Last updated: 6 October 2026
At Camping Benisol we process personal data of our customers, visitors, suppliers and website users. On this page we explain to you, specifically and plainly, what data we process, for what purposes, on what legal basis, for how long and who else may have access to it.
1. Controller
| Owner | Brigida Gertrudis Rausch Schumann |
| Tax ID (NIF) | 29021414Z |
| Trade name | Camping Benisol |
| Address | Avenida de la Comunitat Valenciana, s/n · 03503 Benidorm (Alicante) · España |
| Telephone | +34 965 85 16 73 |
| Website | www.campingbenisol.com |
We are not required to appoint a data protection officer. For any question relating to your data, you can write to us at the email address given above.
2. What we process, for what purposes and on what legal basis
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Booking and accommodation contract: managing your booking, allocating you a pitch or accommodation, providing the services you have booked and attending to you during your stay | Identification, contact details, home address, language, details of your vehicle and of your camping unit, dates, services booked | Art. 6(1)(b) GDPR (performance of the contract) | For the duration of the relationship and, thereafter, for as long as liabilities may arise from the contract |
| Traveller registration: complying with the legal obligation to register the persons staying with us and to report their data to the Ministerio del Interior (Spanish Ministry of the Interior) | First name and surnames, sex, date and place of birth, nationality, document type, number and support number, date of issue and issuing authority, contact details, relationship of minors to the adult accompanying them, means of payment, arrival and departure dates | Art. 6(1)(c) GDPR, in conjunction with Ley Orgánica 4/2015 on the protection of public safety and Real Decreto 933/2021 (Royal Decree on traveller registration) | Document data, 3 years from the end of the stay (RD 933/2021); the name and date of birth form part of the booking history |
| Invoicing, payment collection and tax and accounting obligations | Tax details, items invoiced, amounts, method of payment and reference of card or Bizum payments (never the card number) | Art. 6(1)(c) GDPR (Ley General Tributaria – General Taxation Act; Código de Comercio – Commercial Code; VAT legislation) | For the periods required by tax and commercial legislation (at least 6 years) |
| Access control by number plate recognition: allowing authorised vehicles to enter and leave through the barriers of the premises | Number plate, time and direction of passage, and the associated pitch, booking and holder | Art. 6(1)(f) GDPR (legitimate interest in the security of the premises and in controlling access to an enclosed establishment) | 90 days |
| Chip wristband, card or key fob: providing access to the facilities and managing the prepaid balance, the showers and the services that accept the chip | Identification of the chip holder, pitch, balance, and the associated consumption and access records | Art. 6(1)(b) GDPR | During the stay and, thereafter, for as long as necessary to close the account and resolve any issues |
| Electricity supply: managing the balance, notifying you when it runs out and invoicing consumption | Pitch, meter, consumption, balance, email address for notifications | Art. 6(1)(b) GDPR | Consumption and balance records, 24 months |
| Internet access (Wi-Fi) and connection diagnostics | Access code linked to your booking, technical data of the connected devices and, if you run a connection test from the portal, its results (with the IP address pseudonymised) | Art. 6(1)(b) GDPR | Connection test results, 90 days; everything else, during the stay |
| “Mi Benisol” customer portal: enabling you to view bookings, invoices and balances, deal with administrative matters, sign documents and communicate with us | Account data, credentials, access logs (IP address, device) | Art. 6(1)(b) GDPR | For as long as you keep the account active; access logs, for as long as necessary to demonstrate the security of the account and deal with incidents |
| Notification of arrivals and departures via the portal (see section 2.1) | The traveller registration data of the persons arriving or leaving | Art. 6(1)(c) and 6(1)(b) GDPR | As for traveller registration |
| Portal virtual assistant (artificial intelligence) (see section 9) | The messages you write and basic data about your stay | Art. 6(1)(a) GDPR (your consent, which you give when you first use it) | 12 months from the closure of the conversation |
| Reports and issues you notify to us via the portal | Text of the communication, up to four photographs, messages exchanged, your rating, IP address and device | Art. 6(1)(b) GDPR | Until the issue has been resolved and, thereafter, for as long as liabilities may arise |
| Pitch quality inspections: checking the condition of the pitches and compliance with the Camping Rules, and informing you of any issues found | Photographs of the pitch and, where applicable, of the vehicle’s number plate, communications with you about the issue, the time at which you open the communication, and IP address | Art. 6(1)(b) GDPR (Camping Rules) and 6(1)(f) GDPR (legitimate interest in the good condition and security of the premises) | While the issue remains open and, thereafter, for as long as liabilities may arise |
| Electronic signature of documents: registration form (parte de entrada), contracts and authorisations | Name, handwritten signature captured as an image, time of signature, IP address, device, digital fingerprint of the document | Art. 6(1)(b) and 6(1)(c) GDPR | For as long as the document retains evidential value; the registration form, 3 years |
