Casa Lux · casa-lux.es
Legal notice, privacy & cookie policy
One clear website document explaining who operates Casa Lux, how personal information is used, the limited security cameras at the property, and how cookies and similar technologies are handled.
Legal notice and website operator
This website and the direct accommodation service offered through it are operated jointly and personally by the following owners, who also act as joint controllers of the personal data described in this policy.
Website use
The website provides information about Casa Lux and enables enquiries and direct reservations. Direct bookings are governed by the separate Casa Lux Booking Terms & Cancellation Policy. Bookings made through third-party platforms are also subject to the terms and privacy information of the relevant platform.
We take reasonable care to keep website information accurate and available, but temporary errors, maintenance or interruptions may occur. Availability, prices and booking details are binding only when confirmed in writing.
Intellectual property and external links
- The Casa Lux name, website text, photographs, design and other original content may not be copied, republished or used commercially without prior written permission, except where law permits.
- Links to booking platforms, local services and other third-party websites are provided for convenience. Those third parties control their own websites, services, cookies and privacy practices.
- The website and this legal notice are governed by Spanish law, without limiting any mandatory consumer rights or jurisdiction rules that apply to a visitor or guest.
Who is responsible for personal data
Michelle Laurette J Van Damme and Gilles Adrien Alexandre A Cenni are joint data controllers for direct Casa Lux enquiries, bookings, guest administration and property security. Privacy requests may be submitted via our Contact Form or by contacting the owners directly. One request is sufficient; it does not need to be addressed to both owners separately.
Information we collect
- Contact and enquiry information, including name, email address, telephone number, message and communication history.
- Booking information, including arrival and departure dates, number and composition of guests, address, selected services, special requests and booking correspondence.
- Guest-registration information required under Spanish accommodation and public-security rules, including identity-document and traveller details that must be communicated to the competent authorities.
- Payment and transaction information, such as amounts paid, payment status, refunds, bank-transfer references and security-deposit records. Full payment-card details are handled securely by our licensed payment processing partner (Stripe) rather than stored by Casa Lux.
- Technical website information, including IP address, browser and device information, security logs, cookie preferences and website interactions, depending on the website configuration and consent choices.
- Images captured by the limited entrance-gate security cameras described below.
Please avoid sending medical, health or other highly sensitive information unless it is genuinely needed for a request connected with the stay. Where such information is voluntarily supplied, we use it only as necessary to respond to that request and, where required, on the basis of explicit consent.
Why we use personal data
| Purpose | Data Used | Legal Basis | Typical Retention |
|---|---|---|---|
| Answer enquiries | Contact details and correspondence | Steps requested before booking; legitimate interests | Up to 2 years after last contact |
| Manage direct bookings and stays | Booking, contact, guest and payment records | Performance of the booking contract | For the stay and as needed for claims and legal records |
| Payments, refunds and accounting | Transaction, invoice and deposit records | Contract and legal obligations | Normally up to 6 years, or longer if a dispute requires |
| Guest registration and authority reporting | Identity and stay information required by law | Legal obligation (Spanish public security & tourism regulations) | For the statutory period required by registration rules |
| Property and guest security | Entrance-gate camera images and incident information | Legitimate interests in safety and security | Normally no more than 30 days, unless needed for an incident |
| Website security and operation | Technical logs and necessary cookies | Legitimate interests; service requested by user | According to technical purpose and security need |
| Google Calendar (optional) | IP address, device data, Google cookies | Consent (loaded only after visitor accepts) | According to Google’s settings and cookie periods |
| Legal claims and compliance | Relevant booking, communication and payment records | Legal obligations and legitimate interests | Until applicable limitation periods expire |
Retention periods are applied as maximum or typical periods. Data may be deleted earlier when no longer needed, or kept longer where required for an active complaint, legal claim, tax review or other legal obligation.
