Legal terms

Privacy Policy

In our privacy policy, we explain which personal data we collect, how we use this personal data, how personal data is shared and which privacy rights you have.

Last updated: August 2026

At StayatSas, we take your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it and how we handle it.

1. Who are we?

StayatSas
Email: stayatsas@gmail.com
Phone / WhatsApp: +31 6 17146172
Website: https://stayatsas.com

2. What personal data do we process?

When you make a reservation or contact us, we process the following data:

first and last name
address details, if necessary
email address
telephone number
payment details
length of stay
any additional information that you provide yourself

In addition, for the flat in Marbella, we process the following in accordance with Spanish law:

details from the passport or identity document of guests for whom registration is a legal requirement
if necessary, a photograph or scan of a valid passport or identity document for this statutory registration

3. Why do we process this data?

We use your data exclusively for:

processing bookings
communication before, during and after the stay
sending practical information
compliance with legal obligations
administrative purposes
processing payments
improving our website and services
sending newsletters, inspirational emails, new blog posts or special offers, but only if you have given your consent or signed up for them

We never sell your personal data to third parties.

4. Guest Registration in Marbella

For stays at our apartment in Marbella, Spanish law requires us to register the identity of all guests. This requirement applies to hotels, apartments and holiday rentals in Spain. Before arrival, all guests for whom this statutory registration is required must send us a clear copy or photo of a valid passport or national identity card so that we can complete the legally required guest registration. The Spanish authorities may verify this information. Without the required registration, we are legally unable to accommodate guests. Your personal data is treated confidentially and used solely to comply with the statutory registration requirements.

We therefore ask you to provide the details required for this statutory registration before arrival. If necessary, we will ask for a clear photograph or scan of a valid passport or identity document belonging to the guests for whom this registration is a legal requirement.

The Spanish authorities can check this. Unfortunately, without this mandatory registration, we are not allowed to receive guests.

We use this data exclusively to comply with the statutory registration requirement. The data will be treated confidentially and will not be used for commercial purposes.

5. Contact form and contact via email or WhatsApp

When you contact us via the contact form, by email or via WhatsApp, we use your details exclusively to answer your question, process your reservation or send practical information about your stay.

When you send us a message via WhatsApp, we process your telephone number, name, the content of your message and any other information you provide. WhatsApp is a service provided by Meta. The use of WhatsApp is also subject to WhatsApp’s privacy policy.

6. Payments

We may use external payment providers, such as Stripe, Mollie and PayPal, to process payments.

These parties process payment data required to handle the payment securely. Examples include the payment method, the payment reference, the amount, the date of payment and any data you provide yourself during the payment process.

The privacy policies of the relevant payment providers also apply to the processing of your data by those providers.

7. Cookies

Our website uses cookies and similar technologies. We use functional cookies to make the website work properly and analytical cookies to gain insight into the use of our website.

In addition, third-party services, such as Google Analytics, Instagram, YouTube and payment providers, may use cookies or similar technologies when you use parts of our website that involve these services.

When cookies are placed for which consent is required, we ask for this consent via our cookie banner.

8. Google Analytics

We use Google Analytics to gain an insight into how our website is used. This enables us, for example, to see which pages are visited and how visitors use the website.

The data collected is anonymised as far as possible and is not intended to identify visitors personally. We use this information to improve our website and the services we provide.

9. Social media and embedded content

Our website may contain links to social media channels such as Instagram, Facebook, Pinterest and YouTube.

In addition, Instagram posts or YouTube videos may be embedded on our website. When you view or load this embedded content, platforms such as Meta and Google may process data. This includes your IP address, browser details, device information and data regarding your interaction with the content.

The privacy terms of the relevant platforms apply to this processing.

10. Hosting and website management

Our website is hosted by name. This party can process technical data necessary for the secure and proper functioning of the website, such as IP addresses, server logs and technical information about website visits.

Additionally, we can make use of a website administrator for maintenance, security and technical support of the website.

11. How long do we keep your data?

We do not keep personal data for longer than is necessary for the purpose for which it was collected, unless we are legally obliged to keep data for a longer period.

We retain reservation data and administrative data for as long as is necessary for our administration and legal obligations.

Data that you provide via the contact form, email or WhatsApp will be kept for as long as is necessary to answer your question or process your reservation.

We retain data for the statutory registration of guests in Marbella for as long as is necessary to comply with Spanish legal obligations.

12. Security

We handle your personal data with care and take appropriate measures to protect it against loss, misuse, or unauthorised access.

13. Your Rights

You have the right to:

to view your personal data
having your details corrected
having your data deleted, insofar as this is legally permissible
to object to the processing of your personal data
to have the processing of your personal data restricted
to have your data transferred, where applicable
to withdraw previously given consent

Would you like to exercise one of these rights? Then please contact us via stayatsas@gmail.com.

We may ask you to confirm your identity to ensure that the request is being made by the right person.

Are you not satisfied with how we handle your personal data? Then you have the right to lodge a complaint with the Dutch Data Protection Authority.

14. Contact

Do you have any questions about this privacy statement or about the processing of your personal data?

Please feel free to contact us.