Privacy Policy
1. General information
At Hotel Las Conchas, we care about the privacy of our guests, clients and website users. We therefore process personal data responsibly, transparently and in accordance with applicable data protection regulations.
This Privacy Policy explains what personal data we may collect, why we use it, how long we keep it, who we may share it with and what rights data subjects have.
2. Data controller
The data controller is:
Owner: Encarnación Martín Salinas
Tax ID: 23722158G
Trade name: Hotel Las Conchas
Registered address: Calle Carretera, 65, La Rábita, Granada, Spain
Hotel address: Paseo Marítimo, 1, La Rábita, Granada, Spain
Contact email: info@hotellasconchas.com
Telephone: +34 958 829 017
Andalusian Tourism Register: H-GR-00309
For any matter related to personal data protection, users may contact the hotel using the email address indicated above.
3. Personal data we may process
Hotel Las Conchas may process different categories of personal data depending on the relationship with the guest, client or user:
Identification data: name, surname, ID card, passport, residence card, nationality, date of birth, signature and any other data necessary for guest registration.
Contact details: telephone number, email address, postal address or country of residence.
Booking and stay details: check-in and check-out dates, room type, number of guests, preferences indicated by the guest, special requests, changes or cancellations.
Financial and payment data: booking amount, payment method, data necessary to guarantee the booking, invoicing and payment management.
Billing data: name or company name, tax ID, tax address and any other information necessary to issue an invoice.
Communication data: enquiries made by telephone, email, web forms, messaging services or similar channels.
Data related to incidents, complaints or requests made during the stay.
Technical browsing data, when using the website, in accordance with the Cookie Policy.
The hotel does not request or process special categories of personal data unless the guest voluntarily provides information necessary to deal with a specific request, such as accessibility, mobility or special assistance needs. In such cases, the data will be processed only to manage the request made.
4. Purposes of processing
Personal data may be processed for the following purposes:
a) Managing bookings and information requests
We process guest data to answer enquiries, prepare quotations, manage bookings, confirm stays, change dates, resolve incidents, send communications related to the booking and provide the requested service.
b) Providing the accommodation service
We process the data necessary to manage check-in and check-out, allocate rooms, handle guest requests, provide the contracted services and ensure the proper organisation of the stay.
c) Complying with legal guest registration obligations
As an accommodation establishment, Hotel Las Conchas must collect and communicate certain guest data to the competent authorities, in accordance with the applicable regulations on guest registration and documentary obligations.
This data will be processed solely to comply with the legal obligations applicable to the hotel.
d) Managing payments, charges and invoicing
We process the data necessary to guarantee bookings, manage payment for the stay, apply charges arising from late cancellations or no-shows, issue invoices and comply with tax, accounting and administrative obligations.
e) Handling incidents, complaints and communications
We process the data necessary to respond to enquiries, manage complaints, information requests, lost property, incidents during the stay or subsequent communications related to the service provided.
f) Security, internal control and protection of the establishment
We may process data when necessary to prevent misuse of the establishment, manage damage or breakage, claim outstanding amounts, protect the rights of the hotel, ensure coexistence between guests and maintain the security of the facilities.
g) Sending commercial communications, if requested by the user
We will only send commercial communications, promotions or hotel news when the user has given consent or when another lawful basis allows us to do so.
Users may unsubscribe or withdraw their consent at any time.
h) Website management and cookies
The website may process technical or browsing data through cookies or similar technologies. This information is regulated in the website’s Cookie Policy.
5. Legal basis for processing
Personal data is processed on the following legal bases:
Performance of a contract or pre-contractual measures: to manage bookings, information requests, stays, payments and contracted services.
Compliance with legal obligations: for guest registration, invoicing, tax, accounting and administrative obligations, handling complaints and complying with requests from competent authorities.
Legitimate interest of the hotel: to manage incidents, prevent fraud or misuse, claim damages or outstanding amounts, improve internal organisation and protect the normal operation of the establishment.
Consent of the data subject: for sending commercial communications, newsletter subscriptions, processing data voluntarily provided for special requests or using certain non-essential cookies.
6. Source of the data
Personal data may be provided directly by the guest or user through:
The hotel’s official website.
The online booking engine.
Communications by telephone, email or forms.
Requests made at reception.
External booking platforms, such as Booking.com or other agencies or intermediary channels.
Third parties authorised by the guest to make the booking on their behalf.
