Privacy policy

1. Details of the joint data controllers

  • Company Name: Kategora Rentals, S.L.U.
  • NIF: B01893577
  • Address: Gran Vía Don Diego López de Haro 2 – 8º, 48001 Bilbao
  • Email:
  • Website:
  • Company Name: Nivaria Beach Management, S.L.U.
  • NIF: B-76824606
  • Address: Playas de Arico 1, in Abades (Arico) CP 38588 (Santa Cruz de Tenerife)
  • Email:
  • Website:

Data Protection Officer:

2. Applicable law

Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), with the Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, and its implementing regulations.

The company may modify this privacy policy to adapt it to new legislation, jurisprudence, or interpretation of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookies Policy, and General Conditions, if any, and are collected for the sale of certain products or services if such access involves any specialty in the protection of personal data.

3. Purpose of the processing of personal data

We process your personal data for the following purposes:

  • Execute the reservation contract. Responsible: Nivaria Beach Management, S.L.U.
  • To send you commercial information about apartment rentals, vacation rentals, or related to the sector, own or affiliated entities, motivated by the legitimate interest generated by our previous business relationship. Responsible: Kategora Rentals, S.L.U.

4. Legitimation to process the data collected

  • Booking form: The legitimacy for the processing of your data is the execution of the booking contract.
  • Sending commercial communications: The legal basis is the existing legitimate interest, based on our previous contractual relationship.

5. How long will we keep your data?

  • Booking form: We will retain your personal data for as long as necessary to fulfil the legal obligations arising from the booking process.
  • Sending of commercial communications: We will retain your personal data for this processing until you object to it.

6. Transfers

Your data will not be transferred, except when it is for:

  • Compliance with legal obligations.

7. International transfers

No international transfers will be carried out

8. Security measures

As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that we have adopted the necessary technical and organizational measures to ensure the security of personal data and avoid its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed. Notwithstanding the foregoing, the user must be aware that Internet security measures are not impregnable.

9. Rights of the data subject

The interested party has the following rights regarding the processing of their personal data and may exercise them by contacting the Data Controller:

  • If the legal basis for the processing is consent, the right to withdraw consent at any time, without affecting the processing prior to its withdrawal.
  • Right to request access to your personal data.
  • Right to request their rectification if they are inaccurate, or to request their deletion (for example, if you consider that they are no longer necessary for the purposes for which they were collected).
  • Right to request the limitation of their processing, provided that any of the conditions set forth in the regulations are met, in which case we will only keep them for the exercise or defense of claims.
  • Right to object to the processing, for example, regarding the sending of commercial information by us, in which case we will stop processing your data for that purpose, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • Right to data portability.
  • Right to file a complaint before the Spanish Data Protection Agency (competent Data Protection supervisory authority), especially when you have not obtained satisfaction in the exercise of your rights: