Casa Bora · Legal
Privacy policy
Last updated: 28 de July de 2026
Data controller
- Controller: Tibor Publicidad SL
- Tax ID (NIF/CIF): B83977561
- Registered address: Juan Navarro 26, 28053 Madrid, Spain
- Email: tibor@tibor.es
- Telephone: +34 600 829 796
What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your booking and stay | Full name, email, telephone, dates, number of guests | Performance of the contract (Art. 6(1)(b) GDPR) | For the duration of the relationship and, thereafter, the statutory limitation periods |
| Taking payment and issuing an invoice | Billing and payment details | Performance of the contract and legal obligation (Art. 6(1)(b) and 6(1)(c)) | 6 years (Art. 30 of the Commercial Code) |
| Registering guests with the authorities | Identification data required by accommodation regulations | Legal obligation (Art. 6(1)(c)) | The period set by the applicable regulations |
| Responding to your enquiries | The details you give us when you write or call | Consent or legitimate interest (Art. 6(1)(a) and 6(1)(f)) | 1 year from the last contact |
We do not carry out profiling or automated decision-making with your data, and we do not use it for advertising unless you expressly authorise us to do so.
Guest registration
Spanish accommodation regulations require us to report guests’ details to the competent authorities. This is a legal obligation: without those details we cannot formalise the accommodation.
Who we share your data with
We do not sell your data or share it with third parties for their own purposes. It is accessed only by those who provide services necessary to manage your booking, always under a data processor agreement:
- Web hosting: Cyberneticos Hosting, S.L. (Spain, EU).
- STRIPE payment gateway: Stripe Payments Europe, Ltd. (Ireland, EU). This may involve international transfers covered by standard contractual clauses.
- Public authorities, where there is a legal obligation.
- MotoPress Hotel Booking — booking management within the website.
- SES.Hospedajes (Ministry of the Interior) — the mandatory reporting of guest data required of tourist accommodation.
Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, by writing to bora@casabora.es and stating the right you wish to exercise. We may ask you to prove your identity.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Security
We apply reasonable technical and organisational measures to protect your data. The site operates entirely over an encrypted connection (HTTPS).
Changes
We may update this policy if the applicable regulations or the services we use change. The date of the last update appears at the top of this page.