Privacy policy

Data controller: Casa Bardena Negra (Calle Virgen de la Peña 44, 31510 Fustiñana, Navarre).
Contact: contacto@bardenanegra.es · Tel: +34 699 39 92 85

What data we process

  • Contact details you give us in the forms: name, email, phone number and your message.
  • Quote request details: dates, number of guests, children's ages if you share them, requirements (cot, high chair, pet), preferred contact method and the reason for your trip if you choose to tell us.
  • Minimal technical data needed to serve the website and protect the forms against spam (for example, your IP address).

Purposes and legal basis

  • Replying to your enquiry and preparing a quote (Art. 6(1)(a) GDPR, consent, and Art. 6(1)(b), pre-contractual steps taken at your request).
  • Managing your booking and stay if you go ahead (Art. 6(1)(b) GDPR) and complying with the accommodation's legal obligations (Art. 6(1)(c) GDPR).
  • Preventing abuse and spam on the forms (legitimate interest, Art. 6(1)(f) GDPR).

Source of the data

You provide the data yourself through the forms, email, phone or WhatsApp. We do not buy lists or use third-party sources.

Processors and disclosures

We do not share your data with third parties unless required by law. To provide the service, we use providers acting on our behalf:

  • Netlify, Inc.: website hosting, receipt of form submissions (with its spam filter) and automatic sending of emails.
  • Google (reCAPTCHA): spam protection for the booking and contact forms.
  • Our email provider, to receive your message and reply to you.
  • WhatsApp (Meta), only if you choose to contact us that way.

If you choose to book on an external platform (Booking, Airbnb, Rurive, EscapadaRural…), that platform is responsible for its own data processing.

International transfers

Some providers (such as Netlify, Google or Meta) may process data outside the European Economic Area. These transfers are covered by the European Commission's standard contractual clauses or other valid mechanisms under the GDPR.

Retention

  • Enquiries and quotes without a booking: up to 12 months or until you ask us to delete them.
  • Bookings and stays: for the periods required by tax, accounting and tourism regulations.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to contacto@bardenanegra.es. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Minors

The forms are not aimed at children under 14. Any information about children you give us (for example, their age) is used solely to prepare for your stay.

Security

We apply technical and organisational measures proportionate to the risk: encrypted connection (HTTPS), access control and keeping the data we ask for to a minimum.

Third-party services on the website

  • Maps (Google Maps and OpenStreetMap): these only load if you accept functional cookies. See our cookie policy.
  • Google Analytics: only if you accept it in your cookie preferences.
  • Google reCAPTCHA: only on the forms, to prevent spam. It is governed by Google’s privacy policy and terms.

Last updated: 9 October 2026.