1. Data controller and contact
The controller responsible for the processing of data collected through this website is Hoteles Asequibles. For any question regarding your privacy, exercising your rights, or clarifying details about this policy, you can contact us at team@hotelesasequibles.es.
2. Data we process
Hoteles Asequibles operates under strict data minimization principles. We only process data in specific scenarios:
- Technical navigation data: IP address (anonymized/truncated), browser type, operating system, and standard security access logs processed automatically by our hosting and CDN infrastructure.
- Contact inquiries: If you send us an inquiry via our contact form or email, we process your email address, message subject, and content solely to respond to you.
- Aggregated analytics & telemetry: Aggregated interaction metrics (e.g. search clicks, destination views, outbound partner clicks) collected without identifying individual personal identities.
Important notice: Hoteles Asequibles does NOT store credit card numbers, payment details, or booking identification records. Booking transactions take place directly on third-party provider sites (e.g., Booking.com).
3. Purposes and legal basis
| Purpose | Data processed | Legal basis (GDPR) |
|---|---|---|
| Answering user contact inquiries | Email, subject, message | Consent and legitimate interest in providing customer support (Art. 6.1.a / 6.1.f RGPD) |
| Website security, stability and fraud prevention | Technical logs, anonymized IP | Legitimate interest in maintaining cyber security (Art. 6.1.f RGPD) |
| Aggregated statistical measurement | Aggregated telemetry, anonymous usage | Consent for analytical cookies where applicable / Legitimate interest (Art. 6.1.a / 6.1.f RGPD) |
4. Providers and recipients
To provide our service, we rely on established technological infrastructure providers under strict data protection compliance:
- Cloudflare Inc.: Global edge content delivery network (CDN), DDoS protection, and DNS management.
- Google Analytics (Google Ireland Ltd.): Aggregated web traffic measurement with IP anonymization enabled.
- Booking.com / Stay22: Affiliate booking platforms. When clicking outbound links to search accommodation, you are transferred to their official platform under their respective privacy policies.
5. Retention and international transfers
Contact inquiries are kept only for the duration necessary to answer and resolve your inquiry, plus any applicable legal limitation periods (maximum 12 months for general messages).
When providers located outside the European Economic Area (EEA) are used, appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission or Data Privacy Framework certifications are implemented.
6. Your rights
Under European GDPR regulations, you have the right to:
- Access your personal data and obtain information about how it is processed.
- Request rectification of inaccurate or incomplete data.
- Request erasure of your data when it is no longer necessary for the purposes for which it was collected.
- Object to processing or request restriction of processing.
- Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, send an email to team@hotelesasequibles.es with the subject "Data Protection Rights". You also have the right to lodge a complaint with the competent supervisory authority (in Spain, the Agencia Española de Protección de Datos - AEPD).
7. Security and minors
We apply technical and organizational security measures (including HTTPS encryption with TLS 1.3, DDoS protection, and secure server headers) to protect data against unauthorized access, alteration, or loss. Our website is not intended for children under 14 years of age.