Last updated: November 2026. This is a translation; in the event of any discrepancy the Spanish version prevails.
At PortoHome we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Here we explain what data we use, why, and what your rights are.
1. Data controller
- Controller: José Antonio Capón Lamas (PortoHome). Tax ID (NIF) 34285220V.
- Address: Rúa Albariza 18, 27170 Portomarín (Lugo), Spain.
- Email: contacto@portohome.es. Phone: +34 614 303 646.
2. What data we process and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You contact us through the contact form, by email, by phone or on WhatsApp | First and last name, email or phone number, and whatever you tell us in your message | To answer your enquiry | Your consent (Art. 6.1.a GDPR) and, if you ask about a booking, pre-contractual steps (Art. 6.1.b) |
| Bookings on the website | Name, email, phone number, number of guests, dates and payment details | To manage the booking, the payment and your stay | Performance of the contract (Art. 6.1.b) |
| Arrival at the home (guest register) | The data required by Royal Decree 933/2021: name, identity document, nationality, date of birth, address, contact details and details of the stay | To comply with the legal obligation to register guests and report them to the Spanish Ministry of the Interior | Legal obligation (Art. 6.1.c) |
| Invoicing | Name, tax ID or identity document, address and amount | To issue invoices and meet tax and accounting obligations | Legal obligation (Art. 6.1.c) |
| Browsing the website | IP address, device and browser type, pages visited | Usage statistics (Google Analytics) and website security | Your consent to analytics cookies (Art. 6.1.a) and legitimate interest in security (Art. 6.1.f). See our cookie policy |
Payments for bookings are made through Lodgify's payment gateway: PortoHome never sees or stores your full card number. We do not send advertising, and we do not make automated decisions or create profiles with your data.
3. How long we keep your data
- Enquiries: for as long as needed to answer you and at most one year afterwards, unless they become a booking.
- Bookings and invoicing: for the duration of the relationship and then for the periods required by law (up to 6 years, under tax law and the Spanish Commercial Code).
- Guest register: 3 years from the end of the stay, as set out in Royal Decree 933/2021.
- Browsing statistics: according to the Google Analytics settings (14 months at most).
4. Who we share data with
- Spanish Ministry of the Interior and State Security Forces: guest register data, as required by law.
- Spanish Tax Agency and other authorities: where required by law.
- Service providers working for us (data processors, under contract): Lodgify (booking and payment platform), Raiola Networks (website hosting, in Spain), Google (Google Analytics and, if you ask for it, Google Maps), Meta (WhatsApp, if you message us there), CookieYes (cookie banner) and our accountants.
Some of these providers (Google and Meta) may process data in the United States. They do so with the safeguards required by the GDPR: the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
We do not sell your data or pass it on to third parties for advertising.
5. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent without affecting anything done beforehand. Write to contacto@portohome.es or to the postal address above, stating which right you wish to exercise. If needed to identify you, we will ask for a copy of your identity document.
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
Guest register data cannot be erased before 3 years have passed, because the law requires it to be kept.
6. Minors
This website is not aimed at children under 14. Bookings must be made by an adult.
7. Security
We apply technical and organisational measures to protect your data: the website uses an encrypted connection (HTTPS), access to data is limited to those who need it, and our providers comply with the GDPR.
8. Changes
We may update this policy to reflect changes in the law or in our service. The version in force is always the one published on this page.