Privacy Policy

1. Data of the Responsible

In compliance with the provisions of the General Data Protection Regulation (EU) 2016/679 and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of digital rights (hereinafter “LOPDGDD”) , and Law 34/2002 of July 11, on Information Society Services and Electronic Commerce, and other applicable regulations, we inform you that the person responsible for the personal data processed on the Website  is :

  • Company name: AUREA QUETZAL, S.L (hereinafter The Company),
  • Address: Plaza de España, 6 – 5ºD – 28008 Madrid, Spain
  • N.I.F: B-12826087
  • Telephone: +34 915 411 039
  • Email:

At the Company we are committed to keeping the information you provide us in the strictest confidentiality, avoiding unauthorized access, manipulation of information, loss, destruction or theft of information.

To do this, we will apply the security measures established by the applicable regulations and all those that our resources and modern technology allow us. Please note that, in many cases, it is essential that you provide the information we request in order to enjoy the benefits of our website.

2. Object

This Privacy Policy is intended to inform you about how we process your Personal Data. If you do not agree with the terms contained in this Policy and do not accept them in your registration process, you will not be able to continue using and accessing the website. If you have any questions regarding the content, you can contact us at the email address indicated in the heading.

3. Scope of application

This Policy applies to all Users who use the services of our website, regardless of the place and time in which they operate.

4. Data we request from our Users

On the website we may request basic information or identifying data through our contact form, such as your full name, address, telephone number, leaving a space for you to send us your query, request, complaint or suggestion with free text. We may also process data obtained through cookies, which you can consult in more detail in our Cookies Policy.

5. Purpose and Legitimation of the treatment

PurposeLegitimizationRetention Period
To properly manage the website and ensure the security of our usersLegitimate interest (Art. 6.1.f GDPR)We will retain your data for the time necessary to fulfill the purposes for which it was collected, for any applicable legal periods, and for the time necessary to address any potential claims.
To verify the accuracy of your data in certain casesLegitimate interest (Art. 6.1.f GDPR)As long as there is a contractual relationship to manage the purchase of products or services
To facilitate navigation and tailor it to your preferences, based on the cookie policy.Legitimate interest and consent (Art. 6.1.f GDPR and Art. 6.1.a GDPR)Preference cookies will be maintained until you change your settings
To answer your queries, requests or petitions, through the contact form, as well as to manage the serviceConsent (Art. 6.1.a GDPR)For the time necessary to respond to your request or petition
To manage your reservations via the «BOOK APARTMENT» buttonConsent (Art. 6.1.a GDPR)For the time necessary to respond to your request
Marketing actions, based on your communication preferences, to notify you about events, news, and activities that may interest you, and newsletter subscriptions.Consent (Art. 6.1.a GDPR)Your data will be kept and processed for this purpose until you revoke the consent given.
For the management of reservations you have requested, for rooms or any other service provided by our entity, which includes providing information about them (confirmation, modification or cancellation, and billing of services) through electronic means, as it is necessary for the provision of the service you have requested and the contractual relationship that this implies.Execution of a contract (Art. 6.1.b GDPR)For the time necessary to manage the purchase of the products or services you have acquired.
Staff selection processes (sending CV)Consent (Art. 6.1.a GDPR)2 years
For the management of accounting and the guest entry logbook, to comply with our legal obligations in fiscal matters and hospitality, respectively.Compliance with legal obligations (Art. 6.1.c GDPR)We will retain your data for the time necessary to fulfill the purposes for which it was collected, for any applicable legal periods, and for the time necessary to address any potential claims.

6.Data Communication

No data will be transferred to a third party except for compliance with legal obligations or when necessary to defend claims. The personal data of guests, contained in the traveler’s entry form, may be communicated to security forces and bodies ( national police, civil guard, etc.) within 24 hours of entry. The record book will remain at the disposal of these organizations and must be displayed upon any request.

7. User Rights

The LOPDGDD and the RGPD collect a series of rights in favor of the people whose personal data are processed. You may exercise all of the rights mentioned below by sending your request by email as indicated in section 1, attaching a copy of your identity document. The maximum period to resolve is one month from receipt of your request. Please note that we may ask you for additional information to verify your identity before proceeding with your request.

a) Right of access:

The right of access allows the User to know and obtain free information about their personal data undergoing processing. You may ask us to tell you what information we hold about you.

b) Right to rectification:

This right is characterized because it allows you to correct errors, modify data that turns out to be inaccurate or incomplete and guarantee the certainty of the information being processed. You must inform us of any changes to your details and will be responsible for updating your information.

c) Right of deletion:

The right of deletion allows data that turns out to be inadequate or excessive to be deleted without prejudice to the duty to block, included in the LOPDGDD.

d) Right of opposition:

The right to object is the User’s right not to have their personal data processed or to cease processing for certain purposes. You may object to the processing of your data by indicating the specific purposes object of the opposition.

e) Right of Portability:

The right to portability will allow you to request a copy from us in a structured, commonly used and machine-readable format of your personal data.

f) Right to Limit Treatment:

When exercising this right, your data may only be processed, with the exception of its conservation, for the formulation, exercise or defense of claims.

g) Right to file a claim with the supervisory authority:

You may file a claim with the Spanish Data Protection Agency ( when you consider that the exercise of your rights has not been adequately addressed.

Likewise, you will have the right not to be subject to decisions based solely on the automated processing of your data, including profiling, that produces legal effects on you or significantly affects you in a similar way. The User will have the right to revoke their consent at any time.

Likewise, you can unsubscribe at any time regarding advertising shipments.

8. Security measures

When processing your personal information, we apply appropriate security measures according to the type of data and technical advances, our physical and legal means. Our goal is to prevent unauthorized third-party access, theft, loss or disclosure of your information. However, the Internet is not a totally secure environment, so even if we apply all possible security measures, the risk of incident regarding information will never completely disappear, for this reason we ask that if you detect any incident or have indications that Your information may be at risk, please contact us so we can investigate and offer solutions.

9. Modifications to the Privacy Policy

The Company may modify this Privacy Policy in the future. In case of modification, in addition to publishing the updated version, we will inform you about said modification with a window on the web. You must read these modifications before continuing to use the website.

10.Applicable law and jurisdiction

This Policy, as well as the use of the Website, will be governed by Spanish legislation. Any controversy will be resolved before the courts corresponding to the domicile of the Responsible Party.

In the event that any stipulation is found to be unenforceable or void under the applicable legislation or as a consequence of a judicial or administrative resolution, such unenforceability or nullity will not make this Policy unenforceable or void as a whole. In such cases, The Company will proceed to modify or replace said stipulation with another that is valid and enforceable and that, to the extent possible, achieves the objective and intention reflected in the original stipulation.