Privacy Policy
Last updated: 2 September 2026
Who controls your data
The data controller is Bolesław Gidziński, ul. Kopalniana 16c/28, 01-321 Warsaw, Poland, operating short-term holiday rentals in Punta Prima (Alicante, Spain) under the Blancamaris brand. For anything data-related: [email protected].
What we collect and where it comes from
When you book directly (via blancamaris.com): name, email address, phone number, home address, stay dates, number and composition of the party, booking notes, billing details.
When you book through a platform (Booking.com, Airbnb): whatever the platform passes on to us — typically name, an anonymised email address, phone number and stay details. The scope depends on each platform's rules; the platform is a separate controller of that data.
When you pay: transaction details. We never store full card numbers — payments are handled by the payment provider integrated with Lodgify.
At check-in: the data Spanish law requires — full name, date of birth, nationality, type and number of your identity document, its date of issue, sex, address, contact details and stay details. We collect this because Real Decreto 933/2021 obliges accommodation providers to report travellers to SES.HOSPEDAJES, the system run by the Spanish Ministry of the Interior.
When you write to us: the content of your messages (email, form, platform messenger).
On this website: cookie and analytics data — set out separately in our Cookie Policy.
Why we process it, and on what legal basis
- Entering into and performing the rental agreement, managing the booking, communicating with you — Art. 6(1)(b) GDPR (necessary for the contract).
- Reporting travellers to SES.HOSPEDAJES, issuing and retaining accounting records — Art. 6(1)(c) GDPR (legal obligation).
- Settling the stay, pursuing or defending claims, security of the property — Art. 6(1)(f) GDPR (legitimate interest).
- Website statistics and marketing (Google Analytics, platform tools) — Art. 6(1)(a) GDPR (your consent given in the banner).
Providing booking and check-in data is a condition of entering into and performing the contract. Consent for analytics and marketing cookies is entirely optional and you can withdraw it at any time.
Who we share it with
- Lodgify (Lodgify SL, Barcelona, Spain) — our booking system and website provider, acting as a processor.
- Booking.com and Airbnb — where the booking came from a platform; they are separate controllers of their own data.
- The payment provider integrated with Lodgify.
- Our traveller registration provider — submits the data to SES.HOSPEDAJES on our behalf.
- Spanish public security authorities (Ministerio del Interior) — under Real Decreto 933/2021.
- Our property manager and cleaning team — only as far as needed to prepare the apartment and hand over keys.
- Our accountant and the tax authorities — as required by law.
- Google — if you consent to analytics cookies.
We do not sell personal data and we do not pass it to third parties for their own marketing.
Transfers outside the EEA
Some of our providers (Google among them) may process data outside the European Economic Area, including in the United States. Where that happens it relies on Standard Contractual Clauses approved by the European Commission or on an adequacy decision (the EU–US Data Privacy Framework).
How long we keep it
- Booking data and accounting records — 5 years from the end of the tax year concerned.
- Check-in data (SES.HOSPEDAJES) — 3 years, as required by Real Decreto 933/2021.
- Guest correspondence — up to 2 years after the stay.
- Data processed on consent — until you withdraw it, and no longer than the periods listed in the Cookie Policy.
- Data needed to defend against claims — until the limitation period expires.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing based on legitimate interest, to data portability, and to withdraw consent at any time (which does not affect processing carried out before withdrawal).
Just email [email protected]. We reply within one month. Some data — check-in records and accounting documents in particular — must be retained despite an erasure request, because the law requires it.
If you believe we are handling your data unlawfully, you can complain to a supervisory authority: in Spain the Agencia Española de Protección de Datos (aepd.es), in Poland the President of the Personal Data Protection Office (uodo.gov.pl).
Changes
We may update this policy, for instance when our tools or the law change. The current version is always at this address, with the date of the last update at the top.