Casa Girard
← Back to the website

Privacy statement

Last updated: 15 October 2026

This translation is provided for convenience. In case of differences, the Dutch version prevails.

1. Who is responsible

Casa Girard (Evan Girard), Jacob Israël de Haanstraat 382, 1508 VG Zaandam, Nederland, is responsible for processing your personal data. Send privacy questions to bookings.girard@gmail.com.

2. What data we process

  • Contact and booking details: name, email address, phone number, dates of stay, number of guests and your requests.
  • Payment details: amount and status of your payment. We do not see your card details; the payment provider processes those.
  • Registration details: the identity details required by Spanish law, such as name, date of birth, nationality and document number.
  • Correspondence: emails and messages you send us.
  • Technical data: when you visit the website, the server records your IP address and browser details in log files.

3. Why and on what legal basis

  • Handling your request and booking: performance of the contract.
  • Registering guests with the Spanish authorities (SES.Hospedajes, Royal Decree 933/2021): legal obligation.
  • Accounting and tax returns: legal obligation.
  • Answering questions and keeping the website secure: legitimate interest.

We do not use your data for marketing without your consent and we never sell it.

4. Who receives your data

  • Guesty, our booking management system.
  • Google (Gmail), for email.
  • Hostinger, the host of this website.
  • Stripe, the payment provider that processes your card payment.
  • Our cleaners, only your name and arrival and departure times.
  • The Spanish authorities, for the statutory guest registration.
  • Our accountant and the tax authorities, where legally required.

We have agreements on security and confidentiality with service providers who process data on our behalf.

5. Transfers outside the EU

Guesty and Google may also process data outside the European Economic Area, including in the United States. This only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

6. How long we keep data

  • Booking and payment details: 7 years, due to tax retention obligations.
  • Registration details for the Spanish authorities: 3 years, as required by Spanish law.
  • Emails without a booking: up to 1 year.
  • Server logs: as short as the hosting provider applies, for security.

7. Cookies and the website

This website uses no cookies, no analytics and no trackers. Your language choice is stored only in your own browser (local storage) and is not sent to us. Fonts and images come from our own server.

The website shows a Google Maps map. It only loads when you click ‘Show map’. At that moment Google receives data such as your IP address; Google’s privacy policy applies to this.

8. Your rights

You have the right to access, correct, delete and restrict your data, to data portability and to object to processing. Send your request to bookings.girard@gmail.com; we respond within one month. Data we are legally required to keep can only be deleted once the retention period has ended.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or with the supervisory authority in your own country.

9. Security

We protect your data with appropriate measures, such as encrypted connections (https) and restricted access to accounts.

10. Changes

We may update this privacy statement. The date at the top shows when it was last changed.