Last updated: 21 September 2026.
This policy explains, in plain terms, what personal data Sunstay Málaga processes, for what purpose, for how long, and what rights the user has in relation to it, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
1. Data controller
Company name: ATANDALUCIA SL
Tax ID (CIF): B44854891
Registered address: Paseo del Colorado 59, Bajo B, 29620 Torremolinos, Málaga, Spain
Contact email: info@sunstayrentals.com
Trading name of the website: Sunstay Málaga (sunstaymalaga.com)
2. Data we process and why
Through the website's contact form we collect the following data, provided voluntarily by the user: name, phone number, email, the type of need selected (for example, property management, sale, investment or collaboration) and the message written.
This data is used exclusively to:
- Respond to the enquiry or request for information submitted.
- Assess and, where applicable, manage the property, sale, investment or collaboration the user raises with us.
- Maintain business communication related to the enquiry made.
We do not use contact-form data for purposes other than those stated, and we do not share it with third parties unrelated to the requested service, except where legally required.
3. Legal basis
The legal basis for processing this data is the data subject's consent, given expressly by completing and submitting the contact form, as well as, where applicable, the performance of pre-contractual steps requested by the user themselves (for example, when asking for information about a specific management arrangement, sale or investment).
4. Recipients
Data is processed internally by the Sunstay Málaga team. It may also be processed by technology providers supplying web hosting, email or, in the future, customer relationship management (CRM) services, always under the safeguards required by data protection law and through the corresponding data processing agreements. Data is not shared with third parties for their own commercial purposes.
5. Retention period
Data will be kept for as long as necessary to handle the enquiry or the business relationship arising from it, and afterwards, where applicable, for the periods legally required to address any potential liabilities. You may request deletion of your data at any time as described below.
6. Rights of data subjects
Anyone has the right to obtain confirmation as to whether Sunstay Málaga is processing personal data concerning them. Data subjects have the right to access their personal data, to request rectification of inaccurate data, and, where applicable, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of processing of their data, in which case we will only retain it for the exercise or defence of claims. Also, in certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data, and may exercise their right to data portability.
These rights can be exercised by writing to info@sunstayrentals.com, stating the right you wish to exercise and attaching a copy of an identifying document.
Likewise, if you believe your data is not being processed correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), at www.aepd.es.
7. Security
Reasonable technical and organisational measures have been adopted to ensure the security of the personal data processed and to prevent its alteration, loss, unauthorised processing or access.
8. Changes to this policy
This policy may be updated to reflect legislative changes or changes to how the website operates. We recommend checking it periodically.
This document is provided for informational purposes and was prepared as a working basis. We recommend it be reviewed by a legal professional before the site's final publication, to ensure it fully matches the company's specific activity.