logo
Sunset rental logo

Privacy Policy and Personal Data Processing Notice

SL Sunset Rental S.L.

Effective date: 1.04.2024

1. Data Controller

The data controller is:
SL Sunset Rental S.L.
Registered in Spain at: Plaza Blanca 14, 11310 San Roque
Spanish Tax Identification Number (NIF): B16492902
Contact email: info@sunsetrental.es

2. Categories of Personal Data Collected

In the course of providing short-term rental services, we collect and process the following personal data of our guests:

  • full name,
  • email address,
  • phone number,
  • type and number of identification document,
  • country of origin,
  • address of residence,
  • booking details (dates, apartment, number of guests),
  • payment data (credit card details processed by Stripe – not accessible to SL Sunset Rental).

3. Purpose of Data Processing

Personal data is processed for the following purposes:

  • handling and confirming rental bookings,
  • guest communication before, during and after the stay,
  • compliance with legal obligations (e.g., registration with local authorities),
  • payment processing via third-party platforms (e.g., Stripe),
  • fulfillment of agreements with property owners,
  • accounting and tax documentation,
  • service quality improvement (e.g., feedback collection, data analytics).

4. Legal Basis for Processing

Processing is carried out in accordance with Article 6 of the GDPR:

  • (b) performance of a contract,
  • (c) compliance with legal obligations,
  • (f) legitimate interests of the controller (e.g., customer service, legal protection),
  • (a) consent (e.g., for marketing communication).

5. Data Recipients

Personal data may be shared with the following categories of recipients:

  • Hostaway – for reservation and guest data management,
  • Airbnb, Booking.com and other rental platforms – as sources of booking,
  • Stripe – for payment processing (SL Sunset Rental does not access card numbers),
  • service providers involved in operational support (e.g., cleaning, maintenance),
  • public authorities or law enforcement – when legally required,
  • legal advisors, accountants, and IT providers – if needed for legitimate interests.

6. Data Storage

  • Data is securely stored within the Hostaway system,
  • Check-in form data is also saved within Hostaway,
  • Payment data is processed and stored by Stripe,
  • Data is retained for up to 6 years to comply with Spanish tax and accounting regulations. Data may be retained longer for legal claims.

7. Data Subject Rights

Under GDPR, you have the following rights:

  • right of access,
  • right to rectification,
  • right to erasure (“right to be forgotten”),
  • right to restrict processing,
  • right to data portability,
  • right to object,
  • right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD).

8. Automated Decision-Making

Your data is not subject to automated decision-making or profiling.

9. Data Transfers Outside the EEA

Some service providers (e.g., Hostaway, Stripe) may store data on servers outside the European Economic Area (EEA). In such cases, we ensure GDPR compliance through Standard Contractual Clauses or similar mechanisms.

10. Changes to the Policy

SL Sunset Rental S.L. reserves the right to update this policy at any time. The latest version will always be available on our website.

If you have any questions regarding personal data processing, please contact us:
Phone: +34 696 667 123 Email: info@sunsetrental.es