Privacy Policy

Costa Holidays as a data controller, takes your privacy very seriously. We are committed to the safeguarding of your personal data.

Our privacy policy has been developed to keep you informed about any personal data we may hold, how it is collected and how it is processed. This is in keeping with data protection guidelines and most recently the EU’s General Data Protection Regulation (GDPR).

We believe that it is important to promote fairness and transparency for all individuals, therefore we are committed to ensuring your data is held in a secure way for the purposes intended.

We may update our privacy policy on occasion, so we request that you review it to keep up-to-date with any changes. If you have a question regarding your personal or the privacy policy, please contact us.

When you make a booking, we collect any contact details which you provide to us. These may include, however are not exhaustive, your name, email address, postal address, dates of booking, financial details to authorize payment, contact details of other party members and any other information which you may provide to us as a requisite for your booking.

By way of legal obligation, we may collect by email or in person, copies of Passports/ID Cards of all guests over the age of 16 years, in accordance with the Decree 28/2016 Andalusia Tourism Law.

Why do we need your information?

• To allow us to complete your booking and provide the services requested
• To keep you informed of any updates or special offers
• To gain feedback to assist with our development programmer
• To ensure the health and safety of all of our guests
• To assist with any queries that you may have or provide further information, as requested
• To contact you in the unlikely case of an emergency

We may also contact you shortly after your booking and ask you to leave feedback to enable us to improve our services.

From time to time, we may contact you to update you on the facilities on offer at Costa Holidays or to let you know of any offers which we may have available. This may be via email or post. You have the opportunity to opt out at any time by contacting us at info@costaholidays.es.

When do we share personal data?

Guest personal data will be shared with the relevant authorities within 24 hours of arrival date. 

In accordance with your holiday booking, we may need to share your name and telephone contact with a 3rd party An example would be Airport Transfers, Meet & Greets, or ther Services. This data will be shared by email or telephone and will be used for the sole purpose of its nature.

What legal basis do we have for processing your personal data?

We have a legal obligation for processing your data, in accordance with the Decree 28/2016 Andalusia Tourism Law. 

How do we secure personal data?

We keep your personal data secure by following internal policies of best practice and training for our staff.

How long do we retain your personal data?

Registration forms will be held for a minimum of 12 months, and the Holiday Contract will be held for a minimum of 3 years. Telephone and email contact details along with relevant information about our services may be held on a permanent basis.

What rights you have over your data?

If you are a guest who has visited any of our holiday homes or an owner who has worked with us previously, you can request to receive an exported file of the personal data we hold about you. You can also request that we erase any personal data we have on file. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

If you have any questions or concerns about your privacy practices, your personal information, or if you wish to file a complaint, please contact us.

Costa Holidays

+34 619 925 714
info@costaholidays.es
www.costaholidays.es

Emily Brooks – Y0046851Z
C/.Ciudad de Melilla 14, 
29631 Benalmádena, Málaga

This privacy notice does not constitute legal advice. The content is for general information purposes only. It is provided without any representations or warranties express or implied. If necessary, seek appropriate legal counsel in relation to GDPR or your specific circumstances.