Privacy Policy

1. Data controller

• Controller: Oasis Vacacional
• Address: Málaga, Spain
• Email: inforeservas@oasisvacacional.com
• Telephone: +34 613 388 502

2. Data we collect

We may collect the following personal data:

• Contact details: first name, surnames, email address, telephone number.
• Booking details: check-in and check-out dates, number of guests, accommodation preferences.
• Browsing data: IP address, browser type, pages visited, time spent on the site.
• Payment data: card payments are made on Stripe’s secure page, which processes them as an independent controller. We do not receive or store card details.

3. Purposes of processing

Personal data are processed for the following purposes:

• Managing holiday accommodation bookings.
• Communicating with guests before, during and after their stay.
• Sending commercial and promotional information (only with prior consent).
• Complying with applicable legal obligations (guest registration, tourism regulations).
• Improving our services and the user experience on the website.

4. Legal basis for processing

• Performance of a contract: to manage the bookings requested.
• Consent: for sending commercial communications.
• Legal obligation: to comply with tourism and guest registration regulations.
• Legitimate interest: to improve our services and the security of the website.

5. Data retention

Personal data will be kept for as long as necessary to fulfil the purpose for which they were collected and, thereafter, for the applicable statutory limitation periods.

6. Recipients of the data

Data may be disclosed to:

• Booking platforms: Beds24, to manage bookings and synchronise them with Booking.com and Airbnb; Stripe, to collect payment for bookings made on this website; and Lodgify, for the properties that are still booked through its system.
• Public authorities: Policía Nacional (National Police) and Guardia Civil (Civil Guard), for guest registration.
• Service providers: web hosting (Vercel) and payment processors.

No international transfers of data outside the European Economic Area will be made without appropriate safeguards.

7. User rights

The user has the right to:

• Access: to know which personal data we process.
• Rectification: to request the correction of inaccurate data.
• Erasure: to request the deletion of their data.
• Objection: to object to the processing of their data.
• Restriction: to request the restriction of processing.
• Portability: to receive their data in a structured format.

To exercise these rights, you can contact us at inforeservas@oasisvacacional.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.

8. Security

Oasis Vacacional adopts the technical and organisational measures necessary to guarantee the security of personal data and to prevent their alteration, loss, or unauthorised processing or access. The website uses an SSL certificate to encrypt communications.