Last updated: 2026-10-28
Raffaele Michele Vaira Email for requests about personal data: alisioapartments@gmail.com
When you request or make a booking we collect: name, phone (optional), email address, stay dates, number of guests, any notes you write, chosen language, date and time of consent. If you pay online, your email address is passed to us by Stripe. We do not collect payment data: card numbers and bank details are handled exclusively by Stripe on its own pages.
To manage your request, booking and stay (performance of the contract); to send you the confirmation and communicate about the stay; to comply with tax and accounting obligations and with the guest registration required by the tourism laws of the country where the apartment is located (legal obligation). We do not use your data for marketing and never sell it.
Stripe Payments Europe, for card payments, as an independent controller (stripe.com/privacy). The person or company managing the apartment locally, for welcome and guest registration. The portals where the apartment is listed (e.g. Booking.com, Airbnb) only receive the occupied dates, never your data. The site is hosted on Oracle Cloud servers in the European Union.
Confirmed bookings: personal data is automatically removed 2 years after the end of the stay, the period required by tax obligations; only dates and amounts remain, in anonymous form. Unconfirmed, cancelled requests or uncompleted payments: data automatically removed after 12 months. Deletion is automatic and takes place on the server.
You can request access to your data, rectification, erasure (subject to tax retention obligations), restriction of processing, portability, and object to processing by writing to alisioapartments@gmail.com. You also have the right to lodge a complaint with the supervisory authority: Spanish Data Protection Agency (www.aepd.es).
The site uses a single technical cookie that remembers your chosen language for one year. We do not use profiling, advertising or third-party analytics cookies, so no banner is required. Stripe's payment pages and Google Maps, if you open the map with the button, use their own cookies according to their policies.
To display some parts of the site, your browser connects directly to external services, which receive your IP address and technical browser data: Google Fonts (Google Ireland Ltd.) for the text fonts, OpenStreetMap (OpenStreetMap Foundation) for the map images, unpkg.com for the program that draws them. Google Maps opens only if you tap the “Open in Google Maps” button. We do not send them any other personal data. Legal basis: legitimate interest in displaying the site and the maps correctly.
Communications with the site are encrypted (HTTPS). Access to data is protected by credentials and limited to those who manage bookings. Backups are made and kept on the same server.