Last updated: 1 October 2026
Data controller: Ona Proyectos e Inversiones S.L., tax number B70842554, C. de Cibeles, 54, 46730 Grau i Platja, València. Contact: onavacaciones@gmail.com.
What we use your data for
Managing your booking and payment
Legal basis
Performance of the contract
Retention
For the duration of the relationship and the applicable tax periods
Guest registration
Legal basis
Legal obligation (Royal Decree 933/2021)
Retention
3 years
Answering your enquiry
Legal basis
Your consent
Retention
Until it is resolved and 1 year afterwards
Sending you news (if you ask for it)
Legal basis
Your consent
Retention
Until you unsubscribe
Who else has access to your data
Only the providers that help us deliver the service, as data processors: Krossbooking (booking engine), Stripe, Supabase (contact form messages, on servers in the European Union) and Vercel (web hosting). The authorities receive the guest register as a legal obligation.
International transfers
Contact form messages are stored in the European Union. Vercel and Google may process data outside the European Economic Area under the standard contractual clauses approved by the European Commission.
Your rights
You can access, rectify, erase, object to, restrict the processing of or request the portability of your data by writing to onavacaciones@gmail.com. If you are not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es).