Privacy Policy
At HOTEL BRIÑAS S.L. we commit to ensuring that your personal data is protected and not used improperly. By providing us with your personal data and using our website, we understand that you have read and understood the terms related to personal data protection information outlined below.
1. Who is the Data Controller of your data?
In accordance with the provisions of Regulation (EU) 2016/679 General Data Protection Regulation (GDPR), we inform you of the data controller’s details:
- Company Name: HOTEL BRIÑAS S.L.
- VAT Number: B26522706
- Address: Calle Campo nº 2, 26290 Briñas (La Rioja)
- Email: info@hotelisasa.com
- Activity: Hospitality and accommodation services.
2. For what purpose do we process your personal data?
At HOTEL BRIÑAS S.L. we process the information provided by interested individuals for the following purposes:
- Reservation Management: Process your accommodation request, manage payment, and provide the contracted service.
- Customer Service: Manage inquiries submitted through the contact form or email.
- Legal Compliance: Comply with the obligations of guest registration (communication to State Security Forces and Bodies) and tax/accounting obligations.
- Commercial Communications: In case you have given your consent, for the sending of information about hotel offers and promotions.
3. What is the legal basis for the processing of your data?
The legal basis for the processing of your data depends on the purpose:
- Contract Performance: For reservation management and provision of accommodation services (Art. 6.1.b GDPR).
- Consent of the data subject: For responding to web inquiries and sending commercial communications (Art. 6.1.a GDPR).
- Legal Obligation: For invoicing and guest registration according to Organic Law 4/2015 on Citizens’ Security Protection (Art. 6.1.c GDPR).
4. How long will we keep your data?
Personal data will be kept as long as the contractual or commercial relationship is maintained. Once finished, they will be kept blocked for the legally required periods:
- Accounting and tax data: 6 years (Commercial Code) or 4 years (General Tax Law).
- Guest registration books: 3 years (Citizens’ Security Regulations).
- Contact inquiries: The time necessary to resolve your request and then 1 year.
5. To which recipients will your data be disclosed?
Data will not be transferred to third parties unless required by law. Specifically, they will be communicated to:
- State Security Forces and Bodies: To comply with guest registration regulations.
- Tax Administration: For tax compliance.
- Financial Entities: For payment management.
- Service Providers: Data processors (e.g. web hosting services, hotel management software) who access the data under instructions and confidentiality agreement with HOTEL BRIÑAS S.L.
6. What are your rights when you provide us with your data?
Any person has the right to obtain confirmation of whether or not HOTEL BRIÑAS S.L. is processing personal data concerning them. Interested individuals have the right to:
- Access their personal data.
- Request rectification of inaccurate data.
- Request erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- Request restriction of data processing.
- Object to the processing (Objection).
- Request data portability.
To exercise these rights, you can send a written request along with a copy of your ID to the address mentioned above or to the email info@hotelisasa.com.
Also, if you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Data Security
HOTEL BRIÑAS S.L. has implemented the necessary technical and organizational measures to prevent loss, misuse, alteration, unauthorized access, and theft of the personal data being processed, applying industry standard security protocols.
8. Policy Update
This policy has been updated in accordance with current regulatory requirements. HOTEL BRIÑAS S.L. reserves the right to modify its privacy policy in the event of a change in current legislation, jurisprudential doctrine, or its own business criteria.