| Other Campsite services: receipt and safekeeping of parcels and post, awnings, rentals and deposits | Contact details, pitch, orders and, when parcels are handed over, the collection signature | Art. 6(1)(b) GDPR | For the duration of the relationship and, thereafter, for as long as liabilities may arise |
| Accessibility: if you inform us of a disability in order to use adapted facilities (adapted toilet and shower, adapted parking space) | The disability information you provide to us and the access to adapted facilities assigned to your chip | Art. 9(2)(a) GDPR (your explicit consent) | During the stay in which you use the adapted facility |
| Work on your pitch by partner companies that you commission through us | Name, pitch, dates and description of the job and, once it has been accepted, your contact and billing details | Art. 6(1)(b) GDPR | For the duration of the job and, thereafter, for as long as liabilities may arise |
| Sale of your caravan through the Campsite | Name, pitch, price and photographs of the caravan | Art. 6(1)(b) GDPR | Until the sale has been completed and, thereafter, for as long as liabilities may arise |
| Viewings of caravans for sale: recording who views a caravan we are selling on behalf of its owner, being able to contact them about it and showing the owner who has viewed it and when | Name, telephone number, e-mail address, date and time of the viewing | Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in documenting the sale the owner has entrusted to us) | For as long as the sale lasts and 6 months after it is completed or cancelled; at most 24 months from the viewing. The name, telephone number and e-mail address are then erased |
| Website forms: advance registration of arrival and departure, and long-stay applications | The data in the form and the documents you attach (for example, identity document, insurance policy, gas contract or the dog’s health booklet) | Art. 6(1)(b) GDPR and, for traveller registration data, 6(1)(c) GDPR | Original form data, 180 days from receipt; whatever is necessary is added to your customer record |
| Handling enquiries, complaints and correspondence | The data you provide to us and the emails exchanged, which are added to your customer record | Art. 6(1)(b) GDPR (if pre-contractual or contractual) or 6(1)(f) GDPR | Until your enquiry has been resolved and for as long as liabilities may arise |
| Service communications about your stay: information before your arrival, a check that everything is in order after check-in, and an invitation to the customer portal | Name, email address, language, dates and pitch | Art. 6(1)(b) GDPR | As for the booking |
| Marketing communications: sending you offers and news | Name, email address, language and, in order to tailor our mailings, the services you have booked | Art. 6(1)(a) GDPR (your consent) or Art. 21(2) LSSI (Spanish Information Society Services and E-Commerce Act) where you have previously been a customer and the communications concern similar services | Until you withdraw your consent or object |
| Invitation to review your stay | Name, email address, language, dates and pitch of the stay | Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the quality of the service) | A single invitation per customer every 12 months |
| Portal games and activities (Parcelópolis, Bitácora) | Your participation and, only if you authorise it, the name under which you appear to other participants | Art. 6(1)(b) GDPR and, for visibility to others, Art. 6(1)(a) GDPR | While you participate or until you withdraw your consent |
| Video surveillance (see section 10) | Images captured in the signposted areas of the premises | Art. 6(1)(f) GDPR (legitimate interest in the safety of persons and property) and Art. 22 LOPDGDD (Spanish Data Protection and Digital Rights Act) | A maximum of one month from capture |
When we ask you for data that is necessary to conclude or perform the contract, we will indicate this on the form itself. If you do not provide it, we will not be able to provide you with the service. Providing the data required by Real Decreto 933/2021 is mandatory: without it, we cannot accommodate you.
Any reviews you publish on Google, camping.info or Tripadvisor are processed by each platform under its own responsibility. We do not know who has left a review, and we do not make the invitation conditional on your opinion.
2.1 Notification of arrivals and departures via the portal and reading of the document with the phone camera
In the “Mi Benisol” portal you can tell us who is arriving or who is leaving. Where all the data matches the data that reception already checked during a previous stay, the notification is recorded automatically; in any other case, it is reviewed by a member of the reception staff. The identity document is always checked in person by a member of the reception staff.
So that you do not have to type in each person’s details, the app offers to read, from a photograph, the band of letters and numbers printed on your document (the so-called machine-readable zone).
We want to be explicit about this function:
- The image does not leave your phone. This function neither transmits nor stores any image: the photograph is processed and discarded on your own phone. No photograph is sent to our servers.
- Only the data is sent, and you check it first. What is sent are the same fields you would type in by hand – first name, surnames, date and place of birth, sex, nationality, document type, number and support number, issuing authority and date of issue, expiry date – after you have checked and confirmed them on screen. The reading is a suggestion, never data accepted without your involvement.
