Privacy policy

Last updated: June 2026

1. Data controller

The data controller for personal data collected on this website is Herederos de Expósito Carballada CB, owner of Casa Lugar de Fidalgo (Galicia Tourism Registration Number: VUT-LU-003995), located on the O Saviñao to Chantada road, Ribeira Sacra, Galicia, Spain. Contact: reservas@lugardefidalgo.com

2. Data we collect

We collect the following data when you make a booking or contact us:

• Full name
• Email address
• Phone number (optional)
• Payment data (managed by Stripe, not stored on our servers)
• Stay dates and number of guests

3. Purpose of processing

Your data is used exclusively to manage your booking, send you confirmations and communications related to your stay, and respond to your contact enquiries. We do not use your data for marketing without your explicit consent.

4. Legal basis

The processing of your data is based on the execution of the booking contract (Art. 6.1.b GDPR) and on legitimate interest to respond to enquiries (Art. 6.1.f GDPR).

5. Data retention

Booking data is retained for the legally required period (minimum 5 years for tax obligations). Contact enquiry data is deleted 12 months after the last communication.

6. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as data portability. You can exercise these rights by emailing reservas@lugardefidalgo.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Payment processors

Payments are processed by Stripe, Inc. Stripe acts as a data processor under its own privacy and security policies (stripe.com/privacy). We do not store credit card data on our servers.