DATA CONTROLLER

Our information is provided in the Legal Notice of this website.

PURPOSE OF THIS POLICY

Confidentiality and security are core values of Secret de Prades. Accordingly, we are committed to safeguarding the User’s privacy at all times and not requesting unnecessary information. This Privacy Policy explains how we collect, process, and protect the personal data of users interacting with the website www.secretdeprades.com, as well as clients who make inquiries or reservations via telephone or email. In compliance with the EU Regulation 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD), we provide the following information about the processing of your personal data:

PERSONAL DATA WE COLLECT

We only collect the data necessary to provide and manage the tourist accommodation service:

• Contact form or email: first and last name, email address, phone number, message/inquiry.
• Telephone or WhatsApp communication: name, phone number, data necessary to manage the reservation.
• Traveler registration (required by law): document type and number, identification data, name, surname(s), sex, date of birth, nationality, email, relationship between travellers, phone, address, country, province, municipality, city, postal code, check-in and check-out dates and times, payment type, total number of travellers.
• Security deposit refund: bank account number.
• Minors under 14 years old: it is understood that the data is provided with consent from their legal representatives.

SOURCE OF DATA

The personal data we process comes directly from the data subject, who guarantees its accuracy and undertakes to notify any changes.

PURPOSE OF PROCESSING

• Respond to inquiries.
• Manage reservations.
• Comply with legal obligations regarding traveler registration.
• Send information about activities, services, and products with consent.
• Publish information in contests and draws with consent.
• Improve customer service and service quality.
• No commercial profiling or advertising is carried out without prior consent.

LEGAL BASIS FOR PROCESSING
Contract execution, legal obligation, legitimate interest, and consent.

DATA RETENTION
Inquiries: 1 year; traveller registration: 3 years; billing data: 5 years; other data: until consent is revoked.

DATA SHARING
Only to Mossos d’Esquadra, Tax Authorities, and accounting advisors when legally required. No data is shared with third parties outside these cases.

USER RIGHTS
Access, rectification, deletion, opposition, restriction of processing, data portability, withdrawal of consent, and lodging a complaint with the Catalan Data Protection Authority.
To exercise these rights: Email: admin@secretdeprades.com. You must attach an identification document.

SECURITY MEASURES
Data is processed with appropriate technical and organizational measures to ensure confidentiality, integrity, and availability.

UPDATES
This policy may be updated to adapt to legal or technical changes.

EXTERNAL LINKS AND COOKIES
We are not responsible for the privacy policies of third-party websites. Technical, analytical, and advertising cookies (including Google Analytics) are used with consent.

NEWSLETTER SUBSCRIPTION
Purpose: sending commercial and informative newsletters with consent. Retention: until consent is revoked.
The provision of personal data requires a minimum age of 14 years, or, where applicable, sufficient legal capacity to enter into a contract.

SOCIAL NETWORKS
Data collected via social networks will only be processed to manage our digital presence and user communication.

ACCEPTANCE
Use of the website and/or services implies acceptance of the provisions of this Privacy Policy.