DATA PROTECTION POLICY
Both data privacy and the confidentiality of information are important aspects for ECO HOSTAL GRAU, S.L. This data protection policy establishes how personal data obtained from its clients, contacts and suppliers are processed and may vary over time due to possible legislative or case-law changes or criteria followed by the Spanish Data Protection Agency. Therefore, the hotel reserves the right to modify this policy in order to adapt it to legislative or case-law developments in force at the precise moment of access to the website.
Last updated: 01/01/2026
1.- Who is responsible for processing your data?
ECO HOSTAL GRAU, S.L.
B66907643
Calle Ramelleres nº 27, 08001 Barcelona
E-mail: monica@hostalgrau.com
2.- For what purpose do we process your data, what is the legal basis and how long do we keep it?
The personal data collected by the hotel are necessary to provide the service, being adequate, relevant and not excessive, limited to what is necessary in relation to the purposes for which they are processed.
Please inform us of any changes or updates to keep your data accurate and up to date.
The hotel processes personal data for the following purposes:
1.- RESERVATION MANAGEMENT: We manage reservations and pre-stay relations.
Legal basis: Your consent given by accepting this data protection policy and/or the existence of a pre-contractual relationship based on a reservation request.
Retention period: Data will be deleted if the reservation is not formalized.
2.- CUSTOMER MANAGEMENT: We process customer data for:
- Check-in and registration for communication with competent authorities
- Management of contracted accommodation and services
- Sending related electronic communications
- Collection management and invoicing
Legal basis: Contractual relationship and legal obligation established in Royal Decree 933/2021 of 26 October.
Retention period: Data will be kept for the legally established periods under civil, accounting and tax law (5 years).
Accommodation registration data will be kept for 3 years.
3.- COMMERCIAL ACTIONS AND NEWSLETTERS: When prior consent has been obtained.
Legal basis: Consent given by ticking the corresponding box.
Retention period: Until you request deletion or unsubscribe.
4.- SUPPLIER AND PARTNER MANAGEMENT: Order, payment and contact management.
Legal basis: Contractual relationship.
Retention period: During the contractual relationship and subsequently for legally established periods.
5.- VIDEO SURVEILLANCE: Cameras installed for security reasons.
Legal basis: Public interest in ensuring safety of people, property and facilities.
Retention period: Maximum of one month.
3.- To whom will we disclose your data?
Data will be disclosed by legal obligation to law enforcement authorities (Law 4/2015).
They may also be disclosed to tax authorities, judges and courts when legally required.
No international data transfers are foreseen.
4.- What are your rights?
You have the right to access, rectify, erase, limit, object, port your data and file a complaint with the Spanish Data Protection Agency (AEPD).
To exercise these rights, contact: monica@hostalgrau.com
We will respond within a maximum of one month.
5.- Data security
Appropriate technical and organizational measures are applied to ensure an adequate level of security and prevent unauthorized access, loss or alteration of personal data.