Data controller:

Purpose of processing:
The personal data provided by users will be used to:

  • Effectively manage reservations and inquiries made through the website.
  • Communicate with the user regarding their stay, requests, or contracted services.
  • Send, if expressly authorized, commercial communications related to promotions, special offers, and accommodation news.
  • Comply with the legal obligations imposed on the data controller in tax, administrative, and tourism matters.

Legitimation:
The data processing is based on:

  • The explicit consent of the user when filling out forms or contacting voluntarily.
  • The execution of a service provision contract (accommodation reservation).
  • Compliance with current legal obligations applicable to the tourism and commercial sector.

Recipients:
The data collected will not be transferred to third parties unless legally required. If reservation management platforms or auxiliary services (such as payment gateways or booking engines) are used, these will act as data processors under a legal contract that guarantees data protection.

Data retention:
Personal data will be kept for the time necessary to fulfill the purposes for which it was collected and to meet possible legal responsibilities arising from the processing. Once this period has ended, it will be securely deleted.

User rights:
Users can exercise their rights of access, rectification, deletion, opposition, limitation, and portability of their data at any time by writing to the email address dolors@elpalauetdelpriorat.com. Also, if they consider that the treatment does not comply with current regulations, they have the right to file a claim with the Spanish Agency for Data Protection (www.aepd.es).

Modifications
The owner reserves the right to modify this Privacy Policy at any time to adapt it to new legislative or jurisprudential developments, as well as to industry practices.