Last updated: 19 October 2026
Who is responsible for your data
Only Charming, S.L.U., tax ID B21805841, Calle de las Veneras 9, planta 6, puerta derecha, 28013 Madrid. Privacy contact: reservas@onlycharming.com.
What data we use and why
- Booking and stay management: name, contact details, dates, guests and payment details, to manage your booking and look after you during the stay (legal basis: contract).
- Traveller registration: identity details of the guests, which Spanish law requires us to send to the Ministry of the Interior (legal basis: legal obligation).
- Invoicing: billing details, including company details if you request it (legal obligation).
- Enquiries and quotes: the data you send us by email, phone or the quote forms for companies and productions, to reply to you and prepare a proposal (pre-contractual measures).
- Commercial communications: only if you have given us your consent or, if you are already a client, about services similar to the ones you booked. You can object at any time by writing to us (consent / legitimate interest).
- Security of the website and payments (legitimate interest).
- Anonymous visit statistics: we count visits and measure loading speed with Cloudflare Web Analytics, without cookies and without identifying you (legitimate interest).
The data marked as required in each form are necessary to provide the service; without them we cannot manage your request.
Who we share it with
Only with the providers we need to provide the service, acting on our behalf under contract: our booking management system (Hostify), the payment processor (Stripe), web hosting (Arsys), network security and delivery (Cloudflare and Bunny), and Google for maps and form protection (Google Maps and reCAPTCHA). We also share data with public authorities when required by law, such as the traveller register of the Ministry of the Interior. We do not sell your data.
Some of these providers may process data outside the European Economic Area. When they do, it is done with the safeguards of the GDPR, such as adequacy decisions (for example, the EU-US Data Privacy Framework) or standard contractual clauses.
How long we keep it
For as long as the booking relationship lasts and, afterwards, for the periods required by law: traveller register data, three years; accounting and invoicing documents, six years. Enquiries that do not lead to a booking are kept only for as long as needed to reply to you.
Your rights
You can request access, rectification, erasure, objection, restriction and portability by writing to reservas@onlycharming.com. If you are not satisfied with our response, you can file a complaint with the Spanish Data Protection Agency (aepd.es).