Privacy Policy
Last updated: 27 August 2026
Casa Mirador is a privately owned two-bedroom apartment in Frigiliana (Málaga, Spain), rented directly by its owners, Ciska & Gido (“we”, “us”, “our”). This policy explains what personal data we collect when you use this website to enquire about or book a stay, how and why we use it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).
Data controller contact: Ciska & Gido, email miradorstays@gmail.com, phone +31 6 37 22 77 21.
What personal data we collect
When you request a booking through this site: your full name, email address, phone number, chosen check-in and check-out dates, the number of guests, and the automatically calculated price of the stay. Every field is required to process a reservation; we collect nothing else through the form.
When you contact us by email, WhatsApp or phone: the contact details you use and whatever information you choose to include.
Automatically: our hosting provider records standard technical request data (such as IP address, browser type and time of request) in server logs, for security and to keep the site running. We do not use analytics, advertising or tracking cookies, and we show no cookie banner because none is required. The site stores a single item on your own device — your chosen language — in your browser's local storage; it never leaves your device and is not sent to us.
We do not collect payment card details through this website, and we do not knowingly collect personal data from children.
How we use your data, and our legal basis
To check availability and calculate the price for your dates — legal basis: taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)).
To create and manage your reservation and to contact you about it — legal basis: performance of our rental contract with you (Art. 6(1)(b)).
To respond to enquiries that do not lead to a booking — legal basis: our legitimate interest in replying to people who contact us (Art. 6(1)(f)).
To keep the records required of us by Spanish tax and tourism law — legal basis: compliance with a legal obligation (Art. 6(1)(c)).
Spanish law separately requires accommodation providers to register traveller identity data with the authorities. Any identity-document data for that purpose is collected at or before check-in, not through this website.
Who we share your data with
We share the minimum data necessary with the following service providers, who act on our instructions.
Smoobu GmbH, Wittestraße 30, Haus F, 13509 Berlin, Germany — the reservation-management system we use to run our booking calendar. When you submit the booking form, your name, email address, phone number, stay dates, guest count and the calculated price are sent to Smoobu to create the reservation. Smoobu acts as our data processor. Its privacy policy is published at smoobu.com.
Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA — hosts this website and runs the server code that forwards your booking request to Smoobu. Your data is processed in transit; Vercel does not store the reservation.
Google (Google Ireland Ltd / Google LLC) — our contact address miradorstays@gmail.com is a Google account, so emails you send us are stored by Google.
We do not sell your personal data and we do not share it for advertising. We may disclose data where required to do so by law.
International transfers
Smoobu processes your data within the EU. Where a provider (Vercel, Google) processes data outside the European Economic Area, that transfer is protected by an adequacy decision or by the European Commission's Standard Contractual Clauses.
How long we keep your data
Booking data: for the duration of your stay and then for as long as Spanish tax and accounting law requires us to retain transaction records (generally up to four to six years), after which it is deleted or anonymised.
Enquiries that do not result in a booking: deleted within 12 months.
Server logs: retained by our hosting provider for a short period under their own retention policy.
Your language preference in local storage: kept on your device until you clear your browser storage.
Your rights
Under the GDPR you have the right to ask us to: give you access to the personal data we hold about you; correct it if it is wrong; delete it; restrict or object to our use of it; and provide it to you in a portable format. To exercise any of these rights, email miradorstays@gmail.com — we will respond within one month.
You also have the right to lodge a complaint with a supervisory authority: in Spain the Agencia Española de Protección de Datos (aepd.es), or the data protection authority in your country of residence (for example the Autoriteit Persoonsgegevens in the Netherlands).
Security
This site is served over HTTPS, so data you enter in the form is encrypted in transit. The credentials used to talk to Smoobu are stored on the server and are never exposed to your browser. The website operates no database of its own; your contact details are held only within Smoobu and our email inbox, both of which are access-controlled.
Cookies and local storage
We use no analytics or advertising cookies. The only thing this site stores on your device is your chosen display language, kept in your browser's local storage so the site remembers it on your next visit. It is not shared with us or anyone else.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed; any material change will be reflected on this page.
Contact
For any question about this policy or about your personal data, contact Ciska & Gido, miradorstays@gmail.com, +31 6 37 22 77 21.