Privacy Policy

1. Data Controller

Holder: Casa Susterris, SL
CIF: B19886415
Home: Grévol Passage No. 3, 08017 Barcelona
E-mail: info@casasusterris.com
Phone: +34 666 53 35 81
Website: www.casasusterris.com

2. Applicable Regulations

Casa Susterris, SL complies with current regulations regarding the protection of personal data:

Regulation (EU) 2016/679 Regulation of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR).
Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

3. What Personal Data Do We Collect?

Depending on the purpose, Casa Susterris, SL may collect the following personal data:

3.1. Inquiries and contact

Name and surname
E-mail
Phone
Message or content of the query

3.2. Reservation Management

Name and surname of the holder and companions
National ID card, Foreigner's ID card or passport (mandatory according to traveler registration regulations)
Postal address
E-mail
Phone
Payment details (bank account or proof of transfer/Bizum)
Dates of stay
Number of guests

3.3. Traveler Registration

Name and surname
Nationality
Birthdate
Identity document number (DNI, NIE or passport)
Date of issue of the document
Sex
Entry date

3.4. Website navigation

IP Address
Browser type and device
Browsing data collected through cookies (see our Cookies Policy)

4. For what purpose do we process your data?

Purpose	Legal basis	Conservation
Respond to inquiries made by email, phone, or contact form	Consent of the data subject (art. 6.1.a GDPR)	Until the query is resolved and during the legal limitation period (3 years)
Manage bookings, stays, and billing	Performance of a contract (art. 6.1.b GDPR)	Duration of the contractual relationship + 5 years (tax obligation)
Comply with the legal obligation to register travelers with the competent authorities	Legal obligation (art. 6.1.c GDPR)	3 years, in accordance with public safety regulations
Send commercial or promotional communications about Casa Susterris	Express consent of the data subject (art. 6.1.a GDPR)	Until the withdrawal of consent
Statistical analysis of website navigation using Google Analytics	Consent of the data subject (art. 6.1.a GDPR)	Consult the Cookies Policy

5. To Whom Do We Share Your Data?

Your personal data may be disclosed to the following recipients:

State Security Forces and Corps: data from the traveler registration, as required by law (Organic Law 4/2015 and regulations for the registration of tourist accommodations in Catalonia).
Tax Administration (AEAT): Billing information, as required by tax regulations.
Banking entities: exclusively for the management of payments and refunds.
Google LLC: Anonymous browsing data collected through Google Analytics (see international transfers section).

Your data will not be transferred to third parties for commercial purposes, nor will it be sold under any circumstances.

6. International Transfers

The use of Google Analytics may involve the transfer of data to Google servers located in the United States. Google adheres to the EU-US Data Privacy Framework, which guarantees an adequate level of data protection in accordance with European regulations.

No other international data transfers are made.

7. How Long Do We Keep Your Data?

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected and, subsequently, for the legal limitation periods:

Contact inquiries: up to resolution + 3 years
Booking and billing information: contract duration + 5 years (tax obligation)
Traveler registration: 3 years from the date of entry
Commercial communications: until the withdrawal of consent
Browsing data (cookies): consult the Cookies Policy

After these periods have elapsed, the data will be deleted or anonymized.

8. What are your rights?

In accordance with the GDPR and the LOPDGDD, the user may exercise the following rights:

Access: to know what personal data of yours is being processed.
Rectification: request the correction of inaccurate or incomplete data.
Erasure ("right to be forgotten"): request the deletion of your data when it is no longer necessary for the purpose for which it was collected.
Treatment limitation: request that the processing of your data be limited in certain circumstances.
Portability: receive your data in a structured and commonly used format, and transmit it to another controller.
Opposition: object to the processing of your data for reasons related to your particular situation.
Revocation of consent: You may withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent given before its withdrawal.

How to exercise your rights?

You can exercise your rights by sending a written communication to:

E-mail: info@casasusterris.com (replace with the actual number)
Postal address: Casa Susterris, SL — Pasaje Grévol nº 3, 08017 Barcelona

The application must include:

Name and surname of the interested party
Copy of DNI, NIE or passport
right you wish to exercise
Email or postal address for notifications

The maximum response time is a month from the date the request is received.

Complaint to the supervisory authority

If you believe that the processing of your data does not comply with current regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD):

Web: www.aepd.es
Address: C/ Jorge Juan nº 6, 28001 Madrid

9. Security Measures

Casa Susterris, SL has adopted the necessary technical and organizational measures to guarantee the security and integrity of personal data, and to prevent its alteration, loss, unauthorized processing or access, in accordance with the provisions of the GDPR.

Among other measures:

Encryption of communications (HTTPS/SSL protocol).
Access control to information systems.
Regular backups.
Staff training in data protection.

10. Data on Minors

This website is not intended for children under 14 years of age. If Casa Susterris, SL detects that data from a minor has been collected without the consent of their parents or guardians, it will be deleted immediately.

For the management of traveler registration, data for minors under 14 years of age will be provided by their parents or legal guardians.

11. Social Networks

Casa Susterris, SL may have a presence on social media (Facebook, Instagram, etc.). The processing of data by these platforms will be governed by their own privacy policies. Casa Susterris, SL will only process the data of users who interact with its profiles to answer inquiries or manage the community.

12. Modifications

Casa Susterris, SL reserves the right to modify this Privacy Policy to adapt it to new legislation or case law, as well as industry practices. In the event of significant changes, users will be notified via a notice on the website.

Users are advised to review this policy periodically.

Casa Susterris, SL · CIF: B19886415 Grévol Passage No. 3, 08017 Barcelona HUTL-078044-49

Last updated: February 2026