Privacy Policy

1. Data Controller

2. Data We Collect and Purposes

Depending on how you use the Website, we may process the following categories of personal data:

Source of the data	Data processed	Purpose	Legitimacy
Contact form	Name, email, telephone number, message	Respond to your enquiry and handle the communication	Consent of the data subject
Book an apartment	Name, ID number/passport number, email address, telephone number, dates of stay	Performance of the accommodation contract	Performance of the contract
Web browsing	IP address, browser type, pages visited	Statistical analysis and service improvement	Legitimate interest / cookie consent
Contact email	Email address and message content	Handling enquiries and communications	Consent of the data subject

3. Data Retention

Personal data will be retained for the time strictly necessary to fulfil the purpose for which it was collected and, in any case, for the legally established periods:

• Datos de reservas y contratos de alojamiento: 5 años desde la finalización de la relación contractual, conforme a la normativa fiscal y civil aplicable.
• Enquiry and communication data: 1 year from the last communication, unless there is an ongoing contractual relationship.
• Datos de navegación y cookies: según se indica en la Cookie Policy.

4. Recipients and Data Transfers

Wasabi & Rentals S.L. will not share your personal data with third parties unless required by law or strictly necessary for the provision of the contracted service. In that case, possible recipients include:

• ICNEA (reservation management software): data processor acting under our instructions.
• Booking.com / Airbnb: distribution platforms with their own privacy policies.
• Public Administrations: where required by law (Passenger Register, National Police, Tax Agency).
• Banks: for the management of payments and receipts arising from the business.

No international data transfers outside the European Economic Area are made, unless the indicated service providers have adequate safeguards in place in accordance with the GDPR.

5. Data Subject Rights

You may exercise the following rights recognised under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD) at any time:

• Access: find out what data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data when it is no longer necessary.
• Objection: object to the processing of your data in certain circumstances.
• Restriction: request restriction of processing in certain cases.
• Portability: receive your data in a structured, commonly used format.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us in writing at our postal address or by email at info@hanamigroup.es, stating your name, surname, a copy of your ID or identification document and the right you wish to exercise.

If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Data Security

Wasabi & Rentals S.L. applies the necessary technical and organisational measures to ensure the security of personal data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the data and the risks to which they are exposed.

7. Minors

Our services are not directed at persons under 18 years of age. We do not knowingly collect personal data from minors. If you become aware that a minor has provided personal data without their guardian's consent, please notify us at info@hanamigroup.es.

8. Changes to this Privacy Policy

Wasabi & Rentals S.L. reserves the right to modify this Privacy Policy to adapt it to legislative, case law or industry practice changes. In the event of substantial modifications, users will be informed through the Website.

Wasabi & Rentals S.L. — Hanami Group · Estepona, Málaga · Last reviewed: April 2026