Privacy Policy

This Privacy Policy explains how CasaNilva collects, uses and protects personal data when you use this website, make a booking, complete a payment, or contact us.

1. Who is responsible for your data?

Data controller: Tomas Stackauskas
Contact email: contact@casanilva.com
Postal address: Brunnsvägen 8, 549 77 Skövde, Sweden

2. What data we collect

We may collect the following categories of personal data:

• Name
• Email address
• Booking details such as check-in date, check-out date, number of guests and booking price
• Payment-related information received through Stripe, such as payment or session references
• Messages you send through the contact form
• Technical information required for security, fraud prevention and normal site operation

3. Why we process your data

We process personal data for the following purposes:

• To manage booking requests and confirmed bookings
• To process secure payments through Stripe
• To send booking confirmations, check-in instructions and other booking-related communication
• To respond to inquiries sent through the contact form or by email
• To maintain website security and prevent fraud, misuse or double bookings
• To comply with legal, tax and accounting obligations

4. Legal basis

Depending on the situation, we process your personal data because it is necessary to take steps at your request before entering into a contract, to perform a contract, to comply with legal obligations, or for legitimate interests such as operating, securing and improving the booking process.

5. Payment processing

Payments are processed securely by Stripe. We do not store your full card details on this website. Stripe may process personal and payment data in accordance with its own privacy notice and terms.

6. Data sharing

We may share personal data with service providers only where necessary, for example:

• Stripe for payment processing and refunds
• Email delivery providers for booking, support and inquiry emails
• Hosting, database and infrastructure providers used to operate the website

7. International transfers

Some service providers may process personal data outside your country of residence. Where applicable, appropriate safeguards are used for international data transfers.

8. How long we keep data

We keep personal data only for as long as necessary for booking operations, customer service, legal compliance, accounting, fraud prevention and dispute handling. Booking and payment records may be retained for the period required by applicable tax and accounting laws.

9. Your rights

Depending on applicable law, you may have the right to request access to your personal data, request correction or deletion, request restriction of processing, object to certain processing, request data portability, and lodge a complaint with a supervisory authority.

10. Cookies

This website may use strictly necessary cookies or similar technical storage required for secure login, session handling and normal site operation. If analytics, advertising or other non-essential technologies are added later, this policy should be updated and any required consent mechanism should be implemented before they are used.

11. Contact

For privacy-related questions or requests, contact:
contact@casanilva.com