Privacy policy
Last updated: November 11, 2026
This policy explains what data we collect when you sign the apartment rules, what we use it for, how long we keep it and what rights you have.
Data controller
The data controller is Alejandro Torregrosa Brotons, tax ID (NIF) 48717344D, with address at Avda. de Niza, 37, 03540 Alicante (España), owner of the apartment.
For any question about your data, you can write to aletorregrosab@gmail.com.
What data we process
The data you enter in the form: full name, document type and number, country, arrival and departure dates, number of guests, email address, booking reference (if provided) and your handwritten signature.
In addition, when you sign, the date and time, your IP address, the browser you use, the time you spent on the page and the moment you reached the end of the rules are recorded automatically.
What we use it for
Only to prove that you have read and accepted the apartment rules, and to send you a copy of the signed document.
We do not use it to send you advertising or to create profiles, and no automated decisions are made with it.
Legal basis
The performance of the accommodation contract to which you are a party (Article 6(1)(b) GDPR): accepting the rules is part of the conditions of the stay.
The data recorded automatically is processed on the basis of the controller's legitimate interest in being able to prove that the document was signed and has not been altered (Article 6(1)(f) GDPR).
The form data is required in order to sign. If you do not provide it, we will not be able to record your acceptance of the rules.
Who else has access to the data
We do not share your data with third parties, unless required by law. To provide the service we use these providers, which process the data only on behalf of the controller: Vercel (hosting of this page, with servers in Frankfurt, Germany), Resend (sending of emails, with servers in Ireland) and Google (the mailbox in which the controller receives and keeps the document).
These companies are based in the United States. If any data leaves the European Economic Area, the transfer is covered by the EU-U.S. Data Privacy Framework or by the standard contractual clauses approved by the European Commission.
How long we keep it
Until one year after the departure date. After that period, the signed document and the emails containing it are deleted.
If there is an open incident (for example, damage, a fine or a claim), the data is kept until it is resolved.
Your rights
You can request access to your data, its rectification or erasure, the restriction of or objection to its processing, and its portability by writing to aletorregrosab@gmail.com. Please include your name and the dates of your stay so that we can find it.
If you consider that your request has not been properly handled, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).