Privacy policy

• Controller: PUERTO GENOVES C.B. (Hostal Puerto Genovés)
• Tax ID (NIF/CIF): E04243119
• Address: Calle Balandro 15, 04118 San José (Níjar), Almería, España
• Phone: +34 950 380 320
• Privacy contact email: puertogenoves@hotmail.com

• Booking data: name and surname(s), email, phone number, dates of stay, number of guests, bed type and any requests you tell us about.
• Guest registration data required by law: name and surname(s), sex, nationality, date of birth, type and number of identity document, address, contact details, family relationship in the case of minors, and details of the stay and payment.
• Communications: the data you give us when you email or call us.
• Browsing data: only what is strictly necessary for the website to work and, only if you agree, data linked to optional cookies (see our cookie policy).

• Managing your booking and stay (confirmation, payment and assistance before, during and after your stay). Legal basis: performance of a contract or of pre-contractual steps taken at your request (art. 6.1.b GDPR).
• Guest registration and reporting of the data to the Spanish Ministry of the Interior through the SES.Hospedajes platform, under Organic Law 4/2015 on the protection of public safety and Royal Decree 933/2021. Legal basis: compliance with a legal obligation (art. 6.1.c GDPR).
• Accounting and tax obligations, such as invoicing. Legal basis: legal obligation (art. 6.1.c GDPR).
• Answering your enquiries and quote requests (for example, for groups). Legal basis: pre-contractual steps at your request and our legitimate interest in assisting you (art. 6.1.b and 6.1.f GDPR).
• Optional cookies and content (maps, statistics): only with your consent (art. 6.1.a GDPR), which you can withdraw at any time.

We do not carry out profiling or make automated decisions with legal effects on you. We will only send you marketing communications if you give us your express consent.

• Spanish Ministry of the Interior (law enforcement agencies), through SES.Hospedajes, in compliance with Royal Decree 933/2021.
• Tax authorities and other public authorities, where there is a legal obligation.
• Technology providers that provide us with web hosting, database, cloud storage and email services and automated processing of booking confirmation emails, acting as processors under a contract in accordance with art. 28 GDPR: Vercel Inc. (web hosting and visitor statistics), Neon Inc. (database) and Cloudflare Inc. (cloud storage).
• Booking platforms (such as Booking.com), if you book through them: in that case, the platform processes your data as an independent controller under its own privacy policy.

Some providers may process data outside the European Economic Area. In that case, appropriate safeguards apply, such as European Commission adequacy decisions (for example, the EU-US Data Privacy Framework) or standard contractual clauses.

• Booking data: for the duration of the relationship and, afterwards, for the limitation periods of any legal liabilities (generally five years).
• Guest register: three years from the end of the stay, under Royal Decree 933/2021.
• Accounting and tax records: six years, under the Spanish Commercial Code and tax regulations.
• Images of identity documents that may be scanned at reception to speed up registration: scheduled for deletion from the departure date.
• Enquiries: as long as needed to answer them and, where applicable, for the relevant legal periods.
• Cookie preferences: twelve months.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given at any time, by writing to puertogenoves@hotmail.com or by post to Calle Balandro 15, 04118 San José (Níjar), Almería, España, stating the right you wish to exercise and providing a means of identification. Please note that data whose processing is required by law (such as the guest register) must be kept for the legal period.

If you believe we have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We apply appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS) and access restricted to authorised staff.

Bookings must be made by adults. The data of minors staying at the hostal is processed solely to comply with the legal obligation to register guests.

We may update this policy to reflect legal changes or changes to our services. The date of the last update is shown at the top of the page.