Privacy Policy and Legal Notice

Last updated: March 17, 2026

We understand that maintaining a transparent relationship with you is essential. Therefore, below we present our Privacy Policy so that you are fully informed at all times about how we collect and securely process any data you provide to us.

Your data will be processed in accordance with current legislation and, in particular, in compliance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. It also complies with Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights.

A careful reading of our Privacy Policy will provide you with the necessary information to understand how we will use the data you provide.

Your data is processed in the files of Grand Latina Home Rentals SL for administrative and commercial purposes, as well as any others derived from the company’s corporate purpose. You may exercise your rights of access, rectification, erasure, or objection by contacting us at: Mi_73@hotmail.com

1. Data Controller

If you, or an authorized person, have provided us with your data, we inform you that Grand Latina Home Rentals SL, operating the website https://mygreatstays.com/, with tax ID B88501325 and registered address at Paseo de Yeserías 15F 7A, 28005 Madrid, is responsible for processing your data.

Your data will be processed in accordance with applicable data protection regulations.

At Great Stays, we are committed to maintaining the confidentiality of personal data and fulfilling our duty to safeguard it. We adopt the necessary measures to prevent alteration, loss, unauthorized processing, or access, in accordance with current regulations.

2. Where do we provide information?

We provide information through our website www.mygreatstays.com in the section corresponding to this Privacy Policy.

3. What personal data do we process?

We process the following personal data:

• Data that you voluntarily provide to us
• Data derived from communications you maintain with us
• Browsing data when using online services (IP address, cookies, or similar technologies – see our Cookie Policy)
• Information available from publicly accessible sources
• Data derived from contractual or pre-contractual relationships, including your image where applicable (you will always be informed beforehand)
• Data provided by third parties with a legitimate basis or your consent
• Data of third parties that you provide to us, with their prior consent

4. How do we process your data?

We process your personal data in strict compliance with current legislation. Additionally, we apply appropriate technical and organizational measures to ensure a high level of security.

This guarantees that:

• Only authorized personnel have access
• Data integrity is maintained
• Accidental or intentional loss is prevented
• Systems and processing services are reinforced
• However, as absolute internet security cannot be guaranteed, in the event of a data breach that poses a high risk to individuals’ rights and freedoms, we will notify you without undue delay.

5. Legal basis for processing

The legal basis for processing personal data depends on the nature of the relationship, including:

• Contractual or pre-contractual relationships
• Legal obligations
• Legitimate interest
• Your explicit consent

6. Electronic communications

In accordance with Law 34/2002 on Information Society Services and Electronic Commerce and Directive 2002/58/EC, we inform you that you may receive commercial communications via electronic means (email, automated responses, etc.) when:

You have given your consent, or they relate to services similar to those previously provided

If you do not wish to receive such communications, you may request cancellation by sending an email with the subject “UNSUBSCRIBE FROM COMMERCIAL COMMUNICATIONS”.

Your request will be processed within one month.

7. Data retention

Personal data will be retained:

As long as you do not request its deletion

While a relationship exists that justifies its processing

In compliance with applicable legal retention periods

Once these periods have ended, the data will be deleted from all systems.

8. Will your data be shared with third parties?

Your data will not be transferred to third parties unless required by law.

However, to ensure proper operations, we may engage service providers (advisors, professionals, etc.) who process data on our behalf under strict contractual conditions and only following our instructions.

9. What are your rights?

Data protection regulations grant you the following rights:

Right of access: This is the User’s right to obtain confirmation as to whether or not their personal data is being processed and, if so, to obtain information about their specific personal data and the processing that has been or is being carried out, as well as, among other things, the available information about the origin of such data and the recipients of any communications made or planned.

Right to rectification: This is the User’s right to have their personal data corrected if it is inaccurate or, considering the purposes of the processing, incomplete.

