1. Data controller

Controller: Hotel Abalú (operating company, tax ID B84918276)
Address: C/ Pez 19, 28004 Madrid, Spain
Email: info@hotelabalu.com

2. Data we process

Depending on your relationship with us, we may process:

Contact details (name, email address and telephone number).
Information linked to booking or stay requests (dates, preferences and communications).
Browsing data (IP address, cookie identifiers and usage information) when you accept analytics cookies.
Images from CCTV in signposted reception and common areas, for security purposes.

3. Purposes and legal bases

Handling enquiries and requests

Purpose: to respond to messages sent through forms or email.
Legal basis: your consent and/or pre-contractual measures.

Managing bookings and providing services

Purpose: to manage bookings, stays, billing and necessary communications.
Legal basis: performance of a contract and/or pre-contractual measures.

Newsletter and communications

Purpose: to send news and marketing communications if you subscribe.
Legal basis: your consent, which you may withdraw at any time.

Web analytics

Purpose: to measure use of the website and improve its content and experience.
Legal basis: your consent to analytics cookies (Google Analytics).

CCTV

Purpose: the security of people, property and facilities.
Legal basis: legitimate interest, with appropriate notices in monitored areas.

4. Recipients and service providers

We do not sell your data. We may share it with providers delivering necessary services, such as hosting, technology or email marketing, under appropriate data-processing agreements.

We use Google Analytics for web analytics. Depending on the configuration, some data may involve international transfers. Where required, we apply the legally established safeguards, such as standard contractual clauses.

5. Retention periods

Enquiries: for as long as necessary to answer them and, where applicable, during statutory liability periods.
Bookings and services: for the duration of the relationship and applicable tax and accounting periods.
Newsletter: until you withdraw your consent or unsubscribe.
Analytics: according to your consent and cookie settings; see the cookies policy.
CCTV: generally for up to 30 days, unless retention is required due to an incident or legal obligation.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by contacting info@hotelabalu.com.

If you believe the processing does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

8. Changes to this policy

We may update this policy to reflect legal or operational changes to the website. We recommend reviewing it periodically.

Note: this text is an informational website template. Legal review is recommended before final publication.

Privacy policy