1. Introduction

The main objective of this Privacy Policy is to inform the guests and users of the Hotel Rural website MONTE ORIBIO HOUSE about how your personal information is collected, used and protected. This policy applies to all personal data collected through our website, contact forms, booking processes and other interaction channels.  

MONTE ORIBIO HOUSE undertakes to treat your personal data in accordance with current legislation on data protection, including Regulation (EU) 2016/679 of 27 April (RGPD) and Organic Law 3/2018 of 5 December (LOPDGDD).  

By using our website and providing personal data, the USER/USER accepts the practices described in this Privacy Policy.

2. Identity and contact details of the data controller

• • Responsible: MONTE ORIBIO HOUSE.
  • NIF/CIF: 05413203S.
  • Contact telephone number: 613 32 66 03.
  • E-mail: hola@casamonteoribio.com.
  • Mailing address: Lugar de VILACHÁ, 4, 27635 Vilacha, Lugo,.

For any questions regarding data protection, you can contact us through the contact details provided or direct your communication to our Data Protection Officer (if applicable): [E-mail address].

3. Information gathered

The Rural Hotel MONTE ORIBIO HOUSE collects both personal and non-personal information from users through a variety of channels, including:

• Information collected automatically: When the USER / A visits our website, certain information is automatically collected, such as your IP address, device type, operating system, browser type, language, date and time of access, referring URL, website usage data and possible errors detected during navigation. This information is collected through cookies and similar technologies (please refer to our Cookies Policy for more details) and is used for statistical purposes, to analyze trends, administer the website and improve your user experience.  
• Data provided voluntarily by the user: We collect the information that the USER voluntarily provides us when using our contact forms, making reservations, registering on our website or communicating with us through other means.
• Data provided by third parties: We may receive information about the USER from third parties, such as social networks, online booking services or that provided by cookies. 

4. Purpose and legitimacy of personal data processing

The Rural Hotel MONTE ORIBIO HOUSE processes your personal data for the following purposes:

• Provision of services and management of the contractual relationship: To manage your accommodation bookings, process payments, deal with your requests and queries, provide you with information about our services and ensure compliance with our contractual obligations. The legal basis for this processing is the performance of a contract (Article 6.1.b of the GDPR) and compliance with legal obligations.  
• Customer service and communications: To respond to your inquiries, provide support, manage your requests for information and communicate with the USER/USER via email, phone, chat or social networks. The legal basis for this processing is our legitimate interest in providing efficient customer service (Article 6.1.f of the GDPR).  
• Marketing and promotions: To send you information about offers, promotions, events and news related to our services, provided that the USER/A has given his/her consent to do so. The legal basis for this treatment is your explicit consent (article 6.1.a of the RGPD).  
• Improving our services and statistical analysis: To analyze the use of our website, perform statistical studies, evaluate and improve our services, personalize your experience and optimize our management. The legal basis for this processing is our legitimate interest in improving our services (Article 6.1.f of the GDPR).  
• Compliance with legal obligations: To comply with applicable legal and regulatory obligations, such as keeping accounting records, communicating data to competent authorities and complying with health protocols. The legal basis for this processing is compliance with a legal obligation (Article 6.1.c of the GDPR).  

4.1. In contact forms

The Web Site of the MONTE ORIBIO HOUSE uses contact forms to facilitate communication between users and the hotel. These forms allow users to make inquiries, request information, send suggestions or contact the hotel for various reasons.

Through the contact forms, the following personal data may be collected:

• • First and last name.
  • E-mail address  
  • Telephone number (optional).
  • Message subject.
  • Message content.

Data collected through contact forms is not usually shared with third parties, except in the following cases:

• • Technology service providers: The hotel may contract third party providers for the maintenance and support of contact forms, data storage or analysis of queries. These providers act as data processors and are obliged to protect the confidentiality of the data.
  • Legal obligations: In case of a legal obligation, the hotel may be obliged to provide the data to the competent authorities.

MONTE ORIBIO HOUSE implements appropriate technical and organizational security measures to protect data collected through contact forms, including:

• • SSL encryption for secure transmission of data through the form.  
  • Measures to protect against unauthorized access to hotel systems.
  • Data retention and deletion policies.

4.2. In WhatsApp

The Web Site of the MONTE ORIBIO HOUSE uses a WhatsApp plugin to facilitate direct communication with users and guests. This plugin allows users to contact the hotel to make inquiries, request information, manage reservations or receive customer service in an agile and convenient way.  

When using the WhatsApp plugin, the following personal data is collected and processed:

• • User's telephone number.
  • USER'S NAME (optional).
  • Content of conversations.
  • Conversation metadata.

Data collected through the WhatsApp plugin is shared with the following third parties:

• • WhatsApp Inc.: The provider of the messaging platform WhatsApp has access to conversation data to enable the operation of the service. Users are advised to consult WhatsApp's privacy policy for detailed information on how WhatsApp handles personal data.  
  • Technology service providers: MONTE ORIBIO HOUSE may engage third-party providers for the maintenance and support of the WhatsApp plugin, data storage or analysis of conversations. These providers act as processors and are obliged to protect the confidentiality of the data.

MONTE ORIBIO HOUSE implements appropriate technical and organizational security measures to protect data collected through the WhatsApp plugin, including:

• • End-to-end encryption of conversations (provided by WhatsApp).  
  • Measures to protect against unauthorized access to the hotel's devices and systems.
  • Data retention and deletion policies.

4.3. In lodging reservation

The Web Site of MONTE ORIBIO HOUSE uses an accommodation booking plugin to allow users to make online accommodation bookings. This plugin collects the necessary data to manage the booking process and provide the requested accommodation services.

