1. Data Controller
In compliance with the General Data Protection Regulation (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, you are hereby informed that personal data provided through this website will be processed by Aida García Menéndez (trading as Hotel Son de Mar; Tax ID/CIF 53547704R; address: La Corolla, 711, Quintueles 33314, Asturias).
Users may contact the data controller regarding any matter related to the processing of their personal data via email at info@hotelsondemar.com or by phone at 984002506.
2. Personal data we may process
Through this website, the establishment may process personal data voluntarily provided by the user via contact forms, information requests, reservations, subscriptions to commercial communications, or communications made via email, telephone, or other enabled channels.
Such data may include, among others: full name, email address, telephone number, reservation details, dates of stay, number of guests, preferences or requests related to the stay, billing information, and—where applicable—data necessary to process payments or service contracts.
During the stay, and in compliance with regulations applicable to lodging establishments, data necessary for guest registration and reporting to competent authorities may be requested.
3. Purposes of processing
Personal data may be processed for the following purposes:
Managing inquiries, information requests, or communications received through the website.
Managing reservations, stays, modifications, cancellations, payments, billing, and other services contracted by the user.
Providing hotel accommodation services and attending to needs related to the stay.
Complying with legal obligations applicable to the establishment, including obligations regarding taxation, accounting, administration, consumer protection, public safety, and guest registration. Send informational or commercial communications regarding the establishment, promotions, bonuses, offers, or activities, provided the user has given their consent or there is a legal basis permitting it.
Analyze website usage and improve its performance, in accordance with the Cookie Policy.
4. Legal basis for processing
The processing of personal data provided by the user will be carried out based on the applicable legal basis for each case, depending on the purpose for which said data is collected.
When data is necessary to manage requests for information, reservations, stays, payments, invoicing, modifications, cancellations, or any other service contracted by the user, the legal basis for processing will be the performance of a contract or the implementation of pre-contractual measures requested by the user.
When processing is necessary to comply with tax, accounting, administrative, consumer protection, public safety, traveler registration, or other obligations legally required of the establishment, the legal basis will be compliance with a legal obligation applicable to the data controller.
When the user contacts the establishment via forms, email, telephone, or other enabled channels, their data may be processed to handle and manage said communication. The legal basis for this processing will be the user’s consent upon submitting the inquiry or, where applicable, the controller’s legitimate interest in responding to the request received.
Commercial communications regarding offers, promotions, vouchers, activities, or news about the establishment will only be sent when the user has provided their consent or when another legal basis permits it. The user may withdraw their consent at any time using the methods indicated in this Privacy Policy.
5. Data retention
Personal data will be retained for the time necessary to fulfill the purpose for which it was collected and, subsequently, for the periods required to address potential legal liabilities.
Data related to reservations, invoicing, payments, and contracted services will be retained for the periods required by applicable tax, accounting, commercial, and consumer protection regulations.
Data processed to handle inquiries or information requests will be retained for the time necessary to manage the communication and, where applicable, for the period necessary to address potential liabilities.
Data used to send commercial communications will be retained until the user withdraws their consent or requests to unsubscribe.
Traveler registration data will be retained for the period legally prescribed for lodging establishments.
6. Data Recipients
Personal data may be disclosed to public authorities, law enforcement agencies, competent authorities, and courts or tribunals where there is a legal obligation to do so.
Access to the data may also be granted to certain service providers necessary for the operation of the establishment or the website, such as providers of web hosting, IT maintenance, reservation management, payment gateways, tax or accounting advice, communication tools, email platforms, or technology services. In such cases, these providers will process the data in accordance with the instructions of the data controller and solely for the purpose of providing the contracted service.
If the reservation is made through external platforms, online travel agencies, or other intermediaries, the data processing carried out by such third parties will also be governed by their own privacy policies.
7. International Data Transfers
In general, no international data transfers outside the European Economic Area are envisaged.
However, should technology providers located outside the European Economic Area be used—or providers that may process data from third countries—the data controller will implement the appropriate safeguards required by data protection regulations.
8. Rights of Data Subjects
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, as well as withdraw any consent previously given where the processing is based on such consent.
To exercise these rights, users may send a request to info@hotelsondemar.com, specifying the right they wish to exercise and providing the information necessary to verify their identity.
Furthermore, if a user believes that the processing of their personal data does not comply with applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
9. Accuracy of data
The user guarantees that the personal data provided is truthful, accurate, complete, and up-to-date. The user shall be liable for any damage or loss arising from the provision of incorrect, incomplete, or outdated data.
If the user provides data belonging to third parties, they declare that they have sufficient authorization to do so and undertake to inform said parties of the content of this Privacy Policy.
10. Data security
The data controller shall implement the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, or unauthorized processing or access, taking into account the state of the art, the nature of the data processed, and the risks to which it may be exposed.
11. Minors
Minors must not provide personal data through this website without the authorization of their parents, guardians, or legal representatives.
Should the data controller become aware that it has received personal data from a minor without the corresponding authorization, it may proceed to delete such data.
12. Commercial communications
The user may agree to receive commercial communications regarding the establishment, its services, promotions, vouchers, activities, or news.
The user may unsubscribe at any time by writing to info@hotelsondemar.com or by using the unsubscribe mechanism included, where applicable, in each commercial communication.
13. Changes to the Privacy Policy
The Data Controller reserves the right to modify this Privacy Policy to adapt it to regulatory, technical, or organizational changes, or changes related to the services offered.
The updated version will be available on this website at all times.
Last updated: August 2026