Privacy policy and personal data protection

Version 2026-10-02 — updated on 2026-10-02

This policy explains how we process your personal data when you visit casaterrenas.com (Casa Terrenas) and when you send us a request using the “Request a viewing / information” form, a message, a listing report or a rental submission. If anything is unclear, write to us using our contact form.

Key points

Only one piece of information is required: your WhatsApp number. Everything else is optional.
Your request is received by our team, not by the agency or owner of the rental shown. Nothing is passed on to them automatically.
We only pass your request on to the agency or owner of the rentals you are interested in if you tick the box provided for this purpose, which is unticked by default, and only after we have checked those rentals. Casa Terrenas may be paid by the agency or owner for this. If you leave the box unticked, your request is handled just the same.
We only send you new listings later if you tick the box provided for this purpose, which is unticked by default. If you leave it unticked, your request is handled just the same.
We do not sell your data or enroll you in any automatic campaign. At this stage we ask for no passport, bank card or proof of income.
We only use technically necessary cookies: no advertising cookies and no third-party analytics tools.
You can exercise your rights at any time using the data rights request form or our contact form.

1. Data controller

The controller of your personal data is THERD SRL (RNC 133-63250-2, Dominican taxpayer number), which operates the Casa Terrenas platform, located at Calle Principal, 32000 Las Terrenas, Samaná, República Dominicana. Contact: the site's contact form.

Request data is recorded in the platform's database, for which THERD SRL is responsible.

2. What data we process

Data you provide

When you send a request using the “Request a viewing / information” form:

Required: your WhatsApp number, with the international dialing code (for example +1 or +33). Without this number, or if it is wrong, we cannot reply to you or handle your request.
Optional: first name, last name, email address, desired arrival date, length of stay (1 to 12 months), property type, preferred neighborhood(s), maximum monthly budget, number of occupants, pets, remote work (need for reliable internet), viewing preference (in person, by video or not yet) and message. If you leave these out, your request is still handled; we may ask you for a few details on WhatsApp.

At this stage we do not ask for your passport or any ID document, bank card or proof of income. Please do not include bank details or unnecessary sensitive information (for example about your health) in your message. If you mention a specific need, such as accessibility, we only use it for your search.

Data recorded automatically with your request

the language in which you are using the site;
the page from which you sent the request and, where applicable, the rental concerned;
a copy of the rent and conditions displayed at that moment, and the search criteria you had selected;
marketing attribution parameters (utm_*), if they were present in the link that brought you to the site;
the domain of the site you came from (referrer), if your browser sends it;
the date and time of the request;
the version of this policy that was shown to you;
your choices regarding the two optional boxes (passing your request on to the agency or owner, new listings), with the text shown to you, its version, the language and the date of each choice, and any later withdrawal.

Data related to following up on your request

While handling your request, our team records its status, internal notes, the rentals suggested to you and your response, any viewings arranged (date, in person or by video) and a history of the actions taken.

Other forms

Contact form: the subject and text of your message, the way to reply that you give (WhatsApp number and/or email address: at least one of the two), your name if you give it, the language, the page you came from, the date, and your choice regarding new listings (optional box, unticked by default). This data is used only to reply to you; it is not passed on to any agency or owner.
Listing reports (“Report this listing” button): the listing concerned, the reason, your message and, if you want a reply, your WhatsApp number or email address (optional).
Agencies and owners (List your property page): your name or your agency's name, the contact person, your phone or WhatsApp number, your email address, the subject of your request, your message, the details and photos of the rental submitted, and the text and date of your statement. Submitted photos are kept in a private area and are never published without review.
Data rights requests: the type of request, the WhatsApp number or email address you give and your message.

Technical security data

When you submit a form, your IP address is used briefly to limit abusive submissions. We only keep a fingerprint of that address (a salted hash), which is deleted after about 24 hours. Your full IP address is not stored in our database. Spam protection works without any third-party captcha.

Audience statistics

We measure traffic with our own counters, aggregated by day (for example the number of views of each page or clicks on the request button), without cookies and without personal data. Your phone number and email address never appear in page addresses (URLs), in our statistics or in search engine optimization (SEO) tools.

3. Why we use your data

We clearly distinguish four uses:

1. Answering your request. We contact you on WhatsApp to check the rent, conditions and availability, suggest suitable rentals and, if you wish, arrange an in-person or video viewing. If you gave us your email address, we may also use it to reply to you.

