Privacy policy
Last updated: 31 May 2026
1. Data controller
Controller: O Lar do Carpinteiro. Address: 19 Rua Maial, Oza dos Ríos, Oza dos Ríos (Oza-Cesuras), A Coruña, Spain. Contact email: reservas@olardocarpinteiro.gal. Phone: +34696196334.
2. Data we process
Through the availability enquiry form we may process: name, email, phone, stay dates, number of guests, children's ages, pet information, free-text message and preference for WhatsApp or phone contact.
When browsing the site, Google Analytics may collect aggregated usage data (pages visited, device, approximate country). Analytics cookies are active by default and you can disable them at any time. We do not collect special categories of data.
3. Purposes and legal basis
Managing your availability enquiry and responding by email or phone: pre-contractual measures at your request and, where applicable, consent for WhatsApp contact.
Sending operational communications related to your request: legitimate interest in handling enquiries received.
Measuring website use via Google Analytics: legitimate interest with analytics cookies active by default; you may object at any time via cookie settings.
4. Retention
Form data is kept for as long as needed to handle the enquiry and, if a booking is confirmed, for the contractual relationship and applicable legal periods in tax and tourism matters.
Analytics data is retained according to Google Analytics settings and while you maintain your consent.
5. Recipients
Your data may be processed by service providers such as transactional email (Resend), web hosting (Vercel) and Google (Analytics), always with the contractual safeguards required by the GDPR.
Data is not shared with third parties for commercial purposes.
6. Your rights
You may exercise rights of access, rectification, erasure, objection, restriction and portability by emailing reservas@olardocarpinteiro.gal and proving your identity.
You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe processing does not comply with the law.
7. Security
We apply reasonable technical and organisational measures to protect your data. However, no Internet transmission is completely secure.