Privacy Policy & House Rules

House Rules

We reserve the right to refuse any rental application or booking, or to cancel any reservation (with or without refund, depending on timing and circumstances), for any reason at our sole discretion. This includes, but is not limited to, our assessment of the applicant/guest's suitability following screening.

All potential tenants/guests are required to participate in an online interview (via video call) or voice call with the owner prior to confirmation of any booking. No booking will be finalized without this step.

Strict House Rules (Violations may result in immediate termination of the rental without refund and/or additional charges):

No dogs or other pets are permitted on the property at any time (service animals may be considered with advance documentation and approval).
No parties, events, or gatherings of any kind are allowed without prior written permission from the owner. Groups larger than 20 persons on the property at any time are strictly prohibited unless expressly approved in advance.
No bachelor or bachelorette parties (or similar events) are permitted under any circumstances.
Renters must be at least 30 years old to book and occupy the property independently. Persons under 30 years of age may only rent if accompanied by a parent or legal guardian who is also staying on the property and meets the age requirement.
No drinking and driving any of our vehicles. Please designate a driver who has not been drinking or under the influence of medications or substances that may impair their ability to drive a vehicle.Your responsibility to not get in a car if you are aware of the driver has been drinking.
Furniture.....

These rules are in place to protect the property, ensure a peaceful environment for neighbors, and maintain the home's condition. We appreciate your understanding and cooperation. By proceeding with a booking or inquiry, you acknowledge and agree to these terms.

Privacy Policy

Last Updated: March 18, 2026

In compliance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP); Casa de Olas, located on the San Jose jurisdiction of Baja California Sur, Mexico informs you about the following regarding your personal data:

Personal Data Collected

We collect and process the following personal data from guests, booking parties, or visitors:

Identification and contact details: full name, date of birth, nationality, phone number, email address, home address.
Official identification: passport number/details, INE, driver's license, or other ID (for check-in and legal compliance).
Payment and financial data: payment card details (processed securely via platforms), deposit or payment amounts.
Booking details: stay dates, number of guests, information about minors, pets, special requests (e.g., accessibility needs or allergies if you share them voluntarily).
Other: communication preferences, comments, or photos you send.

We do not collect sensitive data (health, ethnic origin, religion, etc.) unless you provide it voluntarily for your comfort during the stay and give explicit consent.

Purposes for Processing Your Data

I use your personal data for:

Managing and confirming your booking.
Performing check-in/check-out and complying with immigration or tourism registration requirements (e.g., Forma Migratoria Múltiple or local authority reports when required).
Processing payments, deposits, and refunds.
Communicating with you before, during, and after your stay (arrival instructions, emergencies, maintenance).
Complying with applicable laws (tax, tourism, security).
Sending stay-related reminders or information (no marketing unless you separately consent).

Data Transfers

I may transfer your data (without needing additional consent) to:

Mexican authorities when required by law (e.g., immigration service – INM, local tourism or tax authorities).
Necessary service providers (e.g., cleaning company, maintenance, insurance) under confidentiality obligations.
Booking platforms (Airbnb, VRBO, Booking.com, etc.) if the reservation is made through them.

I do not sell or transfer your data to third parties for commercial or advertising purposes.

Security Measures

I maintain reasonable physical, technical, and administrative security measures to protect your data from unauthorized access, loss, or alteration, appropriate for an individual host (password-protected files, locked physical documents, secure deletion after the required period).

Security Cameras / Video Surveillance

For the security and protection of the property, guests, and belongings, the property is equipped with security cameras in certain areas.

Locations: Cameras are installed only in exterior areas (e.g., entrance, driveway, pool area if applicable) and common/shared spaces (e.g., living room, kitchen if shared—no cameras in bedrooms, bathrooms, or any private areas where guests have a reasonable expectation of privacy).
What is captured: Video images (moving images that may qualify as personal or biometric data under Mexican law). No audio is recorded.
Purpose: To monitor for security, prevent theft or damage, assist in investigations if incidents occur, and ensure the safety of the property and occupants.
Legal basis: This processing is for legitimate security interests and compliance with property protection obligations (consent not required in these cases, but full transparency is provided).
Retention: Recordings are stored securely for a limited period (typically up to 30 days) and then automatically deleted, unless needed longer for a specific incident or legal requirement.
Access: Only I (or authorized maintenance/security personnel under confidentiality) access recordings. They may be shared with authorities (e.g., police) if required by law for investigations.
Your rights: You can exercise ARCO rights regarding any captured images that identify you (see below).

ARCO Rights and Consent Withdrawal

As a data subject, you have the rights of Access, Rectification, Cancellation, and Opposition (ARCO rights) to your personal data. You may also revoke consent for certain processing.

To exercise these rights, send a written or email request to: info@casadeolas.mx

Include: your name, copy of ID, clear description of your request, and contact address/email for the response. I will reply within the legal deadlines (generally 20 business days).

Changes to This Notice

I may update this notice from time to time. I will notify you of significant changes via email or through the same channel where this notice was provided.

By providing your personal data (when booking, messaging, or checking in), you acknowledge and accept the terms of this Privacy Notice.

If you have any questions, please contact me directly.

Paul Greubel Host / Property Owner