← Back to homepage

Privacy policy

Last updated: October 2026

At CasaPanorama we respect your privacy. This policy explains how we process the personal data you provide through casapanorama.es, in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Data Protection Act (Organic Law 3/2018, LOPDGDD).

1. Data controller

• Owner: Uwe Klaus
• Email: uweklaus70@gmail.com
• Phone: +34 627 72 53 68

2. What data we process

• Booking request form: name, email, phone number, travel dates and number of guests.
• Direct contact by email, phone or WhatsApp: the information you choose to share.
• Guest data during the stay: the identity details required by Spanish guest registration law.
• Browsing data: only if you accept, statistical usage data collected with Google Analytics 4. The server also logs technical data (such as your IP address) for security reasons.

3. Purposes and legal basis

• Replying to your request and managing your booking and stay. Legal basis: steps taken at your request before entering into a contract, and performance of the rental contract (Art. 6(1)(b) GDPR).
• Mandatory guest registration and its communication to the Spanish law enforcement authorities (Royal Decree 933/2021), as well as tax obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Web analytics to understand, in aggregate, how the website is used. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings.
• Website security and abuse prevention. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data to send advertising or newsletters, and we do not carry out automated decision-making or profiling.

4. Retention

• Requests that do not lead to a booking: for as long as needed to reply; then deleted.
• Bookings: for the duration of the contract and afterwards for the applicable legal and tax limitation periods.
• Guest registration: three years, as required by Royal Decree 933/2021.
• Analytics data: according to the retention period configured in Google Analytics (maximum 14 months).

5. Recipients and processors

We do not share your data with third parties unless required by law (for example, guest registration reports to the authorities). To provide the service, we use providers that process data on our behalf:

• The website hosting provider, which processes the form and sends the emails.
• Google Ireland Ltd. / Google LLC: email (Gmail), availability calendar (Google Calendar), statistics (Google Analytics, only with consent) and map (Google Maps, only if you accept marketing cookies).
• Usercentrics A/S (Cookiebot), which records and manages your cookie preferences.

If you contact us via WhatsApp, WhatsApp Ireland Ltd. processes your data as an independent controller under its own privacy policy.

6. International transfers

Some providers, such as Google, may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework (European Commission adequacy decision of July 2023) and, where applicable, by standard contractual clauses.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to uweklaus70@gmail.com. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

If you believe your request has not been properly handled, you may lodge a complaint with a data protection supervisory authority, in particular the Spanish Data Protection Agency (www.aepd.es) or the authority in your country of residence.

8. Security

We apply reasonable technical and organisational measures to protect your data, such as encrypted connections (HTTPS). No transmission over the internet is completely secure, but we work to minimise the risks.

9. Cookies

For details on the cookies we use, see our cookie policy.

10. Changes to this policy

We may update this policy to reflect legal or service changes. The date of the last update is shown at the top of this page.