Legal

Privacy policy

Last updated: 25 September 2026

In accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), this is how STAY PALMA, S.L. handles your personal data.

Who is responsible for your data

Data controller: STAY PALMA, S.L., CIF B57743072, C/ Bayarte 14, 07013 Palma de Mallorca, Spain, email info@staycatalina.com.

Data protection officer: Protecmir, www.protecmir.com, email protecmirlegal@protecmir.com. You can also write to info@staycatalina.com.

What data we process and where it comes from

Booking data you enter in the SiteMinder booking engine on the Book page: name, email address, dates, number of guests, special requests and the payment details the engine asks for. The engine is operated by SiteMinder as our processor; payment details are handled inside the engine and never stored on this website.
Correspondence: what you write to us at info@staycatalina.com and what we reply.
Guest registration: the identity details that Spanish law requires accommodation providers to collect from every guest at check-in and report to the authorities.
Technical data: the server that hosts this website keeps standard access logs (IP address, time, page requested, browser) for security and error diagnosis.

This website has no contact form, newsletter, user account, comments or analytics, and it does not build profiles. All data comes from you.

What we use it for and on what legal basis

To manage your booking and your stay: performance of a contract (Article 6.1.b GDPR).
To answer your enquiries by email: performance of pre-contractual steps at your request, or our legitimate interest in replying to you (Articles 6.1.b and 6.1.f GDPR).
To comply with legal obligations such as guest registration, invoicing and tax rules (Article 6.1.c GDPR).
To keep the website secure through server logs: our legitimate interest (Article 6.1.f GDPR).

We do not send marketing emails unless you have expressly asked for them, and you can withdraw that consent at any time without affecting your booking. We make no automated decisions about you.

How long we keep it

Booking and invoicing data: for the duration of the contractual relationship and afterwards for the limitation periods set by tax and civil law.
Guest registration records: for the period the applicable regulation requires.
Email correspondence: until your request is dealt with and for as long as needed to handle any follow-up, unless you ask us to delete it earlier.
Server logs: for a short period, typically no more than a few weeks.

Who receives it

Your data is not sold or passed to third parties for their own purposes. It is processed by providers who work for us under a data processing agreement: SiteMinder (booking engine), our web hosting provider and our email provider. When you choose to load the map on the Contact page, Google Ireland Limited receives the technical data of that request and applies its own privacy policy; that only happens after you click. We also disclose data to public authorities where the law requires it, for example guest registration and tax authorities.

Some of these providers may process data outside the European Economic Area. Where that happens it is covered by an adequacy decision of the European Commission or by the standard contractual clauses adopted by the Commission. You can ask us for details at info@staycatalina.com.

Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration, taking into account the state of the art, the cost of implementation and the nature and risks of the processing. This website is served over HTTPS and stores no booking or payment data of its own.

Your rights

You have the right to access your personal data, to have inaccurate data rectified, to have data erased when it is no longer needed, to restrict or object to processing on grounds relating to your particular situation, to data portability where technically possible, and to withdraw consent at any time. To exercise these rights, email info@staycatalina.com or write to STAY PALMA, S.L., C/ Bayarte 14, 07013 Palma de Mallorca, enclosing a copy of an identity document. If you believe your rights have not been respected you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Changes to this policy

We update this policy when the law or our processing changes. The current version is always the one published here, with its date at the top.