Privacy Policy

What this site collects, why, who else sees it, and what you can ask us to do about it.

Last updated: 16 September 2026

1. Data controller

The controller responsible for the processing of personal data in connection with this website is:

Sascha Traber
Rohrer Straße 175
70771 Leinfelden-Echterdingen
Germany

Email: saschatraber@protonmail.com
Phone: +49 176 554 30643

2. General information

We respect your privacy and process personal data in accordance with applicable data-protection law, including the General Data Protection Regulation (GDPR), where applicable.

Personal data means any information relating to an identified or identifiable natural person.

3. Website access

When you access this website, technical information may automatically be processed in order to provide the website securely and reliably.

This may include:

  • IP address
  • Date and time of access
  • Requested page or file
  • Browser type and version
  • Operating system
  • Referrer information
  • Technical log and security information

The processing of such information may be necessary for the operation, security and stability of the website.

The legal basis, where applicable, is Article 6(1)(f) GDPR (legitimate interests in operating and securing the website).

4. Contact

If you contact us by email, telephone or through a contact form, we process the information you provide in order to respond to your enquiry.

Depending on the nature of the enquiry, the legal basis may be Article 6(1)(b) GDPR for pre-contractual or contractual communication or Article 6(1)(f) GDPR for other legitimate communication purposes.

5. Bookings

When you make a reservation, we process information necessary to manage and perform the booking.

This may include:

  • Name
  • Contact details
  • Booking dates
  • Number of guests
  • Booking information
  • Payment status
  • Communication relating to the reservation
  • Information required by applicable accommodation and guest-registration laws

The principal legal basis for processing booking information is Article 6(1)(b) GDPR.

Where processing is required to comply with a legal obligation, Article 6(1)(c) GDPR applies.

6. Payment processing

Where online payments are offered, payment information may be processed by an external payment service provider.

The payment provider processes information necessary to execute and secure the payment.

We do not necessarily receive or store complete payment-card information ourselves.

The privacy information and terms of the respective payment provider also apply to its processing activities.

7. Booking management services

We may use external booking-management or property-management services to administer availability, reservations and guest communications.

Where such providers process personal data on our behalf, appropriate data-protection arrangements are used where required by law.

8. Guest registration

Spanish law may require accommodation providers to collect and report certain information relating to guests to the competent authorities.

Where this is required, such data is processed in order to comply with our legal obligations.

The legal basis is Article 6(1)(c) GDPR.

9. Cookies and similar technologies

This website may use cookies and similar technologies.

Cookies that are strictly necessary for the operation of the website may be used without separate consent where permitted by law.

Non-essential technologies, including certain analytics, advertising or tracking technologies, will only be used where the legally required consent has been obtained.

Where a consent-management tool is provided, you may use it to manage or withdraw your consent.

10. Service providers

We may use specialised service providers for services such as:

  • Website hosting
  • Booking management
  • Payment processing
  • Email communication
  • Website security
  • Technical infrastructure
  • Analytics, where enabled

Personal data is only shared to the extent necessary for the relevant purpose and in accordance with applicable data-protection law.

11. International data transfers

Some service providers may process data outside the European Economic Area.

Where this occurs, appropriate safeguards required under applicable data-protection law are used, where necessary.

12. Data retention

Personal data is retained only for as long as necessary for the respective processing purpose or as required by applicable statutory retention obligations.

Booking, accounting and tax-related information may therefore be retained for longer periods where required by law.

13. Your rights

Subject to the requirements of applicable law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request deletion of personal data
  • Request restriction of processing
  • Object to certain processing
  • Request data portability
  • Withdraw consent at any time where processing is based on consent

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

14. Right to lodge a complaint

You have the right to lodge a complaint with a competent data-protection supervisory authority if you believe that your personal data has been processed unlawfully.

15. Security

We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure.

16. Changes to this Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to the website, our services or applicable legal requirements.

The current version is published on this website.

17. Contact

For questions concerning privacy or the processing of personal data, please contact:

Sascha Traber

Email: saschatraber@protonmail.com
Phone: +49 176 554 30643

A question about any of this?

Ask before you book — you'll get a direct answer from your host, not a support queue.

← Back to Casa Tilda