Through the hosting booking plugin, the following personal data is collected:

• • Identification data:
    • First and last name.
    • Identity document (ID card, passport). 
  • Contact information:
    • E-mail address.
    • Telephone number.
  • Reservation data:
    • Arrival and departure dates. 
    • Room type.
    • Number of guests.
    • Special requests.  
  • Payment information:
    • Credit card data (number, expiration date, CVV) (this data is usually tokenized for security).
  • Other information:
    • Housing preferences.

Data collected through the hosting booking plugin may be shared with the following third parties:

• • Suppliers of the booking plugin: The company that provides the booking software has access to the data to enable the operation of the system. This company acts as the data processor and is obliged to protect the confidentiality of the data.  
  • Payment service providers: Banks and payment gateways process credit card data to handle payments. These providers are also obliged to protect the security of financial data.  
  • Competent authorities: In compliance with legal obligations, the hotel may provide data to authorities (e.g. police for registration of travelers or health authorities).

MONTE ORIBIO HOUSE implements appropriate technical and organizational security measures to protect data collected through the Hosting Booking Plugin, including:

• • SSL encryption for secure data transmission during the booking process.  
  • Secure storage of data on protected servers.
  • Measures to protect against unauthorized access, alteration or loss of data.  
  • Compliance with the PCI-DSS standard for secure processing of credit card data.

5. Transfer of data to third parties

The Rural Hotel MONTE ORIBIO HOUSE may share your personal data with third parties in the following circumstances:

• Service Providers: We may contract with third-party service providers to assist us in operating our business, such as providers of booking software, payment services, web hosting, data analysis and marketing. These providers access your information only to the extent necessary to perform their functions and are obligated to protect your confidentiality.  
• Banks: We share limited information with banks for payment verification and fraud prevention.  
• Law Enforcement: We may disclose your information to governmental or law enforcement authorities if required to do so by law or if we have a good faith belief that such disclosure is necessary to protect our rights, your safety or the safety of others.  
• International transfers: If we transfer your personal data to a country outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your information, such as standard contractual clauses approved by the European Commission.  

6. Data Retention

The Rural Hotel MONTE ORIBIO HOUSE retains your personal data for the time necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine retention periods include:  

• The time necessary to provide the requested services and manage the relationship with the USER.  
• The applicable legal statutes of limitations.  
• Legal data retention obligations (e.g., accounting records).  

In particular, the following retention periods shall apply:

• Disaggregated data will be retained without time limitation.  
• The data of the USERS/AS clients will be kept according to the contracted service, observing in any case the minimum indispensable term, with a limit of:

• Five (5) years, in accordance with article 1964 of the Civil Code (personal actions without special term).  
• Six (6) years, as provided in Article 30 of the Commercial Code (accounting documents or invoices).  

• The data of the persons who give their consent for the sending of advertising and commercial information will be kept from the date of subscription of the USER until he/she expresses his/her wish to unsubscribe.  

At the end of the conservation period, they will be deleted or destroyed.

7. Data Security

In accordance with current legislation on personal data protection, MONTE ORIBIO HOUSE fully complies with the provisions set forth in the RGPD and the LOPDGDD.  

This compliance extends to the principles set out in Article 5 of the GDPR, which ensure that data are:

• Processed in a lawful, fair and transparent manner in relation to the USER.  
• Adequate, relevant and limited to what is necessary for the specific purposes for which they are processed.  

MONTE ORIBIO HOUSE ensures the implementation of appropriate technical and organizational policies, designed to implement the security measures required by the RGPD and the LOPDGDDD. The purpose of these measures is the effective protection of the rights and freedoms of USERS, who are provided with the necessary information to exercise these rights.  

However, although security measures are implemented, the absolute security of the information cannot be guaranteed, so caution is advised when sharing information.

The USER should be aware that, even after deletion, information may remain in cache or in copies made by other USERS.

For more detailed information about the privacy safeguards in place, USERS may contact directly to MONTE ORIBIO HOUSE.

8. USER'S RIGHTS

The USER/USER has the right to access his/her personal data, rectify those that are inaccurate, request their deletion, limit any of the processing or object to any use (for example, to object to the sending of advertising), in person, by e-mail or by post, at the following address Lugar de VILACHÁ, 4, 27635 Vilacha, Lugo,. You may also exercise these rights under the terms established in the applicable regulations, which can be consulted at www.aepd.es.

9. Mandatory or nonmandatory nature of the information provided

By checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact, download or registration forms, USERS expressly, freely and unequivocally accept that such data is necessary for the following purposes MONTE ORIBIO HOUSE can fulfill your request as a service provider. The inclusion of data in the fields not marked with an asterisk is voluntary.  

The USER guarantees the truthfulness of the personal data provided to MONTE ORIBIO HOUSE and undertakes to communicate any modification or update of the same.  

MONTE ORIBIO HOUSE informs that all data requested through the Website are mandatory, as they are essential to provide an optimal service to the USER. If all the required data is not provided, it cannot be assured that the information and services provided will fully meet your needs or that the service will not be limited.  

The personal data provided by the USERS will be incorporated and processed in the Register of Processing Activities of MONTE ORIBIO HOUSEin accordance with the purposes described above.

10. Changes in privacy policy

Any changes that may be made to the privacy policy in the future will be communicated on this page. In this way, you will be able to regularly check for updates or changes.

See our Legal Notice to know all the data concerning the owner of the website, MONTE ORIBIO HOUSE.

MONTE ORIBIO HOUSE makes all reasonable efforts to ensure that the content of the site is accurate and current.