PRIVACY POLICY
Last updated: September 2026
1. DATA CONTROLLER
ALMARA HOSPITALITY SL, trading as ALMARA Suites, is responsible for personal data processed for its accommodation business.
NIF: B88798129
Address: Calle Poeta Paredes 41, 14012 Córdoba, Spain
Email: info@almarasuites.com
Telephone: +34 614 652 356
2. DATA WE COLLECT
Depending on how you contact or book with us, we may process:
• Identity and contact details, including name, address, email and telephone number.
• Reservation information, including dates, guest numbers, preferences, messages, changes and cancellations.
• Identification, nationality, date of birth, address, family relationship and other information required for traveller registration.
• Billing, invoice, payment-status and transaction-reference information. We do not normally store complete payment-card numbers or security codes.
• Information concerning enquiries, complaints, incidents, damage, lost keys or legal claims.
• Website, device, browser and cookie information.
• Accessibility or special-requirement information you voluntarily provide. Where this reveals health information, we use it only to respond to your request and, where required, with your explicit consent.
Please do not send complete payment-card details through email, WhatsApp or social media.
3. SOURCES OF INFORMATION
We collect information directly from you and from people booking on your behalf. We may also receive booking information from online travel agencies and reservation services, including Booking.com, Airbnb and Expedia, and from our property-management or channel-management provider, Guesty.
Those organisations process information for their own purposes under their privacy policies. You should contact the relevant platform about its account, payment or independent processing activities.
4. PURPOSES AND LEGAL BASES
We process information:
• To answer enquiries and take steps requested before a booking, based on your request.
• To manage reservations, payments, check-in, accommodation, communications, cancellations and refunds, as necessary to perform our contract.
• To collect and communicate traveller-registration information, issue invoices and meet accounting, tax and public-security obligations, as required by law.
• To protect guests, staff, neighbours, systems and property; prevent fraud; manage complaints and incidents; and establish or defend claims, based on our legitimate interests and balanced against your rights.
• To accommodate voluntarily disclosed special requirements, with the applicable legal basis and additional protection where sensitive data is involved.
• To send optional marketing only with consent or where another lawful basis applies. Booking does not automatically subscribe you to marketing.
• To use non-essential cookies only after consent. You may withdraw consent without affecting earlier lawful processing.
Required identification and traveller-registration information must be provided when legally necessary. Without it, we may be unable to complete check-in or provide accommodation.
5. RECIPIENTS AND SERVICE PROVIDERS
Where necessary, we may share limited information with:
• Booking platforms, Guesty and providers supporting reservations, check-in or guest registration.
• Payment processors and financial institutions.
• Squarespace and providers supporting our website, hosting, email and communications.
• Cleaning, maintenance and guest-service contractors who require relevant information.
• Accountants, tax advisers, insurers, lawyers and fraud-prevention or security providers.
• Police, courts, tax authorities and other public bodies when legally required.
Providers acting for ALMARA must follow appropriate confidentiality, data-processing and security obligations. We do not sell personal data.
6. INTERNATIONAL TRANSFERS
Some technology or booking providers may process data outside the European Economic Area. Where GDPR requires safeguards, transfers will rely on an adequacy decision, European Commission standard contractual clauses or another lawful mechanism. Information about a platform’s transfers is available in that provider’s privacy policy.
7. RETENTION
We keep personal data only for as long as required for the relevant purpose:
• Mandatory traveller-registration records: three years after the contracted service ends.
• Booking and stay information: for the stay and afterwards while needed for legal, contractual or claim obligations.
• Invoices and accounting records: for the periods required by Spanish tax and commercial law.
• Enquiries without a booking: normally up to 12 months after the last communication.
• Complaints, incidents and claims: until resolved and any applicable legal period expires.
• Marketing information: until consent is withdrawn, you object or the information is no longer required.
• Cookie information: for the periods identified in our Cookie Policy.
Data may be retained longer when necessary to meet a legal requirement or preserve evidence concerning a claim.
8. COOKIES AND EXTERNAL LINKS
Our website uses necessary cookies and may use optional analytics, preference or marketing cookies. Optional cookies must remain disabled until you consent through the cookie banner. You can reject them or change your preferences later. The Cookie Policy explains the cookies, providers, purposes and durations.
Our website may link to Booking.com, Airbnb, Expedia, Civitatis, Google Maps, Instagram or other independent websites. Their own privacy policies apply when you visit them.
9. CHILDREN
We process children’s information only when they are included in a reservation, when needed to provide accommodation or when traveller-registration law requires it. The booking adult must be authorised to provide information about accompanying minors. We do not use children’s information for direct marketing.
10. SECURITY
We apply reasonable technical and organisational measures designed to prevent unauthorised access, alteration, disclosure, loss or misuse. Access is restricted to people and providers who need the information for their responsibilities. No electronic system can be guaranteed completely secure.
11. YOUR RIGHTS
Subject to applicable law, you have the right to:
• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion or restriction.
• Object to processing based on legitimate interests or direct marketing.
• Receive applicable data in a portable format.
• Withdraw consent at any time.
• Complain to the Agencia Española de Protección de Datos at www.aepd.es.
To exercise your rights, contact info@almarasuites.com or write to ALMARA HOSPITALITY SL, Calle Poeta Paredes 41, 14012 Córdoba, Spain. Explain your request and provide enough information to identify the relevant record. We may request reasonable evidence of identity. Contact the relevant booking platform directly for information it controls independently.
12. AUTOMATED DECISIONS AND UPDATES
ALMARA does not make decisions producing legal or similarly significant effects based solely on automated processing. Independent booking platforms may operate their own systems under their policies.
We may update this policy when our services, providers or legal obligations change. The current version and revision date will remain available on this website.