Privacy Policy – Casa AndaluS

Last updated: 26 April 2026

At Casa Andalus, we highly value the protection of your personal data. In this privacy policy, we explain which data we collect, why we process it, and what rights you have.

By using our website https://casaandalus.com , you agree to this privacy policy. https://casaandalus.com gaat u akkoord met dit privacybeleid.


1. Who we are

This website is managed by Casa Andalus.

Website: https://casaandalus.com
E-mail: admin@casaandalus.com

Casa AndaluS is responsible for the processing of personal data as described in this privacy policy.


2. What personal data we collect

We may process the following personal data when you visit our website or submit a booking request:

When contacting us or making a booking request

  • name
  • email address
  • phone number
  • check-in and check-out dates
  • number of guests
  • any comments or special requests
  • any other information you voluntarily provide

Automatically collected data

When visiting our website, the following data may be collected automatically:

  • IP address
  • browser type
  • device information
  • pages visited
  • date and time of visit
  • cookie data

3. Why we process your data

We process your personal data solely for the following purposes:

  • handling booking requests
  • responding to questions submitted through the contact form
  • communication regarding availability, pricing, and your stay
  • administrative processing of bookings
  • invoicing and payment handling
  • improving our website and services
  • complying with legal obligations

We process your data only on the basis of a legal ground such as consent, performance of a contract, or legal obligation.


4. Sharing personal data with third parties

We only share your personal data with third parties when this is necessary for our services or when we are legally required to do so.

This may include:

  • our hosting provider
  • WordPress plugins for bookings and contact forms
  • payment providers (if applicable)
  • booking software
  • tax authorities or government institutions where legally required

Where necessary, we conclude data processing agreements with third-party service providers.

We never sell your personal data to third parties.


5. Retention period

We do not keep your personal data longer than necessary.

We apply the following retention periods:

  • contact requests: up to 12 months
  • booking data: up to 7 years due to tax and administrative obligations
  • cookie data: according to the configured cookie period

6. Cookies

Our website uses cookies.

Cookies are small text files stored on your device when you visit our website.

We use:

Functional cookies

These are necessary for the proper functioning of the website, for example for the booking system.

Analytical cookies

These help us understand how visitors use our website so we can improve it.

Marketing cookies

Only where applicable and only after your consent.


7. Embedded content from other websites

Pages on this website may include embedded content, such as videos, maps, or social media feeds.

Embedded content from other websites behaves in the same way as if you visited that external website directly.

These websites may collect personal data and place cookies.

We therefore recommend reviewing their privacy policies as well.


8. Security of personal data

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, or unauthorized access.

Our website uses a secure SSL connection (https).


9. Your rights

Under the GDPR, you have the following rights:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to data portability
  • right to object

If you wish to exercise any of these rights, please contact us at admin@casaandalus.com.

We will respond within 30 days on your request.


10. Complaints

If you believe that we are not handling your personal data correctly, you have the right to file a complaint with your local data protection authority. For users in the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)..


11. Changes to this privacy policy

We reserve the right to amend this privacy policy.

The most current version is always available on our website.