- It is optional. You can type in the data by hand at any time; the result is identical and you will not be asked for any justification.
- There is no facial recognition and no biometrics. We do not process the photograph on the document or any biometric data.
The legal basis and the retention period are those of traveller registration set out in the table above (Art. 6(1)(c) GDPR and RD 933/2021). This function does not create any new processing: it only changes the way in which you provide us with data that we are in any case obliged to collect.
3. Who else may have access to your data
Within our organisation, only authorised staff, and only to the extent they need it for their role.
Outside our organisation, we disclose data to:
- Ministerio del Interior: traveller registration (legal obligation).
- Agencia Estatal de Administración Tributaria (Spanish Tax Agency) and other public authorities, where a law obliges us to do so.
- Banks and payment gateway (BBVA and Redsys), to collect payment for our services. For card or Bizum payments, they receive the amount and the payment reference; you enter your card details yourself on the bank’s page, and they never reach us.
- Our advisory firm and our accounting and tax agency.
- Law enforcement agencies and courts, where they lawfully require it.
- Partner companies which you commission to carry out work on your pitch: name, pitch and dates and, once the job has been accepted, your contact and billing details.
- Our caravan sales partner, when you ask us to sell your caravan: name, pitch, price and photographs.
- The owner of a caravan you have viewed, if they ask us: only your name and the date and time of the viewing, never your telephone number or e-mail address.
In addition, we work with the following processors, which process data on our behalf and under a contract in accordance with Art. 28 GDPR:
| Processor | Purpose |
|---|---|
| Cloudflare, Inc. | Secure publication and protection of our websites and of the customer portal, including verification against automated access |
| OpenAI Ireland Ltd. | Virtual assistant of the customer portal and automatic translation of the messages our staff send you |
| Google Ireland Ltd. / Google LLC | Push notifications of the app (Firebase Cloud Messaging) and protection of the website forms against automated submissions (reCAPTCHA) |
| Intuition Machines, Inc. (hCaptcha) | Protection of the website forms against automated submissions |
| Website and email hosting providers, including Hetzner Online GmbH (Germany) | Hosting of our website and of our email (sending and mailboxes) |
| Backblaze, Inc. | Backups of our systems |
| OpenSign Labs (servers in the European Union) | Storage of the long-stay contracts signed via this platform in previous years |
| Technical maintenance companies for our video surveillance, access control, electricity supply and chip systems | Technical maintenance of those systems; they access the data only when this is necessary for that task |
To date electronically signed documents, the freetsa.org time-stamping service receives only a cryptographic fingerprint of the document, which does not reveal its content.
We do not sell or transfer your data to third parties for advertising purposes.
4. International transfers
Some of our processors are established in the United States or may process data from outside the European Economic Area. Specifically, OpenAI, Google, Cloudflare, Intuition Machines (hCaptcha) and Backblaze.
Where the provider is certified, these transfers are covered by the EU–US Data Privacy Framework, recognised by an adequacy decision of the European Commission (Article 45 GDPR); in all other cases, by the standard contractual clauses approved by the European Commission (Article 46 GDPR). You can request a copy of the safeguards applied by writing to .
Our website also embeds third-party content (videos, maps, icons). When this content is loaded, those third parties receive your IP address. Details are set out in our Cookie Policy. You can manage this content and cookies at any time:
5. How long we keep your data
The specific periods are set out in the table in section 2. As a general rule:
- We keep the data for as long as our contractual relationship lasts.
- Thereafter, we keep it blocked – that is, stored but not used, and accessible only in order to deal with claims or requests from courts, public authorities or the Spanish Data Protection Agency (AEPD) itself – for the limitation periods of any legal actions that may arise.
- Once those periods have expired, we erase it.
Logs of access to the portal and to our systems are kept for as long as necessary to demonstrate the security of the account and deal with incidents.
6. Your rights
You may exercise the following rights at any time:
- Access: to find out what data we hold about you.
- Rectification: to have your data corrected if it is inaccurate.
- Erasure: to ask us to delete your data when it is no longer necessary.
- Restriction of processing: to ask us to keep your data but not use it.
- Objection: to object to processing based on our legitimate interest, including the invitation to review your stay.
- Portability: to receive your data in a commonly used and machine-readable format, or to ask us to send it to another organisation.
- Withdraw your consent at any time, without this affecting the lawfulness of the processing carried out before its withdrawal.
How to exercise them. Simply write to us at or by post to the address in section 1, stating which right you wish to exercise. If you have an account on the “Mi Benisol” portal, you can also choose in your profile which portal notifications you wish to receive. To stop receiving marketing communications, use the unsubscribe link included in each mailing or write to us.
We will not routinely ask you for a copy of your identity document. Only if we have reasonable doubts about your identity will we ask you for some additional verification, and always the least intrusive possible.
