Privacy policy
Last updated: 31 October 2026
At Cal Bosch we treat your personal data with respect and in accordance with the EU General Data Protection Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD). Here we explain what data we process, why, and what your rights are.
1. Who is the data controller
- Data controller: Maria Isabel Guardia Solé (Cal Bosch)
- Tax ID (NIF): 40863302F
- Address: Cal Bosch, 25566 Llagunes (Soriguera), Pallars Sobirà, Lleida, Spain
- Email: calbosch@calbosch.com
- Phone: +34 620 954 845
2. What data we process
Enquiry and booking form
Full name, email, phone number, check-in and check-out dates, number of guests and the text of your enquiry. We only process the data you give us.
Enquiries by phone or email
The data you give us in the call or message.
Browsing the website
The server hosting the website automatically logs some technical data for each visit (IP address, date and time, page requested and browser type). We use it only to keep the website secure and working properly, not to identify you or build profiles.
This website does not use cookies or any analytics or advertising tools. More information in our cookie policy.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiries and booking requests. | Your consent when you send the form (Art. 6(1)(a) GDPR) and taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). |
| If you book: managing your stay, invoicing and meeting legal obligations (tax, accounting and guest registration). | Performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR). |
| Technical server logs. | Our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR). |
We do not make automated decisions or build profiles with your data, and we will not send you advertising.
4. How long we keep your data
- Enquiries that do not lead to a booking: as long as needed to reply, and at most one year.
- Bookings: for the duration of the relationship and afterwards for the periods required by law (tax, accounting and guest registration).
- Technical server logs: the period set by the web hosting provider for security purposes.
5. Who we share your data with
We do not share your data with third parties, except where required by law (for example, with the tax authorities or, for guest registration, with the police).
To run the website and email, we use providers who process data on our behalf, under the data processing agreement required by Article 28 GDPR:
- Web hosting: Arsys Internet, S.L.U.
- Email: Arsys Internet, S.L.U.
6. International transfers
We do not transfer your data outside the European Economic Area. The only exception is the Google Maps map on the contact section: it only loads if you click “Show the map”, in which case Google receives your IP address directly. Google LLC is certified under the EU-US Data Privacy Framework. More information in the Google privacy policy.
7. Your rights
You can exercise the following rights at any time:
- Access: find out what data of yours we process.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask us to delete it.
- Objection and restriction: object to the processing or ask us to restrict it.
- Portability: receive your data in a structured format.
- Withdraw your consent at any time, without affecting processing carried out before.
To exercise them, write to us at calbosch@calbosch.com stating which right you wish to exercise. If necessary, we will ask you to prove your identity.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
8. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration. Communication with this website uses an encrypted connection (HTTPS).
9. Minors
If you are under 14, please do not send us personal data without the consent of your parents or guardians. Bookings must be made by an adult.
10. Changes to this policy
We may update this policy to reflect legal changes or changes to the website. The date of the last update always appears at the top of the page.