Privacy Policy

Privacy Policy

1. Identification of the data controller

In compliance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), users are informed that personal data provided through this website will be processed by:

Casa Treviño Boutique Hotel S.L.

Address: Calle Soledad, 16, 13610, Campo de Criptana (Ciudad Real), Spain

Contact email: [email protected]

Hereinafter, the “Data Controller”.

2. Purpose of personal data processing

The personal data provided by the user will be processed for the following purposes:

  • Management of reservations made through the Cloudbeds booking engine: processing of requests, confirmation, modifications, cancellations, and customer service.
  • Administrative, accounting, and tax management derived from the provision of accommodation services.
  • Handling inquiries or requests received through the contact form or email.
  • With express consent, sending informative or promotional communications related to hotel services.

Data will not be used for incompatible or different purposes than those indicated.

The legal basis for processing personal data is:

  • The performance of a contract or pre-contractual measures (art. 6.1.b GDPR): management of reservations and associated services.
  • Compliance with legal obligations (art. 6.1.c GDPR): accounting, tax, and guest registration obligations.
  • The consent of the data subject (art. 6.1.a GDPR): in cases where it has been expressly provided, for example, to receive commercial communications.

4. Source of data

Personal data is obtained directly from the user through the reservation or contact forms available on the website, or through direct communication with the hotel.

If third-party data is provided (for example, companions), the user guarantees that they have their consent and that they have previously informed them of the content of this Privacy Policy.

5. Communication and data processors

Data may be communicated to:

  • Public administrations, when necessary to comply with legal obligations (for example, guest registration according to citizen security regulations).
  • Financial entities or payment gateways, for the management of payments and possible penalties for cancellation.
  • Technology service providers, such as Cloudbeds, who act as data processors in accordance with Article 28 of the GDPR and guarantee compliance with European data protection regulations.

You can consult Cloudbeds’ privacy policy at: https://www.cloudbeds.com/privacy-policy/

No international data transfers outside the European Economic Area are foreseen, except those necessary for the provision of Cloudbeds services, which have adequate guarantees in accordance with the GDPR (standard contractual clauses).

6. Data retention

Personal data will be retained for the duration of the contractual or commercial relationship with the user and, subsequently, for the legal periods required to comply with accounting, tax, and liability obligations.

Data used for promotional purposes will be retained until the user withdraws their consent.

7. User rights

The user may exercise at any time their rights to:

  • Access their personal data
  • Rectification of inaccurate or incomplete data
  • Erasure of data when no longer necessary
  • Object to the processing of their data
  • Restriction of processing in certain circumstances
  • Data portability, when technically possible

The exercise of these rights may be carried out through a written request accompanied by a copy of the identity document, sent by email to [email protected] or by postal mail to the controller’s address.

Likewise, the user has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their personal data violates current regulations: https://www.aepd.es

8. Data security

Casa Treviño Boutique Hotel S.L. applies the necessary technical and organizational measures to guarantee the confidentiality, integrity, and availability of the personal data processed, preventing its alteration, loss, unauthorized access, or disclosure.

9. Use of cookies

Currently, no proprietary or third-party cookies are used for analytical, advertising, or remarketing purposes.

If they are implemented in the future, users will be informed in advance through a cookie notice and their consent will be requested, in accordance with the provisions of Article 22.2 of Law 34/2002 (LSSI-CE).

10. Modification of the Privacy Policy

Casa Treviño Boutique Hotel S.L. reserves the right to modify this Privacy Policy to adapt it to legislative, jurisprudential, or technological developments. In case of relevant changes, users will be duly notified.