Privacy Policy
Last updated: 4 Aug 2025
1. Who is responsible for your data?
Controller: Rooftop del Mar
Contact: reservations@rooftop-
2. What personal data do we collect?
Category | Data collected | Source |
|---|---|---|
Identification | First name, last name | You |
Contact | E-mail address, telephone number | You |
Payment | Card or wallet details | Not collected or stored by us – handled directly by our payment provider (Stripe, Paypal, or your bank) |
3. Why do we process your data & what is the legal basis?
Purpose:
- Create & manage reservations, send confirmations, amend/cancel bookings
- Respond to queries, provide customer support
- Issue invoices, comply with tax/tourism laws
- Optional marketing e-mails (news & offers)
4. Who receives your data?
Payment provider (processes your card; we see only a token/transaction ID)
E-mail & hosting providers (secure EU-based servers)
Competent public authorities when required by Spanish or EU law.
We never sell or rent your data to third parties.
5. International transfers
If a service provider is outside the EEA, transfers rely on an adequacy decision or EU Standard Contractual Clauses to ensure GDPR-level protection.
6. How long do we keep your data?
Data set | Retention period |
|---|---|
Booking records & invoices | 6 years (Spanish accounting rules) |
Customer support e-mails | 3 years from last contact |
Marketing e-mail list | Until you withdraw consent |
Data scheduled for deletion is securely erased or anonymised.
7. Your rights
At any time you may:
Access your data
Rectify inaccurate data
Erase data (“right to be forgotten”)
Restrict processing
Port data to another provider
Object to processing based on legitimate interest or direct marketing
Withdraw consent without prejudice to prior processing
Send requests to reservations@rooftop-del-mar.
You can lodge a complaint with your local Data Protection Authority.
8. Security measures
TLS encryption on all web pages and e-mails
Role-based access to booking system
Regular security audits & backups
9. Cookies & tracking
We use only essential cookies for site functionality and anonymised analytics. Detailed cookie notice appears when you first visit the site.
10. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Questions? E-mail us at reservations@rooftop-del-mar.
