Last updated: November 2025

In accordance with the General Data Protection Regulation (GDPR) and the Spanish Ley Orgánica de Protección de Datos y Garantía de los Derechos Digitales (LOPDGDD), we inform you that your personal data are being provided to the Data Controller:

Garcies Riobo Apartamentos SL
(hereinafter, "Garcies Riobo")
Registered Address: O Carballal 8, 36947, Pontevedra, Spanien
Email: [email protected]
Website: garciesriobo.com

1. Purpose of Processing

The personal data collected will be only those included in the booking or contact forms, as well as any information that you voluntarily provide in the “Comments” or similar fields.

Garcies Riobo may process your personal data for the following purposes:

1. Manage website browsing and technical website operation. 
2. Respond to customer service requests, including inquiries, comments, or complaints submitted via the website.
3. Manage contractual and pre-contractual relationships, including processing your reservation, communication related to your stay, check-in, and check-out.
4. Process payments securely through external payment providers (Stripe, PayPal).
5. Fulfill legal obligations related to accounting, invoicing, tax documentation, and tourism regulations.
6. Prevent fraud and ensure system security (legitimate interest).
7. Manage booking channel synchronization with Airbnb, Booking.com, VRBO, and FeWo Direkt.

Failure to provide the required mandatory information may prevent us from processing your request or booking.

If you provide us with personal data belonging to third parties, you are responsible for having informed them and having obtained their consent for the purposes indicated in this Privacy Policy and in the Cookie Policy.

We comply with the EU General Data Protection Regulation (GDPR) and the Spanish Ley Orgánica de Protección de Datos (LOPDGDD).

2. Legal Basis for Processing Your Data

The legal basis for processing your personal data is:

• Your consent, given by clicking the “I have read and accept the Privacy Policy” checkbox,
  and/or
• Performance of a contract when you make a booking or request our services.

3. Recipients of Transfers

We do not transfer your personal data to third parties except to comply with legal obligations or when necessary to deliver requested services.
This includes service providers such as:

• Lodgify (website and booking system provider)
• Stripe / PayPal (payment processors)
• Airbnb, Booking.com, VRBO and Fewo Direkt (when bookings sync from these channels)
• Email or cloud service providers used for communication and storage
• Accounting or legal advisors when required by law

All such processing is carried out under appropriate data protection safeguards. 

4. International Data Transfers

Some providers (e.g., Lodgify, Stripe, PayPal, Airbnb, Booking.com) may store or process data outside the European Union.

In such cases, international transfers are protected by:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions
• Additional security measures

These ensure an equivalent level of data protection.

5. Rights

You have the following rights in relation to your personal data:

• Right of access to your data.
• Right to request rectification or deletion.
• Right to request restriction of processing.
• Right to object to processing.
• Right to data portability.
• Right to erasure.
• Right to withdraw your consent at any time.

To exercise any of these rights, you may submit a written request accompanied by a copy of your ID.

Garcies Riobo has appropriate forms available for this purpose. You may request them via the contact form () or send your own written request to:
Email:  [email protected]

6. Security Measures

Garcies Riobo has implemented the necessary technical and organizational security measures to ensure the protection of your personal data and to prevent alteration, loss, unauthorized access, or misuse, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.

7. This Policy is subject to change

This Privacy Policy may be updated to reflect legal or operational changes. Updates will be published on this page.