PRIVACY POLICY

Last updated: 16/06/2026

ALMARA Suites respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, contact us or stay at ALMARA Suites.

1. Who is responsible for your information?

The data controller is:

Trading name: ALMARA Suites
Legal name: Almara Hospitality
NIF/CIF: B88798129
Registered address: Calle Poeta Paredes, No. 41, Córdoba, Spain Property address: Calle Poeta Paredes, No. 41, Córdoba, Spain
Email: almara.suites@outlook.com

For questions about this Privacy Policy or the use of your personal information, please contact us using the details above.

2. What information do we collect?

Depending on how you interact with us, we may collect:

  • Your full name.

  • Email address.

  • Telephone number.

  • Postal or billing address.

  • Arrival and departure dates.

  • Number and details of guests included in a reservation.

  • Booking reference and accommodation preferences.

  • Messages, enquiries and special requests.

  • Identification details required for guest registration.

  • Nationality, date of birth and identity-document information.

  • Billing and invoice information.

  • Payment status and transaction references.

  • Information relating to cancellations, complaints, incidents or damage.

  • Website usage, browser, device and cookie information.

  • Information you voluntarily provide about accessibility or other special requirements.

Please do not send complete payment-card details by email, social media, WhatsApp or ordinary messaging services.

3. Information received from Expedia

When you reserve ALMARA Suites through Expedia, Expedia may provide us with the information needed to manage your booking and accommodation.

This may include:

  • The lead guest’s name.

  • Contact information or an Expedia-generated contact address.

  • Names and number of accompanying guests.

  • Arrival and departure dates.

  • Reserved accommodation type.

  • Booking reference.

  • Special requests.

  • Cancellation or modification details.

  • Payment model and payment status.

  • Limited transaction or virtual-card information.

  • Messages exchanged through Expedia.

Expedia processes your account, booking and payment information under its own Privacy Policy.

ALMARA Suites and Expedia may each act as independent data controllers for the personal information they process for their respective purposes.

4. Payments

For reservations collected through Expedia, your accommodation payment is processed by Expedia.

ALMARA Suites may receive confirmation that payment has been made, the reservation value, transaction references and any virtual-card or settlement information required for Expedia to pay us.

We do not use Expedia payment information to charge you again for accommodation already paid through Expedia.

Additional services, damage charges, lost keys, excessive cleaning or other amounts not included in the Expedia reservation may be processed separately through an authorised payment provider.

Payment providers process your payment information under their own privacy and security policies. ALMARA Suites does not normally store complete card numbers or card security codes.

5. Why do we use your information?

We may use your personal information to:

  • Respond to questions and enquiries.

  • Receive and manage reservations.

  • Confirm your booking and payment status.

  • Provide accommodation and guest services.

  • Send arrival, registration and access instructions.

  • Complete online check-in.

  • Meet legal guest-registration requirements.

  • Verify the identity of guests.

  • Manage cancellations, changes and refunds.

  • Issue invoices and maintain accounting records.

  • Communicate before, during and after your stay.

  • Manage cleaning, maintenance and room preparation.

  • Protect guests, staff, neighbours and property.

  • Prevent fraud, unauthorised access and misuse.

  • Investigate damage, complaints or incidents.

  • Establish, exercise or defend legal claims.

  • Improve our website, accommodation and services.

  • Send marketing communications where you have consented or where otherwise legally permitted.

6. Legal grounds for processing

We process personal information on one or more of the following legal grounds:

Performance of a contract

Processing is necessary to manage your reservation, provide accommodation and deliver the services you have requested.

Legal obligation

Processing is necessary to comply with legal requirements, including guest registration, public-security, accounting and taxation obligations.

Legitimate interests

Processing may be necessary for our legitimate interests, including:

  • Protecting our property.

  • Maintaining security.

  • Preventing fraud.

  • Managing complaints.

  • Improving our services.

  • Defending legal claims.

We consider your rights and interests before relying on legitimate interests.

Consent

We may rely on your consent for activities such as optional marketing communications and non-essential website cookies.

You may withdraw your consent at any time. Withdrawal will not affect processing that was lawful before consent was withdrawn.

7. Mandatory guest registration

Spanish accommodation providers are required to collect and communicate certain information about their guests to the relevant authorities.

Guests may therefore be required to provide valid identification and complete an online or in-person registration process.

This requirement applies even when the reservation and payment were completed through Expedia.

Failure to provide legally required information may prevent us from providing access to the accommodation.

8. Who may receive your information?

Where necessary, personal information may be shared with:

  • Expedia and Expedia Group services.

  • Property-management and channel-management providers.