When a booking is made through an external platform, the processing of data carried out by that platform will also be governed by its own privacy policy.
7. Recipients of the data
Personal data may be disclosed to third parties when necessary to fulfil the purposes indicated or when there is a legal obligation.
In particular, data may be disclosed to:
Law enforcement authorities and competent public authorities, in compliance with legal guest registration obligations.
Public administrations, the Tax Agency, administrative or judicial bodies, when legally required.
Banks, payment service providers or payment gateways, to manage payments, guarantees or refunds.
Tax, accounting, legal or administrative advisors, when necessary for hotel management.
Technology providers, web hosting providers, IT maintenance providers, email providers, hotel management systems or booking engine providers, including Redforts, when acting as service providers for the hotel.
External booking platforms, when the booking has been made through them or when necessary to manage the stay.
Insurance companies, experts, technical services or external professionals, when necessary to manage damage, incidents or complaints.
Providers that access personal data on behalf of the hotel must process such data in accordance with the controller’s instructions and with the guarantees required by data protection regulations.
8. International data transfers
As a general rule, Hotel Las Conchas does not carry out international data transfers on its own initiative.
However, some technology providers, booking platforms, email services, web analytics tools or digital tools may process data outside the European Economic Area.
Where this occurs, such processing will be carried out with appropriate safeguards in accordance with data protection regulations, such as adequacy decisions, standard contractual clauses or other legally recognised mechanisms.
9. Data retention
Personal data will be kept for the time necessary to fulfil the purpose for which it was collected and, subsequently, for the periods required by applicable regulations or while legal liabilities may arise.
In particular:
Enquiry data will be kept for the time necessary to respond to the request.
Booking and stay data will be kept for the duration of the contractual relationship and during the applicable legal limitation periods.
Billing data will be kept for the periods required by tax and accounting regulations.
Guest registration data will be kept for the period required by the specific regulations applicable to accommodation establishments.
Data processed on the basis of consent will be kept until the user withdraws that consent.
Data relating to complaints, incidents or damage will be kept for the time necessary to manage them and to defend possible liabilities.
10. Guest registration
In accordance with the regulations applicable to accommodation establishments, all guests must provide the data necessary for registration.
The hotel may request the display or verification of the identification document necessary to check the accuracy of the data, but will process only the information necessary to comply with the corresponding legal obligation.
Refusal to provide the data necessary for registration may prevent the accommodation service from being provided.
11. Commercial communications
Hotel Las Conchas will only send commercial communications, promotions, offers or news when the user has given consent or when there is a legal basis that allows it.
Users may withdraw their consent or unsubscribe from these communications at any time, using the method indicated in each communication or by contacting the hotel at info@hotellasconchas.com.
12. Rights of data subjects
Any person has the right to obtain confirmation as to whether Hotel Las Conchas is processing personal data concerning them.
Data subjects may exercise the following rights:
Right of access to their personal data.
Right to rectification of inaccurate or incomplete data.
Right to erasure when the data is no longer necessary or where the legally established circumstances apply.
Right to object to the processing of their data.
Right to request restriction of processing.
Right to data portability, where applicable.
Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right not to be subject to automated decisions, including profiling, where such decisions produce legal effects or similarly significantly affect them.
To exercise these rights, users may send a request to:
The request must indicate the right the user wishes to exercise and allow the identification of the person making the request.
If the user considers that the processing of their personal data does not comply with the regulations, they may lodge a complaint with the Spanish Data Protection Agency.
13. Data of minors
The hotel may process data relating to minors when necessary to manage the booking, the stay or compliance with legal guest registration obligations.
In the case of minors, the data must be provided by their parents, guardians or responsible adults, in accordance with applicable regulations.
14. Data security
Hotel Las Conchas will apply the necessary technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or destruction.
However, users should be aware that no computer system or data transmission over the Internet can guarantee absolute security.
15. Automated decisions
Hotel Las Conchas does not make automated decisions that produce legal effects concerning users or similarly significantly affect them.
16. Cookie Policy
The website uses cookies and similar technologies. Full information about their use, purpose, configuration and rejection is available in the Cookie Policy.
17. Changes to the Privacy Policy
Hotel Las Conchas may modify this Privacy Policy when necessary to adapt it to legal, technical, operational or service-related changes.
The applicable version will be the one published on the website at any given time.
Last updated: July 2026.