Hotelmaspastora

Book Now
LOFTS MAS PASTORA

Privacy Policy

ESARODA, S.L. is committed to protecting the privacy of users who access this website and/or any of its services. By using the website and/or any of the services offered by ESARODA, S.L., the user accepts the provisions contained in this Privacy Policy and agrees that their personal data will be processed as stipulated herein. Please note that, although there may be links from our website to other websites, this Privacy Policy does not apply to other companies or organizations to which the website may be redirected. ESARODA, S.L. does not control the content of third-party websites nor does it accept any responsibility for the content or privacy policies of such websites.

1) OWNER INFORMATION

In compliance with Article 10 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, the identifying details of the owner are as follows:

 

2) APPLICABLE LAWS

This Privacy Policy is drafted in accordance with current Spanish and European legislation on the protection of personal data on the internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
  • Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPD-GDD).
  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

 

3) PRIVACY MATTERS

In compliance with GDPR and the LOPD-GDD, we provide you with the following information about the processing of personal data you may provide us:

Data Controller: ESARODA, S.L. (details above).

Personal Data Record
In accordance with GDPR and LOPD-GDD, personal data collected through forms on our website will be incorporated and processed in our file for the purpose of facilitating, streamlining, and fulfilling the commitments established between ESARODA, S.L. and the user, or to maintain the relationship established in such forms, or to address a request or inquiry.

Unless the exception provided in Article 30.5 of the GDPR applies, we maintain a record of processing activities specifying, by purpose, the processing carried out and other circumstances established in the GDPR.

Legal Basis for Processing: Consent. ESARODA, S.L. undertakes to obtain the user’s express and verifiable consent for processing their personal data for one or more specific purposes.

The user may withdraw consent at any time, and doing so will be as simple as granting it. Withdrawal will not affect the use of the website as a general rule.

Other legal bases:

  • Compliance with legal obligations.
  • Legitimate interest: sending our own advertising.

Categories of Data: Identification data only. No special categories of personal data (Article 9 GDPR) are processed.

Source of Data: Data provided by clients or service recipients through any means.

Data Retention Period: Personal data will be retained only for the minimum time necessary for processing purposes, or until the user exercises their right to cancellation, opposition, or restriction of processing. Certain identification and traffic data may be retained for up to 2 years in case required by courts or to initiate actions arising from misuse of the website.

Processing Purposes:

  • Client Management: To provide contracted services and issue invoices. Data will be retained as long as the commercial relationship continues or as long as required by legal obligations.

Data Recipients: Personal data will not be shared with third parties, unless specified at the time of collection.

Children’s Personal Data: Only users over 14 years of age can legally give consent for their data to be processed. For children under 14, parental or guardian consent is required.

User Rights: Access, rectification, erasure (right to be forgotten), restriction of processing, data portability, objection, and the right not to be subject to automated decision-making, including profiling.

Requests must be sent with proof of identity to our postal address or email (listed above).

 

4) PRINCIPLES FOR DATA PROCESSING

Data will be processed in accordance with GDPR and LOPD-GDD principles:

  • Lawfulness, fairness, and transparency.
  • Purpose limitation.
  • Data minimisation.
  • Accuracy.
  • Storage limitation.
  • Integrity and confidentiality.
  • Proactive accountability.

 

5) SECURITY MEASURES

In compliance with Article 32 of the GDPR, we have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

  • Informing staff about data processing policies.
  • Regular backups.
  • Access controls.
  • Regular review and evaluation processes.

 

6) CONFIDENTIALITY & DATA SECURITY

ESARODA, S.L. uses SSL (Secure Socket Layer) to ensure secure and encrypted transmission of personal data between the server and the user.

However, as internet security cannot be guaranteed, we commit to notifying users without undue delay if a personal data breach occurs that is likely to result in a high risk to their rights and freedoms.

 

7) LINKS TO THIRD-PARTY WEBSITES

Our website may contain links to third-party websites not operated by ESARODA, S.L.. These sites will have their own privacy policies, for which they are solely responsible.

 

8) ACCEPTANCE & AMENDMENTS TO THIS POLICY

Use of this website implies acceptance of this Privacy Policy. ESARODA, S.L. reserves the right to modify it at any time, whether due to legal changes or its own criteria. Users are encouraged to check this page periodically.

Last update: 06/08/2025