Privacy Policy
This Privacy Policy regulates the processing of personal data collected through the Go Let Malaga S.L. website, as well as data obtained in the context of providing tourist accommodation and holiday rental management and operation services.
Go Let Malaga S.L. guarantees compliance with current regulations on personal data protection, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
GUESTS
(If you have made a booking or enquiry, or if you have visited our website / contacted us / used our services, including Wi-Fi where available at the accommodation)
1. About this privacy policy and about us
This privacy policy explains how Go Let Malaga S.L. processes your personal information when: (i) you make a booking or enquiry related to a booking, (ii) you visit our website, (iii) you contact us through any channel (email, telephone, WhatsApp, social media), or (iv) you use services associated with your stay (e.g., assistance during your stay and, where available, Wi-Fi at the accommodation).
Data controller:
Go Let Malaga S.L. – CIF B21898382
Address: Calle Alejandro Dumas 17, Offices, 29004, Malaga (Spain)
Data protection email: rgpd@goletmalaga.com
We periodically update this policy and publish the changes on our website. If we make significant changes, we may notify you via the contact details you have provided us with.
2. What personal information do we process and why?
We will only process personal data when necessary. The data may include:
Personal and contact information: name and surname, telephone number, email address, postal address, customer identifiers, and, where applicable, user name/credentials if there are private areas.
Payment details: amounts paid and received, details needed to manage payments, refunds and deposits, and partial card or IBAN details (depending on the payment method).
Booking details: accommodation booked, services contracted, number of guests, dates, booking reference, operational communications (check-in, rules, incidents).
Official identification details (where applicable): National identity card/passport or other details necessary to comply with legal obligations regarding passenger registration or other applicable requirements.
Contact history: emails, letters, chats, call recordings (if made), WhatsApp messages, and social media messages sent by you or by us.
Usage and browsing information: IP address, device type, how you interact with the website (pages visited, links clicked, accommodation searched), and, where applicable, interactions with emails/content. For more information, please see our Cookies Policy.
Special categories of data (in general, we do not request these): we do not normally process particularly sensitive data. However, you may voluntarily provide us with information relating to health or mobility (e.g. accessibility needs) in order for us to provide you with the service; or it may be necessary for legal/insurance reasons if there is an incident during your stay.
Important: The provision of certain data is a legal or contractual requirement. If you do not provide this data, we may not be able to formalise or execute the booking or provide the service, which may result in cancellation or the inability to provide certain services. In this case, we will notify you.
Third-party data (other guests)
If you provide us with data from other people (companions) when making your booking, this policy also applies to that data, and it is your responsibility to inform them of its content.
Data sources
We generally obtain this information directly from you, but we may also receive data from:
Booking and distribution platforms (e.g. Airbnb, Booking or others), agencies or partners.
Other members of your group (if they contact us regarding their stay).
Publicly available sources (only where relevant and permitted).
Suppliers related to the provision of the service (e.g. assistance during stay), to the extent necessary.
2.1 Purposes, data used and legal basis
Below, we detail the usual treatments. (Depending on your relationship with us, not all of them may apply.)
Purpose of processing: Complete and manage your booking (including payments, refunds, and deposits)
Personal data used: Personal data, booking data, payment data, identification data when required
Legal basis for processing: Contract / Legal obligation (where applicable)
Purpose of processing: Respond to enquiries and prepare a booking (pre-contractual measures)
Personal data used: Personal details, contact history
Legal basis for processing: Pre-contractual measures / Consent (as applicable)
Purpose of processing: Maintain records of financial transactions
Personal data used: Payment details, booking/invoice references
Legal basis for processing: Legal obligation
Purpose of processing: Send operational service messages (confirmations, check-ins, changes, incidents, rules)
Personal data used: Personal details, booking details, contact history
Legal basis for processing: Contract / Legitimate interest (essential service information)
Purpose of processing: Customer service, support, quality control, and training (if applicable)
Personal data used: Personal details, booking details, contact history
Legal basis for processing: Legitimate interest (improving service and resolving incidents)
Purpose of processing: Request your opinion/review after your stay
Personal data used: Personal details, booking details
Legal basis for processing: Legitimate interest (improving services)
Purpose of processing: Enable communication with the accommodation/owner or local team when necessary.
