Last updated: 1 March 2026
1. Data Controller
The data controller responsible for the processing of your personal data is:
- Company name: Hotel S'Algaret S.L.
- Registered address: Placa s'Algaret, 07748 Fornells, Menorca, Illes Balears, Spain
- Tax identification number (CIF): B-XXXXXXXX
- Email: info@hotelalgaret.com
- Telephone: +34 971 376 559
2. Personal Data We Collect
We may collect the following personal data when you interact with our website or services:
- Identity data: full name, nationality, ID or passport number.
- Contact data: email address, telephone number, postal address.
- Booking data: check-in and check-out dates, room preferences, number of guests.
- Technical data: IP address, browser type and version, time zone, operating system.
- Usage data: information about how you use our website.
3. Legal Basis for Processing
We process your personal data on the following legal bases, in accordance with the UK and EU General Data Protection Regulation (GDPR):
- Contract performance: processing necessary to fulfil a booking or respond to a pre-contractual enquiry.
- Legitimate interests: to improve our services, ensure the security of our website and manage our business operations.
- Consent: where you have given your explicit consent, for example to receive marketing communications or to place non-essential cookies.
- Legal obligation: to comply with applicable laws and regulations, including guest registration requirements under Spanish law.
4. Purposes of Processing
We use your personal data for the following purposes:
- To manage and process your hotel reservations.
- To respond to your enquiries submitted via the contact form.
- To comply with legal obligations regarding guest registration.
- To send you marketing communications (only with your prior consent).
- To improve our website and services.
- To ensure the security of our systems and premises.
5. Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected:
- Booking data: retained for up to 3 years after your stay, as required by Spanish guest registration legislation.
- Contact form enquiries: retained for up to 12 months.
- Marketing data: retained until you withdraw your consent.
- Technical and usage data: retained for up to 12 months.
6. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: to obtain confirmation of whether we are processing your data and to request a copy of it.
- Right to rectification: to request correction of inaccurate or incomplete data.
- Right to erasure: to request the deletion of your data where there is no compelling reason for its continued processing.
- Right to restrict processing: to request that we limit the processing of your data in certain circumstances.
- Right to data portability: to receive your data in a structured, commonly used format.
- Right to object: to object to the processing of your data for direct marketing purposes.
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us at info@hotelalgaret.com.
7. Data Transfers
Your personal data may be processed by third-party service providers that assist us in running our business (e.g. booking platforms, email providers). We ensure that any such transfers are carried out in compliance with the GDPR, including the use of appropriate safeguards such as Standard Contractual Clauses where data is transferred outside the EEA.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include encryption, access controls and regular security assessments.
9. Supervisory Authority
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In Spain, the competent authority is the Agencia Espanola de Proteccion de Datos (AEPD), www.aepd.es.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.