Right to erasure (“right to be forgotten”): This is the User’s right, provided that current legislation does not state otherwise, to obtain the erasure of their personal data when it is no longer necessary for the purposes for which it was collected or processed; when the User has withdrawn their consent and there is no other legal basis for processing; when the User objects to the processing and there are no overriding legitimate grounds to continue; when the personal data has been unlawfully processed; when the personal data must be erased in compliance with a legal obligation; or when the personal data has been obtained through the direct offer of information society services to a child under 14 years of age. In addition to erasing the data, the Data Controller, taking into account available technology and the cost of implementation, must take reasonable steps to inform other controllers processing the personal data of the data subject’s request to erase any links to, or copies or replications of, that personal data.

Right to restriction of processing: This is the User’s right to restrict the processing of their personal data. The User has the right to obtain restriction of processing when they contest the accuracy of their personal data; when the processing is unlawful; when the Data Controller no longer needs the personal data but the User requires it for the establishment, exercise, or defense of legal claims; and when the User has objected to the processing.

Right to data portability: When processing is carried out by automated means, the User has the right to receive their personal data from the Data Controller in a structured, commonly used, and machine-readable format, and to transmit it to another Data Controller. Whenever technically feasible, the Data Controller will directly transmit the data to that other controller.

Right to object: This is the User’s right to object to the processing of their personal data or to request that such processing be stopped by the Data Controller.

Right not to be subject to a decision based solely on automated processing, including profiling: This is the User’s right not to be subject to an individual decision based solely on automated processing of their personal data, including profiling, unless otherwise provided by applicable law.

If you wish to obtain more information regarding the processing of your data, to rectify inaccurate data, to object to and/or restrict any processing you consider unnecessary, or to request the erasure of your data when it is no longer needed, you may contact us via email at Mi_73@hotmail.com

Such communication must include the following information: full name of the user, the request being made, address, and supporting documentation.

The exercise of rights must be carried out by the user themselves. However, it may also be exercised by an authorized person acting as their legal representative. In such cases, documentation proving such representation must be provided.

Likewise, we inform you that you may withdraw your consent at any time without affecting the lawfulness of the processing already carried out, by sending your request to the same address indicated above. In this case, you must include a copy of your ID or another valid proof of identity.

If you believe that there is a problem or a breach of current regulations in the way your personal data is being processed, you have the right to effective judicial protection and to lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, place of work, or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD):
https://www.aepd.es/
C/ Jorge Juan, 6, 28001 Madrid
Fax: +34 914 483 680
Phone: +34 901 100 099
Email: ciudadano@agpd.es

10. Purpose and legal basis of data processing

Below we detail the purposes and legal bases for data processing carried out by the Data Controllers mentioned above.

