Privacy policy
Last updated: 12 October 2026
Here we explain what data we use, why, and what rights you have. Plainly, with no small print.
Who is responsible
Francisco Javier Illana Pérez de Castro (Tax ID 04845468N), owner of Forum Evolucion Residence. Contact: info@forumevolucionresidence.es.
What data we use and why
- Booking: name, email, phone, approximate arrival time, dates, number of guests and language. Used to manage and charge the booking and to stay in touch with you. Legal basis: the accommodation contract.
- Email confirmation code: before you pay we send you a code to check your email is correct. Legal basis: steps prior to the contract. We only keep a fingerprint of the code, deleted within hours.
- Payment: handled by Stripe. We never receive or store your card details, only the payment confirmation.
- Guest registration: the data required by Royal Decree 933/2021 (ID document, date of birth, etc.), which we report to the Spanish Ministry of the Interior. Legal basis: legal obligation.
- Emails you send us: to reply to you. Legal basis: your request and our legitimate interest in helping you.
- Offers for guests: when you book on the website and in the guest registration form there is an offers box, ticked by default. If you leave it ticked, we will occasionally write to you with offers to come back to Forum Evolucion Residence, only for this accommodation. Legal basis: you are already a customer and we offer you services similar to those you booked (Article 21(2) of Spanish Law 34/2002 on information society services) and our legitimate interest. You can untick the box at that moment or unsubscribe at any time using the link in each email or by writing to info@forumevolucionresidence.es. We keep your email for this until you unsubscribe, and for no more than 3 years after your last stay.
- Visit statistics: we count visits without cookies and without personal data; we only keep totals per day, page, language and approximate country.
Who else sees them
We use providers who process data on our behalf: Cloudflare (website hosting, database and email), Stripe (payments), Google (the property's email account) and Telegram (internal alerts about new bookings). Guest registration data is reported to the Spanish Ministry of the Interior because the law requires it. We never sell data.
Some of these providers are outside the European Economic Area. Transfers are made with the safeguards of the General Data Protection Regulation, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
When you visit the website, your browser also connects to Google Fonts (typefaces), Open-Meteo (the temperature in Burgos) and, on the 3D walk, unpkg.com (the map library). These services receive your IP address, as with any internet connection.
How long we keep them
Booking data for as long as the booking lasts and then for the period required by tax and commercial law (up to 6 years). Guest registration data for 3 years, as the law requires. Emails for as long as needed to assist you.
Your rights
You can ask to access, correct or delete your data, object to or restrict its use, or request its portability. Write to info@forumevolucionresidence.es with the subject "Data protection". If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Security
The website always uses an encrypted connection and we only work with providers that apply appropriate security measures.