2. Following up on that same request. For example, getting back to you if you have not had a chance to reply, suggesting another rental if the one you asked about is no longer available, or confirming a viewing. This follow-up is limited to the request you sent us, and you can ask us to stop at any time.

3. Sending you new listings later, only if you agree. If you tick the box provided for this purpose (unticked by default), we may send you new listings by WhatsApp or email. This is marketing, separate from answering and following up on your request. If you leave it unticked, your request is handled just the same. You can withdraw your consent at any time by replying STOP on WhatsApp or by using the data rights request form. We never enroll you automatically in any campaign.

4. Passing your request on to the agency or owner, only if you agree. If you tick the box “I agree that Casa Terrenas may pass my request on to the agency or owner of the rentals I am interested in, after checking them” (unticked by default), we may pass your request on to the agency or owner of the rentals you are interested in, and to them only, after checking those rentals and their advertiser. They may then contact you on WhatsApp or by email about those rentals. We only pass on what they need for this: your name, your WhatsApp number, your email address if you gave it, and the content of your request (rental, arrival date, length of stay, number of occupants, pets, budget, message). Casa Terrenas may be paid by the agency or owner for this. Each recipient is responsible for how it uses your request; we ask it to use it only to answer you. If you leave the box unticked, your request is handled just the same. You can withdraw your consent at any time using the data rights request form: we will then stop passing your request on and inform recipients that have already received it of your withdrawal.

We also use some data to keep the service running properly:

protecting the site and its forms against abuse and spam;
keeping proof of the information shown to you (rent, conditions, version of this policy) and of your choices (passing on your request, new listings);
understanding which pages and channels generate requests (utm_* parameters and referring domain), in order to improve the site and our communication;
handling listing reports and submissions from agencies and owners.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. Applicable law and legal bases

THERD SRL is established in the Dominican Republic. The processing of your data is governed by Dominican law, in particular Law No. 172-13 on the protection of personal data.

If you are in the European Union or the European Economic Area when you use the site or send us a request, the EU General Data Protection Regulation (GDPR) may also apply to the processing of your data.

Under Dominican law (Law No. 172-13)

We process the data in your request on the basis of the consent you give by sending it, after being informed by this policy, or where the law allows processing without consent. Passing your request on to the agency or owner and sending you new listings are each based on a separate, specific consent (one checkbox for each), which you can withdraw at any time.

Where the GDPR applies

Answering your request: steps taken at your request prior to entering into a contract, and our legitimate interest in handling the request you send us (Art. 6(1)(b) and 6(1)(f) GDPR).
Following up on that same request: our legitimate interest in following up on a request you initiated (Art. 6(1)(f)). You can object at any time.
New listings: your consent (Art. 6(1)(a)), which you can withdraw at any time.
Passing your request on to the agency or owner: your consent (Art. 6(1)(a)), which you can withdraw at any time.
Security, abuse prevention, proof of the information shown and of your choices, measuring which channels generate requests, and handling reports: our legitimate interest in protecting the service, being able to demonstrate what was shown to you and what you chose, keeping listings reliable and improving the site (Art. 6(1)(f)).

5. Who receives your data

Our team: only authorized staff, through a protected administration area (see section 8).
Agencies and owners: they do not receive your data automatically. If you ticked the box, we may pass your request on to them as described in section 3 (point 4). Otherwise, to check the rent and availability, we may ask them about the rental and dates you are interested in, without giving them your identity or contact details. If sharing some of your data becomes necessary to arrange a viewing or the signing of a lease, we will tell you first and only do so with your agreement, limited to what is needed (for example your name and the viewing date).
Our technical service providers, which process data on our behalf: website hosting (Hostinger International Ltd.), backups, our email service when we use it, and the tools our team uses to manage and follow up on requests.
WhatsApp (Meta), which we use to reply to you on the channel you chose. Messages exchanged on WhatsApp are also subject to WhatsApp's own terms and privacy policy.
Public authorities, only when the law requires it.

Apart from the passing on of your request that you have agreed to, we do not sell your data or pass it on to any third party.

