accordance with our instructions. However, in compliance with transparency, you may request a list of the companies that provide services to us by sending an email to:

Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized manner, modified or disclosed. In addition, we limit access to your personal data to those employees, contractors and other third parties who have a business need to know such data. They will only process your personal data according to our instructions and will be subject to a duty of confidentiality.

We have implemented procedures to deal with any suspected breach of your personal data and we will notify you and the Supervisory Authority if such a breach occurs, as regulated in the RGPD in its articles 33 and 34, a security breach.

International Transfers (PERSONALIZE)
Countries outside the European Economic Area (EEA) do not always offer the same levels of protection for your personal data, so European legislation has prohibited transfers of personal data outside the EEA unless the transfer meets certain requirements.

Some of our external service providers are located outside the European Economic Area (EEA), so the processing of your personal data will involve a transfer of data outside the EEA.

Social Networks: RANTAHUONE SL makes use of the social networks Facebook, Instagram, LinkedIn and Twitter, all in the USA.
Email: RANTAHUONE SL’s email service is provided using the services of __________.
Storage and encryption. RANTAHUONE SL uses the following external provider for the storage of your personal data: and encrypts all the information it receives and generates with __________.
If you need further information regarding the specific mechanism used by us when transferring your data outside the EEA, you can contact us via our e-mail address

Updated: Version 1.1

June 2018