  • Guest-registration and online check-in providers.

  • Payment processors and financial institutions.

  • Website, hosting, email and technology providers.

  • Cleaning, maintenance and guest-service providers.

  • Accountants, tax advisers, insurers and legal advisers.

  • Fraud-prevention and security providers.

  • Police, security authorities, courts, tax authorities and other public bodies where required by law.

We only share information that is reasonably necessary for the relevant purpose.

Providers processing information on our behalf must comply with appropriate contractual, confidentiality and security obligations.

9. International data transfers

Some providers, including Expedia or technology providers, may process information outside the European Economic Area.

Where legally required, appropriate safeguards will be used, such as:

  • A European Commission adequacy decision.

  • Standard contractual clauses.

  • Another legally approved transfer mechanism.

You should consult Expedia’s own Privacy Policy for information about Expedia’s international transfers.

10. How long do we retain information?

We retain personal information only for as long as reasonably necessary to:

  • Manage the reservation and stay.

  • Meet guest-registration requirements.

  • Comply with accounting and tax obligations.

  • Resolve complaints and disputes.

  • Prevent fraud.

  • Protect our legal rights.

Different categories of information may be subject to different legal retention periods.

Information used only for marketing will be retained until you unsubscribe, withdraw consent or object to its use, unless another lawful reason requires us to retain it.

11. Marketing communications

Making a booking through Expedia does not automatically mean that you have consented to receive marketing communications from ALMARA Suites.

We will only send promotional emails or messages where:

  • You have provided valid consent; or

  • The communication is otherwise permitted by applicable law.

You may unsubscribe at any time by selecting the unsubscribe option in a message or contacting us at [PRIVACY EMAIL ADDRESS].

You may still receive essential communications relating to an existing reservation.

12. Cookies

Our website may use cookies and similar technologies.

Essential cookies

These cookies are necessary for website security, navigation and basic functionality. They may be used without optional consent where legally permitted.

Analytics and preference cookies

These cookies help us understand how visitors use the website and remember selected preferences.

Marketing cookies

These cookies may be used to measure advertising performance or provide relevant advertising.

Non-essential cookies will only be activated after you provide consent through our cookie banner, where required.

You may accept, reject or manage non-essential cookies through the cookie settings available on our website.

More information should be available in our separate Cookie Policy.

13. External websites and booking links

Our website may contain links to Expedia, Google Maps, social-media platforms, payment providers or other external websites.

These organisations are responsible for their own collection and use of personal information. Their activities are governed by their respective privacy policies.

ALMARA Suites is not responsible for the privacy practices or content of independent third-party websites.

14. Children’s information

We may process information about children when they are included in a family reservation or where their information is required for guest registration.

The adult making the reservation must have authority to provide personal information relating to accompanying minors.

We do not knowingly use children’s information for direct marketing.

15. Security

We use reasonable technical and organisational measures intended to protect personal information against:

  • Unauthorised access.

  • Accidental loss.

  • Improper disclosure.

  • Alteration.

  • Misuse.

  • Destruction.

Access is limited to people and service providers who reasonably require the information to perform their responsibilities.

No electronic system can be guaranteed to be completely secure. However, we regularly review the measures appropriate to the type of information we process.

16. Your data-protection rights

Subject to applicable law, you may have the right to:

  • Request access to your personal information.

  • Correct inaccurate or incomplete information.

  • Request deletion of your information.

  • Restrict how your information is processed.

  • Object to certain processing.

  • Withdraw your consent.

  • Receive certain information in a portable format.

  • Submit a complaint to a data-protection authority.

A request concerning information controlled by Expedia, such as your Expedia account or payment information, should normally be sent directly to Expedia.

17. How to exercise your rights

To exercise a right concerning information controlled by ALMARA Suites, contact:

Email: almara.suites@outlook.com
Postal address: Calle Poeta Paredes, No. 41, Córdoba, Spain Please explain the request and provide enough information for us to identify the relevant reservation or communication.

We may request additional information to verify your identity before responding.

You also have the right to submit a complaint to the Agencia Española de Protección de Datos — AEPD.

18. Automated decision-making

ALMARA Suites does not normally make decisions that produce legal or similarly significant effects based solely on automated processing.

Expedia and other third-party platforms may use automated systems under their own policies.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our services, providers, website or legal obligations change.

The latest version will be published on this website with its revision date.

20. Contact us

For privacy questions or requests, contact:

ALMARA Suites
Legal operator: Almara Hospitality
Email: almara.suites@outlook.com
Telephone: +44 7849 986275
Address: Calle Poeta Paredes, No. 41, Córdoba, Spain