6. International transfers

THERD SRL is established in the Dominican Republic. Your data is stored on the servers of our hosting provider (Hostinger International Ltd.); the country where they are located depends on that provider. When we reply to you on WhatsApp, messages pass through the infrastructure of WhatsApp (Meta), which may process data in various countries. The agencies and owners to which you agree we may pass your request offer rentals in Las Terrenas; some owners may, however, live in another country.

Your data may therefore be processed outside your country of residence, including in countries whose laws do not necessarily offer the same level of protection. In all cases, we apply the measures described in this policy.

7. How long we keep your data

Requests: kept while they are being handled and followed up. Inactive requests are automatically anonymized after 12 months, after which they can no longer be used to identify you.
Contact form messages: automatically deleted after 12 months.
Listing reports: kept for as long as needed to handle them and follow up on the listing concerned.
Requests from agencies and owners: kept for the duration of our relationship and, for a published rental, while the listing is online, then for as long as needed to show that publication was authorized.
Proof of your choices (passing on your request, new listings): kept for as long as necessary to be able to demonstrate them.
IP address fingerprint: about 24 hours.
Backups: renewed on a rotating basis (daily backups are kept for about 14 days and weekly backups for about 8 weeks). Deleted or anonymized data disappears from backups at the end of this cycle.

8. Security

The administration area is restricted to authorized staff and protected by two-factor authentication.
Access to it and sensitive actions performed in it are logged (audit trail).
Abusive submissions are automatically limited, and forms are protected by a security cookie.
Photos sent by agencies and owners are stored in a private area that is not publicly accessible.
Backups are made automatically, kept with restricted access and renewed on a rotating basis.

No system is infallible, but these measures are designed to protect your data against unauthorized access, loss or alteration.

9. Cookies

We only use technically necessary cookies:

a security cookie (CSRF), which protects forms against fraudulent submissions from other sites;
session cookies for the administration area, used only by authorized staff who log in.

The site uses no advertising cookies and no third-party analytics tools, and our audience statistics work without cookies (see section 2). Because these cookies are strictly necessary for the site to work, we do not ask for your consent to use them. You can block them in your browser, but forms may then stop working. If we ever wanted to use other cookies, we would update this policy and ask for your prior consent where the law requires it.

10. Your rights

Under Law No. 172-13, you have the rights of access, rectification, cancellation (erasure) and objection, known as “ARCO” rights. You can:

access your data and find out how we use it;
rectify or update it if it is inaccurate or incomplete;
request its erasure, unless the law requires us to keep it;
object to its processing.

You can also withdraw your consent at any time, in particular for passing your request on to the agency or owner and for new listings. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

If the GDPR applies to your situation (see section 4), you can also:

request restriction of processing;
receive the data you provided to us in a structured, commonly used format (portability);
lodge a complaint with a data protection authority, in particular the one in your country of residence in the EU or EEA (for example the CNIL in France).

In the Dominican Republic, you can also enforce your rights in court through a habeas data action.

How to exercise your rights

using the data rights request form;
or using our contact form.

To protect your data, we verify your identity by asking you to confirm the request from the WhatsApp number you used (or, if that is not possible, by another proportionate means). We reply as soon as possible and within the time limits set by applicable law; our target is to reply within 30 days at most. Exercising your rights is free of charge.

To stop receiving new listings, simply reply STOP on WhatsApp.

11. Agencies, owners and advertisers

The listings shown on the site are based on information that is publicly available (agency websites, listing portals) or provided by the agencies and owners themselves, always dated. We never publish the contact details of agencies or owners or the exact address of rentals, and a private owner appears without their name. If you represent an agency or own a property and write to us, for example from the List your property page to submit a rental or request a correction or removal, we use the data you provide to handle your request and reply to you. You can exercise your rights in the same way as anyone else.

12. Minors

Our service is not intended for persons under 18. If you believe a minor has sent us data, please write to us using our contact form so that we can delete it.

13. Changes to this policy

We may change this policy, in particular if the way the site works or the applicable law changes. Each version is identified by its version number and update date, shown at the top of this page, and we record the version that was shown to you when you sent your request. If a change significantly affects how your data is used, we will indicate it clearly on the site.

14. Contact

Data controller: THERD SRL (RNC 133-63250-2)
Address: Calle Principal, 32000 Las Terrenas, Samaná, República Dominicana
Write to us: contact form
Data rights request form: open the form