Privacy Policy

1. Who is responsible

The data controller is Dave Lie Sam Foek. For any privacy question or to exercise your rights, contact us at info@harmonydemijas.com; a postal address is available on request.

2. What we collect

Depending on how you interact with us, we may process:

• Identity and contact details (name, email, phone) you provide when booking or enquiring.
• Booking details such as dates, number of guests and any preferences.
• Traveller-registration data required by law for tourist accommodation: each guest’s full name, sex, nationality, date of birth, identity-document type and number (passport / DNI / NIE, and support number where applicable), and place of residence, collected via our online check-in and reported to the authorities.
• Payment information, processed securely by our payment provider, we do not store full card numbers.

3. Why we use it & legal bases

• To manage your booking and stay, legal basis: performance of the contract with you.
• To register travellers and report their identity documents to the authorities (Royal Decree 933/2021, SES.Hospedajes) and to meet tax obligations, legal basis: compliance with a legal obligation.
• To answer your enquiries, legal basis: our legitimate interest in responding to you.
• To send you offers and news about our apartments, legal basis: your consent, which you can withdraw at any time (see section 4).

4. Marketing & your consent

We only send marketing (for example future offers) if you have opted in, or where the law otherwise allows it for our own similar services to existing guests. Every message includes an easy way to unsubscribe, and you can withdraw your consent at any time by emailing us, without affecting your booking. We do not sell your personal data.

5. Who we share it with

We share data only with those who help us run the service, under appropriate agreements: the booking platform through which you booked (e.g. Booking.com), our payment provider, our website host, and providers such as cleaning or maintenance where needed. We also share the data legally required with public authorities.

6. Guest registration & the authorities

The traveller-registration data above is transmitted, within 24 hours of arrival, to the Spanish Ministry of the Interior through the SES.Hospedajes system and made available to the Guardia Civil and National Police, as the law requires. We collect it through our own online check-in form over an encrypted (HTTPS) connection and store it encrypted at rest, with access restricted to the host. We are legally required to keep this register for three years from the end of your stay.

7. How long we keep it

We keep booking and billing records for as long as required by tax and tourism law, and other data only for as long as needed for the purpose it was collected. Marketing data is kept until you unsubscribe or withdraw consent.

8. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your data, to data portability, and to withdraw consent. To exercise them, email info@harmonydemijas.com. If you are not satisfied, you may complain to the Spanish Data Protection Agency (AEPD, www.aepd.es).

9. Cookies & analytics

This website uses cookies that are strictly necessary for it to work and, only if you agree, analytics cookies from Microsoft Clarity. On your first visit a banner lets you accept or decline; nothing analytical loads until you accept, and you can decline without any loss of functionality.

Microsoft Clarity helps us understand how visitors use the site through aggregated statistics, heatmaps and session recordings of on-page interactions. Text you type into forms is masked and is not recorded. Microsoft acts as our processor and may process this data outside the EU under appropriate safeguards. The legal basis is your consent, which you can withdraw at any time by declining the banner or clearing your browser storage for this site.