PRIVACY POLICY
Hotel Val de Ruda, S.L. hereby informs users of its website of its policy regarding the processing and protection of the personal data of users and customers that may be collected whilst browsing or contracting services via its website. In this regard, Hotel Val de Ruda, S.L. guarantees compliance with current legislation on the protection of personal data, as set out in the General Data Protection Regulation (GDPR) (EU) 2016/679 and in Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights.
Who is the data controller?
Data controller
Hotel Val de Ruda, S.L.
Tax Identification Number
B25040353
Registered office
Val de Ruda Building, Cota 1500 – 25598 Baqueira Beret (Lleida)
Telephone
973 645258 or 973 645811
Email
hotel@valderuda.com

For what purpose is personal data processed?
Hotel Val de Ruda, S.L. processes the information provided via this website for the following purposes:
Enquiry Management and Customer Service: To process, resolve and respond to any questions, requests, suggestions or comments that users submit via the contact form or through the company’s official communication channels.
User Account Management: To manage registration, maintenance and access to the private customer area on the website, enabling users to view their history, manage their personal data and streamline future bookings.
Management and Processing of Hotel Bookings: To process bookings for accommodation and additional services selected by the customer, make any requested changes or cancellations, issue booking confirmations and manage the corresponding payments and refunds.
Compliance with Legal and Tax Obligations: To process invoicing and accounting arising from the booking of the service, as well as to strictly comply with public safety regulations regarding the mandatory registration of travellers and the disclosure of data to the State Security Forces.

Hotel Val de Ruda, S.L. will under no circumstances process personal data for purposes other than those indicated above.
Will marketing information be sent?
Under no circumstances will Hotel Val de Ruda, S.L. use the information provided by the user and/or collected via the website to send commercial information. Should it be used for this purpose, it will always be with the user’s prior consent and in accordance with the guidelines set out in current data protection legislation .
How long will personal data be retained?
The personal data provided will be retained for as long as the business relationship continues, until the data subject requests its erasure, or for as many years as necessary to comply with legal obligations.
Thereafter, the data will be deleted in accordance with the provisions of data protection legislation, which entails the data being blocked and made available only upon request by judges and courts, the Ombudsman, the Public Prosecutor’s Office or the relevant public authorities during the limitation period for any potential legal proceedings; once this period has elapsed, the data will be completely deleted.
How has personal data been obtained and what categories of data are processed?
The personal data processed by Hotel Val de Ruda, S.L. is provided directly by the data subject when completing the various forms available on this website.
Depending on the channel used and the purpose of the communication, the following categories of data are processed:
Contact Form:
Identification and contact details: first name, surname, telephone number and email address.
Bookings:
Identification and contact details: First name, surname, email address, telephone number and country of residence.
Stay details: Check-in and check-out dates, number of guests, number and type of room selected, as well as any preferences or special requests indicated by the user.
Financial and billing details: Bank card details (used as a guarantee for the booking or to pay the rate), billing address and, where applicable, company tax details (Tax Identification Number (NIF/CIF) and company name).
Legal registration details of guests: Additional details from the national identity card (DNI) or passport, which are mandatory to comply with current public safety regulations regarding the registration and identification of guests at hotel establishments.

However, as this is a communication channel, the data subject may include in their message at any other personal data they choose to include voluntarily in the body of the message when raising their queries, enquiries or comments.
What is the legal basis for using your data?
The legal bases for the processing of personal data are:
Enquiry Management (Contact Form): The legal basis is the data subject’s consent (Article 6(1)(a) of the GDPR), which is given expressly and voluntarily by ticking the box to accept the privacy policy and clicking the button to submit their enquiry.
User Account Management: The legal basis is the performance of pre-contractual measures or a contract (Article 6(1)(b) of the GDPR) to which the user is a party, enabling them to create a profile to facilitate and streamline their interactions on our website.
Management and Processing of Hotel Bookings: The main legal basis is the performance of a contract for the provision of services (Article 6(1)(b) of the GDPR) to which the customer is a party upon confirming their stay at our establishment.
Compliance with Legal Obligations: The processing of billing data and guest registration details is based on compliance with a legal obligation applicable to the data controller (Article 6(1)(c) of the GDPR), in accordance with Spanish tax legislation, the General Tax Law and public safety regulations regarding the compulsory registration of travellers.

To whom will the data be disclosed?
Personal data will not be disclosed to any third parties, except to those third parties whose involvement is necessary for the proper management of the service provision.
Furthermore, your data may also be disclosed to bodies and authorities (administrative or judicial) in cases where a legal provision so requires.
Personal data will not be sent outside the European Economic Area; therefore, no international data transfers will take place.
What are your rights when you give your consent?
Any individual has the right to obtain confirmation as to whether their personal data is being processed.
Data subjects have the right to:
Request access to the personal data relating to the data subject
Request the rectification or erasure of their personal data
Request that the processing of their personal data be restricted
Object to the processing
Request data portability
Data subjects may access their personal data, as well as request the rectification of inaccurate data or, where applicable, request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case I will retain it solely for the purpose of exercising or defending legal claims.
In certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. Hotel Val de Ruda, S.L. will cease processing the data, except where there are compelling legitimate grounds, or for the purpose of exercising or defending potential claims. They may also request data portability.
How can these rights be exercised?
To exercise the aforementioned rights of access, rectification, erasure, objection, restriction of processing and data portability, data subjects should contact Hotel Val de Ruda, S.L. at Edificio Val de Ruda, Cota 1500 – 25598 Baqueira Beret (Lleida).
You may also contact Hotel Val de Ruda, S.L. via email athotel@valderuda.com .

Any request to exercise these rights must be accompanied by valid proof of identity and must specify the right you wish to exercise, the details of your request and an address for the purposes of notifications.
Can you lodge a complaint with the AEPD?
Data subjects also have the right to an effective judicial remedy and to lodge a complaint with the supervisory authority – in this case, the Spanish Data Protection Agency – if they consider that the processing of their personal data infringes the Regulation. They may lodge a complaint by writing to the Spanish Data Protection Agency, C/Jorge Juan nº 6, 28001 Madrid, or by visiting its website: https://sedeagpd.gob.es/sede-electronica-web/