We will reply within one month. If the request is complex, we may extend this period by two further months, informing you of the reason.
7. Complaints
If you consider that we have not properly respected your rights, you can lodge a complaint with the Spanish Data Protection Agency (AEPD):
- Electronic office: www.aepd.es
- Postal address: C/ Jorge Juan, 6 · 28001 Madrid
- Telephone: 901 100 099 / 91 266 35 17
Lodging a complaint is free of charge and does not require a lawyer or a court representative (procurador). We would be grateful if, before contacting the Agency, you gave us the opportunity to resolve the matter directly.
8. Automated decision-making and profiling
We do not take automated decisions that produce legal effects concerning you or similarly significantly affect you.
We do, however, use automatic calculations to determine the price: our rates vary according to occupancy, season and how far in advance the booking is made. The price shown to you when booking is the price applicable to that specific booking and may differ from the price shown at another time. This variation depends on the Campsite’s occupancy, not on your personal profile or your history.
When you notify arrivals or departures via the portal, the notification is recorded automatically only if all the data matches the data already checked by reception; in any other case, it is reviewed by a person (section 2.1). To tailor our marketing communications, we group recipients according to their language and the services they have booked; this has no effect whatsoever on your conditions or your prices.
9. Customer portal virtual assistant (artificial intelligence)
In our “Mi Benisol” customer portal we make available to you, on a voluntary basis, a virtual assistant (chat) based on artificial intelligence which answers your questions about the Campsite and your stay.
If you decide to use it, the messages you write and certain basic data about your stay (first name, booking number, pitch, arrival and departure dates, balances and open issues concerning your pitch) will be processed by our processor OpenAI Ireland Ltd. (Ireland) solely to generate the response. OpenAI may also process them from the United States; that transfer is covered by the safeguards described in section 4. OpenAI does not use this data to train its models.
Please do not enter payment data, identity documents or health data in the chat. Conversations are kept for a maximum of 12 months from their closure and are then deleted automatically. If a conversation is transferred to our reception team, authorised staff may read it in order to assist you. Using the assistant requires your prior confirmation within the chat itself; you can stop using it at any time, and reception remains available to you through the usual channels.
When our staff reply to you in the portal in a language other than Spanish, their message may be translated automatically by the same provider. Only our staff’s text is sent, never yours.
10. Video surveillance
Camping Benisol has a video surveillance system covering the Campsite premises.
Purpose and legal basis. The cameras serve to ensure the safety and security of persons, facilities and property, and to control access to the premises. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR), under the terms of Art. 22 of Ley Orgánica 3/2018 (LOPDGDD).
Areas. The areas under video surveillance are indicated by information signs placed at the main entrance and at reception. There are no cameras in the sanitary blocks, showers, toilets or changing rooms, or in any other space intended for personal privacy: the law expressly prohibits this.
Retention. Images are kept for a maximum of one month from capture and are overwritten automatically. The exception is images that evidence acts which may constitute a criminal or administrative offence: these are kept for the time strictly necessary to make them available to the competent authority, to which they are handed over within a maximum of seventy-two hours of our becoming aware of the facts.
Who has access. Only staff expressly authorised by the management, and only when there is a specific reason, as well as, where this is necessary for the technical maintenance of the system, the companies that provide us with that service as processors. Images are not disclosed to third parties except at the request of the law enforcement agencies or the judicial authorities.
Your rights. You can request access to the images in which you appear, as well as their erasure or the restriction of their processing, by writing to . To be able to locate the images, we will ask you for the date, the approximate time and the area. Please note that, where other persons appear in the same recording, we will protect their image before providing you with anything, and that images are only available within the retention period stated above.
11. Security
We apply technical and organisational measures appropriate to the risk: role-based access control, encryption of communications, logging of activity involving the data, backups and periodic review of the measures.
The identity document numbers of persons staying with us are stored in encrypted form in our traveller register and are not displayed in the customer portal, not even your own: the screen shows only which type of document you have registered and until when it is valid. Reception staff can view a number when they need it for their work, one at a time, and each such look-up is logged. The number appears unencrypted only in the documents where the law requires it (for example, contracts, invoices and reports to the Ministerio del Interior) and in correspondence that you yourself send us.
12. Data of other persons that you provide to us
If you provide us with data of other persons – for example, of your travelling companions, of the persons authorised to occupy your pitch or of a second contract holder – you must first inform them of the content of this policy. The data of minors under 14 is provided to us by the adult accompanying them.
13. Changes to this policy
We will publish any changes here. If a change is substantial, we will inform you through the usual channels and, where necessary, ask for your consent again.
This policy is published in Spanish, English, German, Dutch and French. In the event of any discrepancy between versions, the Spanish version shall prevail.