Personal data used: Contact details, contact history, booking details
Legal basis for processing: Contract / Legitimate interest
Purpose of processing: Security and fraud/non-compliance prevention (including reviewing/blocking malicious messages or spam when using channels managed by us)
Personal data used: Contact history, booking details, usage details
Legal basis for processing: Legitimate interest (security and compliance) / Legal obligation (if applicable)
Purpose of processing: Personalisation of web experience (remember preferences, properties viewed)
Personal data used: Usage data
Legal basis for processing: Consent (cookies) / Legitimate interest (improving navigation where permitted)
Purpose of processing: Website monitoring (performance, security, analytics)
Personal data used: Usage data
Legal basis for processing: Consent (cookies where applicable) / Legitimate interest
Purpose of processing: Marketing (newsletter, offers, campaigns, lookalike audiences, social media ads)
Personal data used: Personal data, booking data, usage data
Legal basis for processing: Consent (personalised communications/advertisements where applicable) / Legitimate interest (informing you of similar services where permitted)
Purpose of processing: Emergency/crisis assistance during the trip (if necessary)
Personal data used: Personal and contact details, booking details
Legal basis for processing: Legitimate interest (customer protection and service continuity)
Purpose of processing: Analysis and improvement of products/services (testing, statistics, technical resolution)
Personal data used: All data (preferably anonymised/pseudonymised)
Legal basis for processing: Legitimate interest
Purpose of processing: Legal purposes (claims, regulatory compliance, cooperation with authorities)
Personal data used: All data
Legal basis for processing: Legal obligation / Legitimate interest
Personalised advertising and audiences: where appropriate and permitted, we may use booking and/or usage data to display personalised advertisements and create similar audiences. In these cases, we may share encrypted/hashed identifiers with advertising partners (e.g. social media networks or advertising platforms) to measure results and personalise campaigns, always in accordance with applicable regulations and your consent preferences.
3. Sharing data within Go Let Malaga S.L.
Go Let Malaga S.L. may share data internally with its authorised staff and collaborators (under confidentiality) when necessary to:
Manage reservations and guest services
Provide support and resolve incidents
Ensuring security, preventing fraud and complying with obligations
Manage the website and operational communications
In all cases, we apply security measures and restricted access.
4. Sharing data outside Go Let Malaga Limited Company.
In order to provide services and operate our business, we may share personal data with:
Owners or representatives of the accommodation and/or local teams (e.g. key collection, incidents), when necessary for the booking/stay.
Service providers (processors): web hosting, IT support, communication tools, customer service, cleaning, maintenance, reputation/review management, security, etc.
Financial institutions and payment gateways (cards, transfers, payment providers).
Professional advisers: solicitors, auditors, accountants, insurers (if applicable).
Booking/distribution platforms: Airbnb, Booking, and others.
Administrations and competent authorities when there is a legal obligation (e.g. passenger registration, requirements).
Third parties for corporate transactions (sale/transfer/merger) in the event of restructuring, with adequate guarantees.
These third parties are obliged to process the data in accordance with the regulations. When a supplier acts on our behalf, they may not use the data for their own purposes, and we require appropriate security measures.
5. International transfers
Certain suppliers or platforms (e.g. OTAs or technology tools) may be located outside the European Economic Area. We will only make international transfers where there are adequate safeguards in place, such as:
Adequacy decisions, or
Standard contractual clauses and, where appropriate, additional measures.
You may request information about the applicable mechanisms by writing to rgpd@goletmalaga.com.
6. How long we store your data
We only retain data for as long as necessary, taking into account: the nature of the data, its purpose, sensitivity, risks, legal obligations and industry criteria.
When the data is no longer required:
we will securely delete them, or
We will anonymise them so that they cannot be linked to you.
7. Your rights
In certain circumstances, you have the right to:
Request access to your personal data
Request rectification of inaccurate data
Request deletion (‘right to be forgotten’) where applicable
Object to direct marketing and, in certain cases, to processing based on legitimate interest
Request restriction of processing
Request data portability
Withdraw your consent when processing is based on consent
The exercise of rights is free of charge, except for manifestly unfounded or excessive requests, in which case we may charge a reasonable fee or refuse the request. We may ask for additional information to verify your identity.
Contact for exercising rights: rgpd@goletmalaga.com
We will normally respond within one month, extendable to two months in complex cases (we will notify you).
