Data controller
[Legal name: missing in Tax › Settings] (tax ID [Tax ID: missing in Tax › Settings]), with its address at [Registered address: missing in Tax › Settings], is the controller of the personal data processed on this website and in bookings at Camping Masia Sadernes. For any question about your data, write to us at camping@sadernes.com.
What data we process and why
Bookings: name, email, phone, dates, people, vehicles and anything you add to the booking, to manage it, send you confirmations and reminders and assist you. Legal basis: the contract.
Guest registration: on arrival (or through online check-in), the identity document details, nationality, date of birth and address of the booking holder and guests required by Spanish tourist accommodation regulations (Royal Decree 933/2021), which are reported to the authorities. Legal basis: a legal obligation.
Customer account: your email, password (encrypted) and the details you save, to view and manage your bookings. If you sign in with Google, we receive your name and email. Legal basis: the contract.
Payments: if you pay online, the payment is handled by the payment provider (Stripe or PayPal); we never see or store your card details. We keep the amounts and dates of payments and issue the relevant invoices or receipts. Legal basis: the contract and tax obligations.
Messages and virtual assistant: what you write to us through the contact form, by email or in the chat, to reply to you. Some messages are answered instantly by an artificial intelligence system using the campsite's information; when needed, it passes them to a member of the team. Legal basis: your consent when writing to us and our legitimate interest in assisting you.
Marketing: if you agree when signing up, or if you are already a customer and have not objected, we will send you offers and news from the campsite. You can unsubscribe at any time from the link in each email or from your account. Legal basis: consent or, for customers, article 21.2 of the LSSI.
Security: to protect forms from bots we use Google reCAPTCHA, which analyses interaction with the page. Legal basis: our legitimate interest in preventing abuse.
How long we keep it
Booking and billing data, for the periods required by commercial and tax law (generally up to six years). Guest registration data, for the period required by its regulations (three years). Account data, while your account is open. Messages and chat conversations, for as long as needed to assist you. Marketing data, until you unsubscribe.
Who we share it with
With the competent authorities, when required by law (guest registration, tax agency). And with the providers that provide services to us and only process data on our behalf: website and database hosting (Vercel and Supabase, with servers in the European Union), email delivery (Resend), online payments (Stripe and PayPal), artificial intelligence for the assistant and replies (OpenAI), bot protection (Google reCAPTCHA), electronic invoicing (Verifacti, if VeriFactu invoices are issued) and, only if you accept it, web analytics (Amplitude). Some of these providers may process data outside the European Economic Area, always with the safeguards of the General Data Protection Regulation (adequacy decisions or standard contractual clauses).
Your rights
You can request access to, rectification or erasure of your data, object to its processing, request its restriction or portability and withdraw any consent you have given by writing to camping@sadernes.com. From your account you can correct your details, unsubscribe from marketing and delete your account. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Minors
Bookings must be made by an adult. We do not knowingly collect data from children under 14 without the consent of their parents or guardians, except where required for guest registration.
