Data controller

The controller of the personal data collected through this website and the direct booking process is Carlos Johanns Planells, trading as Can Planes, NIF 47255417P. Can Planes is registered as tourist accommodation in Ibiza under registration number ETV-1640-E. Contact and postal details are shown in the Legal Notice section of this website.

Personal data we process

We may process identification and contact details, information relating to your booking and stay, the number and composition of guests, arrival information, communications with us, payment status and other information necessary to manage your reservation.

Purposes and legal basis

Personal data is processed in order to:

• respond to enquiries and manage bookings;
• process and verify payments;
• communicate with guests before, during and after their stay;
• comply with legal, tax, accounting and administrative obligations;
• protect the property, prevent fraud and handle possible claims or disputes.

Processing relating to a booking is based on the performance of a contract or on steps taken at your request before entering into a contract. Certain processing is necessary to comply with legal obligations. Where appropriate, data may also be processed on the basis of legitimate interests relating to security, fraud prevention and the defence of legal claims.

Marketing communications will only be sent where there is an appropriate legal basis and, where required, your consent.

Service providers and recipients

To provide the booking and payment service, personal data may be processed by technology and payment providers such as Smoobu, Stripe and PayPal, within the scope of the services they provide. Data may also be disclosed to public authorities where required by law.

Where a service provider processes personal data outside the European Economic Area, such processing will be subject to the safeguards required under applicable data protection law.

Payments

Can Planes does not store full credit or debit card details. Electronic payment information is processed by the payment provider selected during checkout.

Data retention

Personal data will be retained for as long as necessary to manage the booking and accommodation relationship and, afterwards, for the periods required by applicable legal, tax and accounting obligations or for the establishment, exercise or defence of legal claims.

Your rights

You may request access to, rectification or deletion of your personal data, as well as restriction of processing, data portability or objection to processing where applicable. Where processing is based on consent, you may withdraw that consent at any time.

Requests may be sent using the contact details shown on this website. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).