Privacy Policy


Costa Holidays as a data controller, takes your privacy very seriously and are committed to the safeguarding of your personal data.

Our privacy policy has been developed to keep you informed about any personal data we may hold, how it is collected and how it is processed. This is in keeping with data protection guidelines and most recently the EU’s General Data Protection Regulation (GDPR).

We believe that it is important to promote fairness and transparency for all individuals therefore we are committed to ensuring your data is held in a secure way for the purposes intended.

We may update our privacy policy on occasion therefore request that you review it to keep up-to-date with any changes. If you wish to contact us regarding this policy or have a question regarding your personal data then please contact us at

What information do we collect?

When you make a booking we collect any contact details which you provide to us. These may include, however are not exhaustive,  your name, email address, postal address, dates of booking, financial details to authorize payment, contact details of other party members and any other information which you may provide to us as a requisite for your booking. The information we collect when you make a booking is held for the performance of a contract. 

By way of legal obligation, we collect by email or in person, copies of Passports/ID Cards of all guests over the age of 16 years, in accordance with the Decree 28/2016 Andalusia Tourism Law.

We may also contact you shortly after your booking and ask you to leave feedback to enable us to improve our services.

From time to time, we may contact you to update you on the facilities on offer at COSTA HOLIDAYS or to let you know of any offers which we may have available. This may be via email or post. You have the opportunity to opt out at any time by contacting us at

What do we do with the information we collect?

• To allow us to complete your booking and provide the services requested

• To keep you informed of any updates or special offers

• To gain feedback to assist with our development programmer

• To ensure the health and safety of all of our guests

• To assist with any queries that you may have or provide further information, as requested

What legal basis do we have for processing your personal data?

We have a legal obligation for processing your data, in accordance with the Decree 28/2016 Andalusia Tourism Law. 

When do we share personal data?

Guest personal data will be shared with the relevant authorities within 24 hours of arrival date. 

In accordance with your holiday booking, we may need share your name and telephone contact with a 3rd party in such instances where we are arranging Airport Transfers or other services, booked by you.  This data will be shared by email or telephone and will be used for the sole purpose of its nature. 

How do we secure personal data?

We keep your personal data secure by following internal policies of best practice and training for our staff.

How long do we keep your personal data for?

Your Passport/ID copies will be held for a minimum of 12 months, and the Holiday Contract will be held for a minimum of 3 years. 

How to contact us?

If you have any questions or concerns about your privacy practices, your personal information, or if you wish to file a complaint please contact us on 0034 619 925 714 or by email 

Costa Holidays

Diane Brooks X4436173-W

C/.Ciudad de Melilla 14, 

29631 Benalmádena, Málaga

Disclaimer: This privacy notice does not constitute legal advice. The content is for general information purposes only. It is provided without any representations or warranties express or implied. If necessary, seek appropriate legal counsel in relation to GDPR or your specific circumstances.