Politica de privacidad
POSADA DE LA LUZ
In compliance with Spanish Organic Law 3/2018 (LOPDGDD), POSADA DE LA LUZ provides the following information regarding the processing of personal data collected through this website.
Data Controller: POSADA DE LA LUZ
Address: Calle Juan Carlos I, 4 - 50311 Torralba de Ribota (Zaragoza, Spain)
Contact: hola [at] posadadelaluz.com
Website: www.posadadelaluz.com
Guests.
Purpose: managing bookings, stays and payments; communication to Security Forces; communication to travel agencies. Retention: minimum 6 years (tax, commercial regulations and guest register).
Legal basis: consent.
Website / Email Contacts.
Data collected: IP address, browser, visit duration; form data. Purposes: responding to enquiries; managing requests; electronic information; commercial communications where authorized; web analytics and improvements.
Legal basis: consent.
Clients.
Purposes: quotes; electronic information; commercial communications where authorised; administrative and logistical management; invoicing; debt recovery.
Suppliers.
Purposes: communications; logistics; invoicing; tax filing; debt recovery. Legal basis: contractual relationship or consent.
Social Media Contacts Purposes: responding to enquiries; managing requests; community building.
Legal basis: contractual relationship pursuant to each platform's policies.
Third-Party Data.
Only data provided by the data subject is processed. If third-party data is submitted, the submitting party assumes full responsibility.
Minors.
No data from persons under 14 years of age is processed.
Electronic Communications.
Used solely to manage requests or where expressly authorised.
Security Measures.
Technical and organisational measures are applied to prevent loss, misuse or unauthorised access.
Data Disclosures.
Tax Authority; banks; payment platforms; development and hosting companies under confidentiality agreement.
Rights.
Access, rectification, erasure, restriction, portability, complaint to the Spanish Data Protection Authority (AEPD), withdrawal of consent.
Exercise of Rights.
By means of a signed form and a copy of a valid ID document. Response within a maximum of one month (two months in complex cases).
Integrated Digital Assistant (GPT)
POSADA DE LA LUZ may offer users a digital assistant based on artificial intelligence (GPT) technology, with the purpose of providing general information about stays, room availability and project features.
- Purpose of processing.
The digital assistant enables users to:
-
Check room availability.
-
Obtain general information about stays, house rules and conditions.
-
Be directed to the official booking page.
The assistant does not formalise bookings, process payments or replace the official contracting process carried out through the website.
- Data processed.
When the user interacts with the assistant, the following data may be processed:
-
Text voluntarily entered by the user.
-
Minimum technical data required for communication (e.g. IP address or connection data).
-
Data relating to dates and room names when the user checks availability.
No special category data or financial data is requested through the assistant.
- Data transfers.
For the operation of the digital assistant, certain queries may be processed by external technology providers acting as data processors, under confidentiality agreement and in compliance with Regulation (EU) 2016/679 (GDPR). No data is transferred to third parties for commercial purposes arising from use of the assistant.
- Retention.
Queries made through the assistant are not automatically incorporated into commercial databases nor used for automated profiling. Where applicable, data will only be retained for the time strictly necessary for service provision or to fulfil legal obligations.
- Automated decisions.
The assistant provides automated responses based on information programmed by POSADA DE LA LUZ and existing availability data in the internal system. No decisions with direct legal effects on the user are made through the assistant.
- Recommendation.
To formalise any booking or provide sensitive personal data, users must exclusively use the official channels indicated on the website.
Cookies.
Please refer to the website's Cookie Policy.
Retention periods.
For the duration of the relationship; thereafter for legally required periods or until erasure is requested; retention of communications linked to services and warranties.
NOTE: Use of the digital assistant (GPT) implies acceptance of this Privacy Policy. If you do not agree with the conditions described herein, you must refrain from using said service.