BOOK ONLINE
Book online

Privacy Politicy

The Owner undertakes to comply with the regulations on the Protection of Personal Data and to respect the privacy of Users. The aim is to provide the best possible service to the User and, for this purpose, it is necessary to process their data.

Data Controller
PACHICO FAMILY STATES SL
NIF: B02994093
Address: C/ Paseo Sancho Abarca, Number 20, 01300 Laguardia (Álava)
Telephone: 945 11 22 33

Purposes

  • Handling enquiries: To respond to User enquiries submitted through the forms.
  • Browsing data: Data collected by own or third-party cookies that may be generated by this Website, as specifically detailed in the [Cookies Policy].
  • Commercial communications: For Users who voluntarily opt in, promotions, advertisements, offers, news, invitations to events and any other type of commercial information from the Owner will be sent.

Lawfulness and retention

  • Legal basis for processing: Consent provided by the User by voluntarily supplying their data and accepting the Privacy Policy. If the necessary data are not provided for these purposes, it will not be possible to deliver the services.
  • Data will be retained for as long as the relationship remains in place and no deletion is requested, and in any case in accordance with the statutory limitation periods that may apply.

Disclosures
No disclosures of data collected through this Website are envisaged, unless expressly stated in the relevant information text.

Data subject rights
Users may exercise their rights of access, rectification, erasure, portability, restriction or objection by sending a signed request by post with the subject line “Data Protection”, to the address: C/ Paseo Sancho Abarca, Number 20, 01300 Laguardia (Álava), clearly indicating their contact details and enclosing a copy of their identity document; or by sending a request by email with the subject line “Exercise of Rights” to hotel@pachico.es, from the same email account provided.
Users have the right to withdraw their consent at any time and to lodge a complaint with the Supervisory Authority (Spanish Data Protection Agency – www.aepd.es).

Free text fields
The free text fields that may appear in the Website forms at the User’s disposal are solely intended to collect information for the purpose of improving the quality of the Services. Users shall not include in such “free text fields” any personal data that may be considered as requiring a higher level of protection, including but not limited to data relating to financial situation, psychological profiles, ideology, religion, beliefs, trade union membership, health, racial origin and/or sexual life.

Non-mandatory fields
The Owner informs Users that the provision of certain data is not mandatory, except where otherwise indicated with an (*). However, failure to provide such data may prevent the provision of Services related to those data, releasing the Owner from any responsibility for the non-provision or incomplete provision of such Services.

Access to and rectification of personal data
The User undertakes to provide accurate information regarding their personal data and to keep the data supplied to the Owner up to date. The User shall be responsible for the accuracy of the data provided, and the Owner reserves the right to exclude from the Services any User who has supplied false data, without prejudice to any other legal actions that may apply. The data supplied by the User shall be presumed to be correct; therefore, in the event of erroneous submission of data by the User, the Owner declines any responsibility for incorrect execution or non-execution of delivery, as well as incorrect performance of the necessary administrative procedures.

Communication of personal data
In connection with the management of the Services, Users’ data may be processed by companies providing various services to the Owner, including but not limited to shipping, messaging, accounting, consultancy, IT maintenance, or any other services which, due to their role as Data Processor, are essential or unavoidable in order to access or process such data. Such processing will not be considered, under any circumstances, as a data disclosure. The Owner will not share Users’ data with third parties under any circumstances.

Confidentiality
In addition, any information exchanged between the parties shall also be considered confidential, whether agreed as such or by its nature. Viewing of data via the Internet shall not imply direct access to such data, except with the express consent of the data subject on each occasion.

Consent for the use of cookies

In order for our website to function properly, we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website, and to document this appropriately, we use a consent management platform: CookieFirst.
This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com, hereinafter CookieFirst.

When you access our website, a connection is established with the CookieFirst server to give us the opportunity to obtain your valid consent for the use of certain cookies. CookieFirst then stores a cookie in your browser in order to enable only those cookies to which you have consented and to document this appropriately. The data processed will be stored until the predefined retention period expires or until you request the deletion of the data. Notwithstanding the foregoing, certain mandatory legal retention periods may apply.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data Processing Agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that the data of visitors to our website is processed only in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data are collected:

  • Your consent or withdrawal of consent
  • Your anonymous IP address
  • Information about your browser
  • Information about your device
  • The date and time you visited our website
  • The URL of the webpage where you saved or updated your consent preferences
  • The approximate location of the user who saved their consent preferences
  • A universally unique identifier (UUID) of the website visitor who clicked on the cookie banner