This privacy policy applies to this website (hereinafter, the Website).

Please read it carefully. Here you will find important information regarding the processing of your personal data and the rights granted to you under applicable regulations.

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with any legislative or case law changes. If you have any questions or require clarification regarding our Privacy Policy or your rights, you may contact us through the channels indicated below.

You declare that the data you provide to us, now or in the future, is correct and truthful and you undertake to inform us of any changes to such data. In the event of providing personal data belonging to third parties, you undertake to obtain the prior consent of the affected individuals and inform them about the content of this policy.

As a general rule, the fields marked as mandatory in our forms must be completed in order for us to process your requests.

Who is responsible for processing your data?

The controller responsible for processing the personal data collected through this website is LAS HABITACIONES DE AKELARRE S.L.U. (hereinafter, THE HOTEL), with registered office at Padre Orcolaga 56, Donostia-San Sebastián 20008, Gipuzkoa, Spain; email: info@akelarre.net; Tel.: +34 943 311 208.

Furthermore, we inform you that the entity responsible for managing THE HOTEL is MARUGAL HOTEL MANAGEMENT, S.L. (hereinafter, MARUGAL), with registered office at Carrer de Sant Feliu, 17A 2º 1ª, 07012 Palma (Balearic Islands), Spain; email: info@marugal.com; Tel.: +34 971 722 352.

You can find detailed information regarding the protection of personal data at www.marugal.com.

For what purpose will we process your data and on what legal basis?

2.1 Management of the relationship with customers and users

We process the data provided by our customers and users in their enquiries in order to respond to their requests.

This processing is necessary for the performance of the legal relationship with website users or for the application of pre-contractual measures at their request.

2.2 Account management

We process the data provided by our users in the website registration form, as well as the information registered in their profile, in order to create and manage their accounts and provide access to the functionalities available to registered users.

Such processing is necessary for the application of pre-contractual measures at their request.

2.3 Management of accommodation bookings and services

The data provided in accommodation booking forms or service contracting forms will be processed for the management of such bookings and the provision of the requested services.

The categories of data processed include:

• Identification data (name, surname and ID/passport) and contact details (address, email and telephone number) of the booking holder.

• Data relating to the booking, voucher or requested service.

• Financial and transaction data.

The processing of this data is necessary for the provision of the requested services, the performance of the accommodation contract or the application of pre-contractual measures.

Financial data resulting from transactions carried out through the website will be processed for accounting, administrative purposes and compliance with legal obligations.

2.4 Sending commercial communications and management of distribution lists

We process the identification and contact data provided by our customers and users who subscribe to our communications in order to send them electronic commercial information regarding our products and services.

Such processing is based on the consent provided by the data subject. Withdrawal of consent will not affect the provision of contracted services.

You may unsubscribe by sending a request to:

info@akelarre.net

If consent has been given, your data may be incorporated into a distribution list managed by MARUGAL in order to send commercial information and offers related to unique hotels and premium tourism services managed by it.

You can consult additional information at www.marugal.com.

2.5 Administration and management of website security

We process browsing data (IP addresses or access logs) in order to administer and guarantee the security of the website and its restricted areas.

This processing is based on our legitimate interest in preserving the security of our systems.

2.6 Statistical purposes and quality management

For the purpose of evaluating and improving our services, we may process identification data, contact data, transaction data and website browsing data.

Such processing is based on our legitimate interest in evaluating and managing the quality of our services and products.

To whom may we disclose your data?

Your data will only be disclosed:

• When there is a legal obligation.

• When you have provided your consent.

• When necessary for the provision of the requested service.

Likewise, and if consent has been given, your data may be incorporated into MARUGAL distribution lists for marketing purposes.

How long will we keep your data?

We will keep your data for the time necessary to maintain our relationship with you and comply with our legal obligations.

Data processed for commercial purposes will be retained until you request to unsubscribe.

Access logs to restricted areas will be retained for one month.

Information related to website browsing will be deleted once the connection has ended and the corresponding statistics have been carried out.

What are your rights?

You have the right to:

• Access your personal data.

• Request the rectification of inaccurate data.

• Request deletion when data is no longer necessary.

• Request restriction of processing.

• Object to processing under certain circumstances.

• Request portability of your data.

• Withdraw previously granted consent.

You also have the right to lodge a complaint with the Spanish Data Protection Agency.

To exercise your rights, you must send a request together with a copy of an identification document to the addresses indicated in the section “Who is responsible for processing your data?”.

You can obtain more information about your rights on the website of the Spanish Data Protection Agency: www.aepd.es.