We process your data only for what you need from us: booking, staying, being looked after, or working with you. Here we explain how, clearly and with no fine print.

Data controller

Edenora Capital, S.L. (Th’Eden Homes), tax ID B24841678, Calle de Zorrilla 27, 4 A, 28014, Madrid. For any privacy matter: [privacidad@thedenhomes.com].

What data we process

• Guests: name, contact details, dates, number of guests, stay preferences and payment details. Card details are processed directly by our payment provider; we do not store them.
• Guest registration: the identity details that the law requires us to report to the authorities (document, nationality, date of birth and similar).
• Owners, agencies, partners and investors: name, contact details, company and the information you provide about your home or project.
• Contact: whatever you write in our forms, emails or messages.
• Browsing: technical and usage data from the website, in accordance with our [Política de cookies].

Purposes and legal basis

Purpose	Legal basis	Retention
Managing your booking and your stay	Performance of the contract	For as long as the relationship lasts and, afterwards, the statutory limitation periods
Guest registration with the authorities	Legal obligation (Royal Decree 933/2021 in Spain; Alojamento Local regulations in Portugal)	The period set by the regulation (in Spain, 3 years)
Invoicing and tax obligations	Legal obligation	6 years
Responding to your enquiries	Your request and our legitimate interest in assisting you	Until resolved and 1 year afterwards
Assessing your home or project and sending you our dossier	Pre-contractual measures at your request	Up to 2 years from the last contact
Sending you Th’Eden news	Your consent or, if you are already a customer, our legitimate interest in offering you similar services	Until you unsubscribe

You can unsubscribe from our communications at any time, using the link in each email.

Who we share it with

We do not sell your data. We only share it when necessary for your stay or when the law requires it:

• Home owner: the essential data to prepare the home and look after you.
• Providers who work for us: booking management (Hostaway, based in the EU), payments (stripe), web hosting (Deercode), cleaning, maintenance and concierge service. All are contractually bound to protect your data and use it only for that service.
• Authorities: when the law requires it, as with guest registration.

Transfers outside the EU

If any provider processes data outside the European Economic Area, it does so with the safeguards required by the GDPR: European Commission adequacy decisions or standard contractual clauses.

Your rights

You can access your data, rectify it, erase it, object to its processing, restrict it, request its portability and withdraw your consent whenever you wish.

Write to us at [privacidad@thedenhomes.com] stating which right you want to exercise. We may ask you to verify your identity. We reply within a maximum of one month.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Security

We apply technical and organizational measures to protect your data against loss, unauthorized access or misuse.

Minors

To book, you must be over 18. We process the data of minors traveling with you only when the law requires it, as with guest registration.

Changes to this policy

If we change anything significant, we will publish it here and, if it affects you, let you know.

Last updated: October 13, 2026.