Who receives personal data
Personal data may be shared only where necessary with:
- the website hosting and technical providers needed to operate and secure casa-lux.es;
- Google services, including Gmail for enquiries and booking communication and Google Calendar for the availability calendar;
- WhatsApp when a guest chooses to contact Casa Lux through WhatsApp;
- the property manager, cleaners or maintenance providers, but only to the extent needed to prepare or support the stay;
- professional advisers such as accountants, gestores, insurers, lawyers and claims specialists;
- camera or security-system providers where the entrance-gate camera system uses cloud or technical support services;
- Spanish public authorities, including competent accommodation-registration, police, tax, judicial or regulatory authorities, where disclosure is required or legally justified; and
- a prospective purchaser or successor if ownership or operation of Casa Lux changes, subject to appropriate confidentiality and legal safeguards.
Booking platforms and independently booked service providers, such as a chef, massage therapist or transfer company, generally process information under their own privacy notices. Casa Lux does not sell personal data.
International processing
Some technology providers may process information outside the European Economic Area. Where this occurs, we use providers and safeguards permitted by data-protection law, such as an adequacy decision, participation in an approved framework where applicable, or European Commission standard contractual clauses.
Casa Lux does not currently use Google Analytics, advertising pixels, behavioural profiling or marketing cookies. This policy will be updated before any such tool is added.
Security cameras at Casa Lux
Casa Lux uses limited exterior security cameras for the safety and security of guests, the property and its access.
- During a guest stay, only cameras covering the entrance gate and its immediate access area remain active.
- Before check-in, all other exterior cameras are switched off or physically redirected so that they do not capture areas used privately by guests.
- No camera monitors the interior of the villa, bedrooms, bathrooms, swimming pool, terraces or other private guest-use areas.
- Audio recording is disabled.
- The entrance cameras are positioned to minimise any view beyond the gate and immediate access area.
- Access to live images or recordings is restricted to authorised persons and protected by account security.
Where the entrance cameras record images, recordings are normally overwritten or deleted within 30 days. Relevant footage may be preserved for longer when reasonably necessary to investigate an incident, support an insurance or legal claim, or provide evidence to the police, courts or another competent authority.
A video-surveillance notice is displayed before entry to the monitored area. A person seeking access to footage should provide the approximate date, time and circumstances so that the relevant images can be located. Access may be restricted or adapted where necessary to protect the rights of other identifiable people.
Your data-protection rights
Subject to the conditions in applicable law, individuals may request:
- access to their personal data and information about its use;
- correction of inaccurate or incomplete information;
- deletion of information that is no longer needed or is processed unlawfully;
- restriction of processing in certain circumstances;
- objection to processing based on legitimate interests, including security-camera processing;
- portability of data supplied for a contract or processed by automated means on the basis of consent; and
- withdrawal of consent at any time, without affecting processing already carried out lawfully before withdrawal.
Requests may be submitted via our Contact Form. We may request information reasonably necessary to verify identity and protect personal data.
A person who considers that their rights have not been respected may lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (AEPD), or another competent supervisory authority.
Website security and external services
We use reasonable organisational and technical measures intended to protect personal information. No internet service can be guaranteed completely secure, and visitors should avoid sending unnecessary confidential data by email or WhatsApp.
Google services
Casa Lux uses Gmail for enquiries and booking communication and a Google Calendar to show availability. The calendar loads only after the visitor chooses to allow it. Google may then process technical information and use cookies or similar technologies under its own privacy and cookie information.
WhatsApp is offered through a normal external link. No WhatsApp widget is loaded before the visitor clicks it. Once WhatsApp is opened, WhatsApp processes the communication under its own privacy terms.
External links
Other external links, including booking platforms or local service providers, lead to services controlled by those third parties. Their own privacy and cookie terms apply after the visitor opens the external service.
Cookies and external content
Casa Lux keeps its use of cookies and similar technologies limited. The website does not currently use Google Analytics, advertising cookies, marketing pixels or visitor profiling.
What the website uses
- Essential website storage may be used to operate and secure the website and remember a visitor’s privacy choice. This does not require consent where it is strictly necessary.
- The Google Calendar is optional. It loads only after the visitor allows it. Google may then use cookies or similar storage for functionality, security, preferences and service operation.
- Gmail and WhatsApp are provided as normal external links. Neither places cookies on the Casa Lux website merely because these contact options are offered.
Your choice
Visitors can use the website without loading the Google Calendar and can contact Casa Lux by email or WhatsApp about availability. Rejecting optional content is as easy as accepting it.