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
OWNERS
(If you lease/transfer the property to us, you have a query about management/leasing, or we have contacted you regarding adding your property to our service)
1. About this privacy policy and about us
This section explains how we process your personal data when you collaborate with Go Let Malaga S.L. as an owner, make enquiries, formalise a management/operation contract, or use our channels (website, email, WhatsApp, etc.).
Data controller:
Go Let Malaga S.L. – CIF B21898382
Address: Calle Alejandro Dumas 17, Offices, 29004, Malaga
Data protection email: rgpd@goletmalaga.com
We will publish updates on the website and, if the change is significant, we may contact you.
2. What information do we process and why?
We process data when necessary, including:
Personal and contact information: name, email address, telephone number, address, owner ID; where applicable, credentials if there is a portal/private area.
Financial details: payments and settlements, bank details (IBAN), tax details where applicable.
Contract/lease/management details: contract, property information, licences/tourist registration where applicable, features and facilities.
Contact history: emails, calls (if recorded), WhatsApp, chats, social media messages.
Usage information (website/cookies): IP address, device, and interaction with the website or tools.
Data from third parties designated by the owner: for example, caretaker, cleaner, technician or contact person (if you provide us with this data, you must inform them of this policy).
Some data is required by law or contract. If it is not provided, we may not be able to provide the service or formalise the contract.
2.1 Purposes, data used and legal basis (owners)
Purpose of processing: Incorporate the property and provide management/operation services, including marketing and operations.
Personal data used: Personal details, contract details, property details, payment details
Legal basis for processing: Contract
Purpose of processing: Payments, settlements and accounting/tax records
Personal data used: Payment details, tax details, contract details
Legal basis for processing: Legal obligation / Contract
Purpose of processing: Operational communications (reservations, incidents, improvements, T&C changes)
Personal data used: Personal details, contact history, contract details
Legal basis for processing: Contract / Legitimate interest
Purpose of processing: Enable communication with guests when necessary (or mask contacts and channel through our means) and anti-fraud security.
Personal data used: Contact history, related booking details, contract details
Legal basis for processing: Legitimate interest
Purpose of processing: Support, quality control and training
Personal data used: Personal details, contact history, contract details
Legal basis for processing: Legitimate interest
Purpose of processing: Owner surveys/feedback
Personal data used: Personal information
Legal basis for processing: Legitimate interest
Purpose of processing: B2B marketing for services (where applicable)
Personal data used: Personal data, usage data
Legal basis for processing: Consent (where applicable) / Legitimate interest
Purpose of processing: Service and tool analysis and improvement
Personal data used: All data (preferably anonymised)
Legal basis for processing: Legitimate interest
Purpose of processing: Legal purposes and compliance (claims, tourism/contractual obligations)
Personal data used: All data
Legal basis for processing: Legal obligation / Legitimate interest
3. Sharing data within and outside Go Let Malaga S.L.
Inside: with authorised personnel and collaborators under confidentiality.
Outside: with suppliers (IT, marketing, support, cleaning/maintenance if applicable), advisors (lawyers, auditors, accountants), financial institutions and authorities when there is a legal obligation to do so; also with distribution platforms when necessary to market the property.
4. International transfers (owners)
When using certain global platforms or providers, there may be international transfers, with appropriate safeguards (adequacy decisions/standard contractual clauses and additional measures where necessary).
5. How long do we keep the information?
We retain data for as long as necessary for the service, legal obligations (tax/accounting/contractual) and defence against claims. Afterwards, we securely delete or anonymise it.
6. Your rights (owners)
The same rights as in the guest section: access, rectification, erasure, objection, restriction, portability, and withdrawal of consent.
Contact: rgpd@goletmalaga.com. Usual response time: 1 month (extendable in complex cases).
Additional information relevant to stays
Video surveillance
Some properties may have private video surveillance in outdoor areas or entrances, but never inside. Its purpose is security and incident prevention, and its use complies with applicable regulations. If a property has cameras, this will be indicated by signage and/or information provided by the property.
Wifi
When accommodation offers Wi-Fi, access and use may involve the processing of certain technical data (e.g. network/device identifiers or logs necessary for security). To the extent applicable, this data will be processed for security, service maintenance and misuse prevention purposes.
Contact
For any questions regarding this policy or your personal data:
📧 rgpd@goletmalaga.com
🏢 Go Let Malaga S.L., Calle Alejandro Dumas 17, Oficinas, 29004, Málaga