ACTIVIDAD DE TRATAMIENTO	FINALIDAD DEL TRATAMIENTO	BASE DE LEGITIMACIÓN	PLAZO DE CONSERVACIÓN
Gestión laboral	Gestión del personal para formalización de un contrato laboral, control de expedientes, gestión de nóminas	Relación contractual	5 años desde la finalización del contrato
Gestión fiscal y contable	Tratamiento necesario para el cumplimiento de las obligaciones fiscales y contables	Relación contractual Obligación legal para el/la responsable Intereses legítimos prevalentes del responsable o de terceros	5 años desde la finalización del contrato El tiempo necesario para responder de obligaciones legales
Gestión de contactos	Tratamiento de los datos para poder mantener comunicaciones con los interesados/as	Relación contractual Intereses legítimos prevalentes del responsable o de terceros Consentimiento expreso del interesado/a	5 años desde la finalización del contrato Hasta la cancelación y/o oposición por parte del/de la titular Hasta la pérdida relevante de su uso
Prevención de riesgos laborales	Cumplimiento de la legislación vigente en materia de prevención de riesgos laborales y vigilancia de la salud	Relación contractual Obligación legal para el/la responsable	Hasta la finalización de la relación contractual El plazo legalmente establecido por la normativa específica
Gestión de candidatos/as a un puesto de trabajo	Selección de personal y provisión de puestos de trabajo mediante gestión de curriculum, entrevistas personales y pruebas de valoración	Intereses vitales del interesado/a o de otras personas Consentimiento expreso del interesado/a	Finalizado el plazo para el que se solicita cita
Organización de eventos y actividades	Gestión y coordinación de actividades y eventos afines a la actividad de la entidad. Control de asistencia y participantes.	Relación contractual Consentimiento expreso del interesado/a	Hasta la cancelación y/o oposición por parte del/de la titular El tiempo necesario para responder de obligaciones legales
Comunicación informativa y notificaciones	Difusión de actividades y notificaciones de información relevante relacionada con la actividad de la entidad	Intereses legítimos prevalentes del responsable o de terceros Consentimiento expreso del interesado/a	Hasta la cancelación y/o oposición por parte del/de la titular
Gestión multimedia	Tratamiento de imágenes y/o vídeos para la difusión en medios de comunicación y redes sociales y la promoción de las actividades	Consentimiento expreso del interesado/a	Hasta la cancelación y/o oposición por parte del/de la titular Hasta la pérdida relevante de su uso
Gestión de clientes	Tratamiento de los datos necesarios para el mantenimiento de la relación comercial/contractual con los clientes, la facturación, el servicio post-venta, el envío de promociones y publicidad y la fidelización.	Relación contractual Relación comercial	5 años desde la finalización del contrato El plazo legalmente establecido por la normativa específica
Envío de publicidad	Envío de información comercial, notificaciones sobre actos y eventos de interés, ofertas, información sobre productos y servicios, a clientes y/o potenciales clientes.	Consentimiento expreso del interesado/a	Hasta la cancelación y/o oposición por parte del/de la titular Hasta la pérdida relevante de su uso
Control laboral	Control de asistencia de los empleados/as al puesto de trabajo (vacaciones, faltas de asistencia, registro de jornada)	Relación contractual Obligación legal para el/la responsable Intereses legítimos prevalentes del responsable o de terceros	Hasta la finalización de la relación contractual
Gestión de proveedores	Análisis, valoración, contratación, gestión de pedidos y gestión de pagos a proveedores	Relación contractual	5 años desde la finalización del contrato El plazo legalmente establecido por la normativa específica
Gestión de reclamaciones y consultas	Gestión de consultas de clientes, potenciales clientes/as, usuarios/as y otros interesados/a, sobre los servicios de la empresa o la gestión de reclamaciones sobre facturación, entrega del servicio u otras motivaciones.	Consentimiento expreso del interesado/a	Hasta la cancelación y/o oposición por parte del/de la titular Hasta la pérdida relevante de su uso
Gestión de reservas	Datos identificativos necesarios para la reserva de alojamiento	Consentimiento expreso del interesado/a	El tiempo necesario para responder de obligaciones legales
Gestión web	Gestionar las consultas, contactos y reclamaciones recibidas a través de la página web	Consentimiento expreso del interesado/a	Hasta la cancelación y/o oposición por parte del/de la titular Hasta la pérdida relevante de su uso
Facturación	Emisión de facturas a clientes, remesas e domiciliados, cobros y elaboración de padrones	Relación contractual Obligación legal para el/la responsable	El tiempo necesario para responder de obligaciones legales
Gestión usuarios	Gestión de la relación con los usuarios dentro de la actividad habitual del responsable de tratamineto	Consentimiento expreso del interesado/a	Hasta la cancelación y/o oposición por parte del/de la titular
Gestión Inmobiliaria	Gestión de los datos necesarios de los clientes para poder gestionar y tramitar los contratos de alquiler, compraventa u otras gestiones de bienes inmuebles	Relación contractual Consentimiento expreso del interesado/a	Hasta la cancelación y/o oposición por parte del/de la titular El plazo legalmente establecido por la normativa específica

11. Acceptance and Changes to this Privacy Policy

It is necessary that the User has read and agrees with the conditions regarding the protection of personal data contained in this Privacy Policy, and that they accept the processing of their personal data so that the Data Controller can proceed with such processing in the manner, for the periods, and for the purposes indicated. Use of the Website implies acceptance of this Privacy Policy.

The company reserves the right to modify its Privacy Policy at its own discretion, or due to legislative, case law, or doctrinal changes from the Spanish Data Protection Agency. Any changes or updates to this Privacy Policy will not be explicitly notified to the User. Users are advised to consult this page periodically to stay informed of the latest changes or updates.

This Privacy Policy has been updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights.

This Privacy Policy document was last reviewed on: 03/18/2026.