Privacy Notice: Who We Are
CASA RURAL OS CARBALLOS (WWW.OSCARBALLOS.ES) is the data controller for this website and for reservation-related data. This notice explains what personal data we collect, how we use it, and your rights under GDPR.
Controller: CASA RURAL OS CARBALLOS
Address: Lugar Outeiro, 26, 36194 Barro, Pontevedra, Galicia, Spain
Email: oscarballos@oscarballos.es
Phone: 606 311 960
Scope: This notice applies to website visitors, guests, and anyone who contacts us about our accommodation and services. We may update this notice when needed; the latest version is always available on this page.
Controller: CASA RURAL OS CARBALLOS
Address: Lugar Outeiro, 26, 36194 Barro, Pontevedra, Galicia, Spain
Email: oscarballos@oscarballos.es
Phone: 606 311 960
Scope: This notice applies to website visitors, guests, and anyone who contacts us about our accommodation and services. We may update this notice when needed; the latest version is always available on this page.
Data We Collect
We collect the minimum data necessary to run our rural house and this website:
Reservation and contact details: name, email, phone, dates of stay, number of guests, special requests, and messages you send us.
Communication data: emails and messages exchanged to manage your enquiry or booking.
Browsing data: IP address, device and browser information, pages visited, and interaction with our site (aggregated and anonymous where possible).
Cookies: small files placed on your device to operate the site, remember preferences, and measure audience. See the Cookies section below.
Reservation and contact details: name, email, phone, dates of stay, number of guests, special requests, and messages you send us.
Communication data: emails and messages exchanged to manage your enquiry or booking.
Browsing data: IP address, device and browser information, pages visited, and interaction with our site (aggregated and anonymous where possible).
Cookies: small files placed on your device to operate the site, remember preferences, and measure audience. See the Cookies section below.
Purposes and Legal Bases
We use your data only for specified purposes and lawful bases:
Provide and manage reservations (contract): handling enquiries, availability, booking confirmation, and guest support.
Customer service and house operations (legitimate interest): responding to questions, improving our services, ensuring the security of our website and property.
Legal and accounting obligations (legal obligation): invoices, tax, and mandatory records.
Marketing communications (consent): occasional news or offers, only if you opt in. You can withdraw consent at any time.
Analytics and preferences cookies (consent): non‑essential cookies run only after your acceptance via the cookie banner.
Provide and manage reservations (contract): handling enquiries, availability, booking confirmation, and guest support.
Customer service and house operations (legitimate interest): responding to questions, improving our services, ensuring the security of our website and property.
Legal and accounting obligations (legal obligation): invoices, tax, and mandatory records.
Marketing communications (consent): occasional news or offers, only if you opt in. You can withdraw consent at any time.
Analytics and preferences cookies (consent): non‑essential cookies run only after your acceptance via the cookie banner.
Data Sharing
We do not sell your personal data. We share it only with trusted providers who help us operate our website and manage reservations (e.g., web hosting, email, analytics, and IT support). These providers act under written agreements, follow our instructions, and apply appropriate safeguards.
Where required, we may disclose data to authorities or to protect our legal rights. Access to personal data is limited to people who need it to perform their job.
Where required, we may disclose data to authorities or to protect our legal rights. Access to personal data is limited to people who need it to perform their job.
Data Retention
We keep your data only as long as needed for the purpose collected:
Reservation and guest records: kept for the duration of the stay and then as required by accounting and tourism laws.
Enquiry emails: typically up to 24 months after our last communication, unless you request earlier deletion where applicable.
Cookies: stored for their stated lifespan; see details in your cookie preferences panel and your browser settings.
Reservation and guest records: kept for the duration of the stay and then as required by accounting and tourism laws.
Enquiry emails: typically up to 24 months after our last communication, unless you request earlier deletion where applicable.
Cookies: stored for their stated lifespan; see details in your cookie preferences panel and your browser settings.
Your Privacy Rights
Subject to conditions in the GDPR, you can request: access to your data, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests. Where we rely on consent (e.g., marketing or non‑essential cookies), you can withdraw it at any time.
To exercise your rights, contact us at oscarballos@oscarballos.es. We aim to respond within one month. If we cannot fully comply, we will explain why and your available options.
To exercise your rights, contact us at oscarballos@oscarballos.es. We aim to respond within one month. If we cannot fully comply, we will explain why and your available options.
Cookies
We use cookies to run essential site features, remember preferences, and measure how our website is used.
Essential cookies: required for core functionality and security; always active.
Preference cookies: remember your choices (e.g., language); used only if you allow them.
Analytics cookies: help us understand traffic and improve the site; used only with your consent.
Cookie banner: On your first visit you can accept, reject, or customize non‑essential cookies. You can change your choice anytime by reopening the cookie settings from this page or via your browser settings.
Essential cookies: required for core functionality and security; always active.
Preference cookies: remember your choices (e.g., language); used only if you allow them.
Analytics cookies: help us understand traffic and improve the site; used only with your consent.
Cookie banner: On your first visit you can accept, reject, or customize non‑essential cookies. You can change your choice anytime by reopening the cookie settings from this page or via your browser settings.
Security
We apply reasonable technical and organizational measures to protect personal data, including secure hosting, access controls, encryption in transit (HTTPS), and staff awareness. While no system is perfectly secure, we work to prevent unauthorized access, use, alteration, or disclosure.
International Transfers
Some providers may process data outside the European Economic Area. When this happens, we ensure an adequate level of protection through EU adequacy decisions or Standard Contractual Clauses, plus additional measures where appropriate. You can contact us to learn more about the safeguards in place.
Contact and Complaints
If you have questions or requests about your data, contact us:
Email: oscarballos@oscarballos.es
Phone: 606 311 960
Postal address: Lugar Outeiro, 26, 36194 Barro, Pontevedra, Galicia, Spain
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD). We encourage you to contact us first so we can address your concerns promptly.
Email: oscarballos@oscarballos.es
Phone: 606 311 960
Postal address: Lugar Outeiro, 26, 36194 Barro, Pontevedra, Galicia, Spain
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD). We encourage you to contact us first so we can address your concerns promptly.