Legal
Privacy Policy
Last updated: May 2026
Who we are
This website is operated by David, owner of Casa Costa Xàbia, a private seasonal rental apartment in Jávea (Xàbia), Spain. We are the data controller for any personal information collected through this website.
Contact: info@casacostajavea.com
What we collect and why
When you submit an enquiry through this website, we collect:
- ·Name and email address — to identify you and reply to your enquiry.
- ·Phone number — optional, used only if you provide it.
- ·Travel dates and group size — to check availability and calculate a price.
- ·Any message you write — to understand your needs and respond appropriately.
We do not collect payment card details through this website. We do not use your data for marketing or share it with third parties for advertising purposes.
Legal basis for processing
We process your data on the basis of legitimate interest (responding to your enquiry) and, if a booking is made, contractual necessity(managing your stay and communicating booking details).
How we store your data
Enquiry and booking data is stored securely in an EU-based cloud database. Booking-related emails are sent via a transactional email delivery service. All services we use are GDPR-compliant.
We retain your data for up to two years from the date of your enquiry or the end of your stay, whichever is later, after which it is deleted.
Cookies and local storage
This website does not use cookies. Your language preference (English, Dutch or Spanish) is saved locally in your browser — this data never leaves your device and is not accessible to us.
Your rights
Under GDPR you have the right to:
- ·Access the personal data we hold about you
- ·Correct any inaccurate data
- ·Request deletion of your data
- ·Object to or restrict processing
- ·Receive your data in a portable format
To exercise any of these rights, email us at info@casacostajavea.com. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with your national data protection authority.
Changes to this policy
We may update this policy from time to time. Any changes will be published on this page with a revised date at the top.