Privacy policy

PRIVACY POLICY AND DATA PROTECTION
Hotel Cuevas del Mar — https://hotelcuevasdelmar.kross.travel/

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

I. DATA CONTROLLER

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Digital Rights Guarantee (LOPDGDD), we inform you that the data controller responsible for processing your personal data is:

Establishment Name: HOTEL CUEVAS DEL MAR
Company Name: CUEVAS DE LLANES 2026 SL
Tax ID (CIF): B26993147
Registered Address: Barro El Collau, No. 87, Villahormes, 33593 Llanes (Asturias), Spain
Contact Email: [email protected]
Phone: +34 684 689 088

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

II. DATA WE COLLECT AND PURPOSE OF PROCESSING

Hotel Cuevas del Mar may collect the following personal data:

a) Booking and identification data:
— Full name
— National ID / NIE / Passport (mandatory under Spanish hotel regulations)
— Date of birth
— Nationality
— Contact details: email address, phone number
— Payment data: bank card details (processed securely through an external payment gateway)

b) Website browsing data:
— IP address
— Technical cookie data (see Section VII)
— Pages visited and browsing duration

Purposes of processing:
1. To manage and formalise accommodation bookings.
2. To fulfil legal obligations regarding traveller registration (Organic Law 4/2015 and applicable regulations).
3. To send booking-related communications (confirmation, modification, cancellation, online check-in).
4. To handle enquiries, complaints or information requests.
5. To improve our service and website user experience.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

III. LEGAL BASIS FOR PROCESSING

The processing of your personal data is based on:

• Performance of a contract: managing your booking requires processing your data (Art. 6.1.b GDPR).
• Legal obligation: traveller registration and notification to the Spanish Security Forces is mandatory under applicable Spanish law (Art. 6.1.c GDPR).
• Legitimate interest: improving our service and ensuring Website security (Art. 6.1.f GDPR).
• Consent: for sending commercial communications or newsletters, where you have expressly requested this (Art. 6.1.a GDPR).

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

IV. SHARING DATA WITH THIRD PARTIES

Your personal data will not be shared with third parties, except in the following cases:

• Spanish Security Forces: in compliance with mandatory traveller registration regulations.
• Payment gateway: bank details are managed directly by the financial institution or payment platform, which acts as a data processor under its own security and privacy policies.
• Krossbooking management platform: as the technology provider for the booking system, acting as a data processor under a confidentiality agreement and in compliance with the GDPR.
• Legal obligation or court order: where required by law or judicial resolution.

Hotel Cuevas del Mar does not sell, rent or share your data with third parties for commercial purposes.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

V. DATA RETENTION PERIODS

Your data will be retained for the time strictly necessary to fulfil the purpose for which it was collected, and in any case:

• Booking and stay data: minimum 5 years, in accordance with tax and commercial obligations.
• Traveller registration data: as established by applicable public security regulations.
• Commercial communication data: until you withdraw your consent.

Once these periods have elapsed, data will be securely deleted or anonymised.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

VI. USER RIGHTS

You may exercise the following rights recognised under the GDPR at any time:

• Right of Access: to know what personal data we hold about you.
• Right of Rectification: to correct inaccurate or incomplete data.
• Right to Erasure ("right to be forgotten"): to request deletion of your data when it is no longer necessary.
• Right to Object: to object to the processing of your data in certain circumstances.
• Right to Restriction of Processing: to request that we temporarily suspend the processing of your data.
• Right to Data Portability: to receive your data in a structured, commonly used format.
• Right to Withdraw Consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

How to exercise your rights:
You may exercise these rights by sending a written request to:
📧 [email protected]
📬 Hotel Cuevas del Mar — CUEVAS DE LLANES 2026 SL, Barro El Collau No. 87, Villahormes, 33593 Llanes (Asturias), Spain

You will need to provide your full name and a copy of your ID or identity document. We will respond to your request within a maximum of 30 days.

If you believe that the processing of your data is not appropriate, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

VII. COOKIE POLICY

This Website uses only technical cookies, which are necessary for the correct functioning of the website and the booking process management.

What are cookies?
Cookies are small text files stored on your device when you visit a website. They allow the site to remember your preferences and improve your browsing experience.

Types of cookies we use:
• Technical or necessary cookies: essential for browsing and the functioning of the booking engine. These do not require your prior consent.
• Session cookies: automatically deleted when you close your browser.

This Website does not use advertising cookies, third-party marketing cookies or behavioural tracking cookies.

You may configure your browser to reject or delete cookies, although this may affect the functioning of certain features of the Website.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

VIII. DATA SECURITY

Hotel Cuevas del Mar has implemented the necessary technical and organisational measures to ensure the security of your personal data and to prevent its alteration, loss, unauthorised processing or access. Among other measures, the transmission of sensitive data (such as payment information) is carried out using SSL/TLS encryption protocols.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

IX. CHANGES TO THIS PRIVACY POLICY

Hotel Cuevas del Mar reserves the right to modify this Privacy Policy in order to adapt it to legislative or regulatory developments. We recommend reviewing this page periodically. In the event of significant changes, users will be informed through the Website.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Last updated: June 2025
Hotel Cuevas del Mar — CUEVAS DE LLANES 2026 SL (B26993147) — Barro El Collau, No. 87, Villahormes, 33593 Llanes (Asturias), Spain