Privacy & Cookie Policy
This is the public privacy and cookie policy for Tara Casa. It explains what personal data may be handled when you use this website or contact Tara Casa.
GDPR Compliance
This policy is the GDPR compliance notice for Tara Casa and is editable from Grav Admin.
Data controller
The data controller is Tara Casa, La Magdalena, Cartagena, Murcia, Spain. Tara Casa can be contacted at info@taracasa.com.
Tourist Licence: VV.MU.2114-1.
What this website collects
This website is mainly an information site. It does not currently use contact forms, newsletter sign-up forms, embedded maps, analytics tags, advertising pixels or social-media tracking embeds.
Tara Casa may receive personal data when you choose to contact Tara Casa by email, phone, WhatsApp, Facebook, Instagram or Etsy, or when you make an enquiry, booking, course request or commission request. Depending on what you send, this may include:
- your name and contact details;
- enquiry, booking or commission details;
- preferred dates, group size and room preferences;
- dietary, allergy, mobility or access information that you choose to provide so Tara Casa can respond properly;
- payment, invoice or accounting information where a booking or purchase is made;
- messages, reference images, feedback or testimonials that you choose to send.
The website also uses normal technical server information and an essential Grav session cookie so the site can operate securely.
Why data is used and lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to enquiries and providing requested information | Legitimate interests and steps before a contract |
| Managing bookings, stays, courses, extras or commissions | Contract |
| Handling payments, invoices, accounting and legal records | Legal obligation and contract |
| Responding to dietary, allergy, mobility or health-related information you choose to provide | Explicit consent and/or the need to provide the requested stay or activity safely |
| Website security, fraud prevention, troubleshooting and essential cookies | Legitimate interests |
| Marketing emails, identifiable guest photos, recordings or testimonials | Consent |
Tara Casa does not sell personal data.
Cookies
This site currently uses essential cookies only. Because no analytics, advertising or tracking cookies are currently used, a cookie opt-in banner is not required for non-essential cookies.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
grav-site-* |
Tara Casa / Grav CMS | Essential session cookie used for secure site operation | About 30 minutes | Essential |
If analytics, advertising pixels, embedded third-party content or non-essential cookies are added later, this page should be updated and a consent banner should be added before those cookies run.
Third-party services and external links
The site links to third-party services such as WhatsApp, Facebook, Instagram, Etsy and Google Maps. These are links, not embedded trackers. If you choose to open or contact Tara Casa through those services, the relevant provider may process your data under its own privacy policy.
You can avoid those platforms by contacting Tara Casa directly by email at info@taracasa.com or by phone.
Who data may be shared with
Personal data is shared only where needed to respond to you, provide the requested service, meet legal obligations or operate the website. This may include:
- hosting and website service providers;
- email, phone and messaging providers;
- payment, accounting, booking or professional advisers where relevant;
- legal or public authorities where required by law;
- third-party platforms you choose to use, such as WhatsApp, Facebook, Instagram or Etsy.
International transfers
Some communication platforms and service providers may process data outside the European Economic Area. Where that happens, Tara Casa relies on the safeguards provided by those platforms or service providers, such as adequacy decisions or standard contractual clauses where applicable.
How long data is kept
Tara Casa keeps personal data only for as long as needed:
- general enquiries: normally up to 24 months after the last contact;
- booking, payment and accounting records: for the period required by tax, accounting and legal obligations;
- allergy, dietary, mobility or activity safety information: only as long as needed for the stay, course or activity, unless a longer legal retention period applies;
- marketing consent, photos, testimonials or recordings: until consent is withdrawn or the material is no longer needed;
- technical logs and essential session data: for short operational/security periods.
Your rights
Under GDPR you may request:
- access to your personal data;
- correction of inaccurate data;
- deletion of data where applicable;
- restriction of processing;
- objection to processing based on legitimate interests;
- portability of data you provided where applicable;
- withdrawal of consent where processing is based on consent.
To make a request, email info@taracasa.com. Tara Casa will respond within the period required by GDPR.
You also have the right to complain to the Spanish data protection authority, Agencia Española de Protección de Datos (AEPD), at https://www.aepd.es/.
Automated decision-making
Tara Casa does not use automated decision-making or profiling on this website.
Updates
This GDPR Compliance section may be updated when services, cookies, providers or contact methods change. Last updated: June 2026.