Privacy policy

Data controller

The data controller is Hostal Don Pepe, a guesthouse located in Figueres (Girona), Spain.

You can exercise your rights or raise any question about your data through the usual channels: phone, email or the same booking channels.

Purpose of the processing

We process your data to manage direct bookings and your stay at the establishment, including booking requests made through the booking engine on this website.

Data we process

Identity data (first and last name), contact data (phone and email) and the ID document when provided.

Legal basis

The legal basis for the processing is the performance of the accommodation contract, or pre-contractual measures at the data subject’s request (art. 6.1.b GDPR), and the legitimate interest in the security of the establishment (art. 6.1.f GDPR).

Data retention

We keep the data for the duration of the relationship with the guest and, once it ends, for the periods required by tax and commercial law: 6 years for documents subject to tax and commercial obligations.

Recipients and data processors

To provide the service we rely on two data processors: the technology hosting provider (OVH), which hosts this website and the management systems, and the invoicing software (Holded), which receives billing data only when an invoice is issued.

No international data transfers are made.

Automated decisions

No automated decisions are taken and no profiles are built with your data.

Your rights

You can exercise the rights of access, rectification, erasure, objection, restriction of processing and portability through the usual channels: phone, email or the same booking channels.

Complaints

If you believe the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).