Privacy policy
Last updated: 9 October 2026We handle your data with care. This policy explains what data we collect, why, and what rights you have under the GDPR (Regulation (EU) 2016/679) and Spanish law LOPDGDD 3/2018.
1. Data controller
[to be completed], NIF/NIE [to be completed], [to be completed], Spain. Email: info@keypact.com.
2. What data
When you send a request or email us: name, email address, phone number, dates of stay, number of guests and your message. On arrival: the identity details we are legally required to register. On payment: the details needed to process the payment.
3. Purposes and legal basis
We use your data to answer your request and carry out your booking (performance of a contract), to meet the legal guest registration requirement (Real Decreto 933/2021) and our accounting obligations (legal obligation), and possibly to send you a message after your stay (legitimate interest; you can always opt out).
4. Sharing
We never sell your data. We only share it with parties that help us provide the service: our hosting provider, our booking and payment system and our accountant, with whom we have data processing agreements. We pass registration data to the Spanish authorities because the law requires it.
5. Retention
Requests that do not lead to a booking are deleted after 12 months. Booking data is kept as long as tax law requires. Guest registration data is kept for 3 years, as required by law.
6. Cookies and analytics
This website uses no tracking or advertising cookies and loads no third-party fonts or scripts. We only remember your language choice in your own browser (local storage), which requires no consent.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. Send your request to info@keypact.com. If you disagree with how we handle your data, you can file a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (www.aepd.es).
8. Security
We take appropriate technical and organisational measures to protect your data, such as an encrypted connection (HTTPS).