Privacy Policy

Data controller

In accordance with the General Data Protection Regulation, Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, and other applicable legislation, users are hereby informed of this Privacy Policy.
Data controller: ALBIR EXPERIENCE S.L.
CIF: B75532143
Trade name: Albir Experience
Registered office: 26 C/ Sant Pere, 03590 Altea, Alicante, Spain
Contact email: info@albirexperience.com
Telephone: +34 644 10 08 65
Website: www.albirexperience.com
Registration details: Company registered with the Alicante Commercial Register, Electronic Folio, Page A-195779, entry 1.
Data Protection Officer: Albir Experience has not appointed a Data Protection Officer. For any queries relating to data protection, users may contact us at info@albirexperience.com.

Personal data that we may process

Albir Experience may process different categories of personal data depending on the user’s relationship with us:

  • Identifying details: first name, surname(s), National Identity Card number, Foreigner Identification Number, passport or other form of identification.
  • Contact details: email, telephone number, postal address.
  • Booking details: dates of stay, number of guests, type of accommodation, preferences, special requests, booking history and related correspondence.
  • Payment and billing details: information required to manage collections, payments, invoices, deposits or guarantees. Full card or payment details may be processed directly by the relevant payment gateway.
  • Information required for check-in and to comply with legal obligations: guest details required under the regulations governing tourist accommodation and the traveller registration scheme.
  • Communication data: messages sent via email, telephone, WhatsApp, web forms, social media or other channels.
  • Browsing data: IP address, online identifiers, cookie preferences, technical device data and website usage data, where applicable.
  • Data for marketing communications: name, email address, telephone number, language, preferences or consent given.
  • Candidate details: CV, professional experience, education, contact details and any information voluntarily included in an application, if the user is taking part in recruitment processes.

Purposes of processing and legal bases

Albir Experience will process personal data for the following purposes:

 

Handling enquiries and requests for information
We process the data provided by users via forms, email, telephone, WhatsApp, social media or other channels in order to respond to enquiries, requests for information, queries regarding availability, rates, accommodation, services or any other matter relating to Albir Experience.
Legal basis: the user’s consent and/or the implementation of pre-contractual measures requested by the data subject.

 

Booking management and provision of accommodation services
We process the data necessary to manage bookings, confirm availability, process payments, organise the stay, allocate accommodation, provide pre-arrival information, manage check-ins and check-outs, respond to requests during the stay and provide the contracted service.
Legal basis: performance of a contract or the implementation of pre-contractual measures.

 

Check-in, guest registration and legal obligations
We process guests’ personal details and accommodation details where necessary to comply with legal obligations applicable to tourist accommodation, including guest registration, reporting to the relevant authorities, invoicing and other administrative, tax or legal obligations.
Legal basis: compliance with legal obligations applicable to Albir Experience.

 

Payment, collection and invoicing management
We process the data necessary to manage online payments, collections, deposits, guarantees, invoices, proof of payment, refunds or financial claims relating to the booking.
Online payments may be made via Redsys or other authorised payment gateways. Albir Experience will not store full card details when the processing is carried out directly by the payment gateway.
Legal basis: performance of the contract, compliance with legal obligations and legitimate interest in financial management and fraud prevention.

 

Operational communications with guests
We process contact details to send necessary information regarding the booking, arrival instructions, check-in, access to the accommodation, house rules, timetables, services, incidents, reminders and communications relating to the stay.
These communications may be sent via email, telephone, SMS, WhatsApp Business or other equivalent channels.
Legal basis: performance of the contract and legitimate interest in ensuring the proper provision of the service and guest care.

 

Post-stay support, surveys, quality and incidents
We may process contact details and data relating to your stay in order to manage incidents, complaints, items left behind, satisfaction surveys, reviews, service improvements and to monitor the guest experience.
Legal basis: Albir Experience’s legitimate interest in improving its services and providing appropriate customer service, as well as the performance of a contract where the communication is directly linked to the booking.

 

Marketing communications and newsletters
Where the user expressly consents, Albir Experience may send marketing communications, promotions, offers, news, special campaigns or information relating to its accommodation and services.
The user may withdraw their consent at any time via the unsubscribe link included in the communications, where available, or by writing to info@albirexperience.com.
Legal basis: the user’s consent. In certain cases, where there is a pre-existing contractual relationship and the services are similar to those contracted, legitimate interest may apply in accordance with the relevant legislation, whilst always allowing the user to object or unsubscribe.

 

Web analytics, measurement and site improvement
We may process browsing data, website usage data, user preferences and online identifiers to analyse the website’s performance, measure visits, improve content, detect errors, optimise campaigns and enhance the user experience.
This processing will be carried out in accordance with the Cookies Policy and, where necessary, after obtaining the user’s consent.
Legal basis: user consent for cookies and non-technical technologies; legitimate interest for technical or strictly necessary cookies.

 

Advertising and remarketing
If the user consents via the cookie panel, third-party cookies or similar technologies, such as Google Ads, Meta Pixel or other advertising tools, may be used to measure campaigns, create audiences, display personalised adverts or analyse conversions.
Legal basis: the user’s consent.

 

Management of applications and recruitment processes
If a user submits their CV or takes part in recruitment processes, Albir Experience will process their data in order to assess their application, contact the candidate and manage the recruitment process.
Legal basis: the candidate’s consent and the implementation of pre-contractual measures.

 

Source of the data

Personal data may be provided directly by the user via web forms, online bookings, communications by email, telephone, WhatsApp, social media, booking platforms, online check-in, payment gateways or any other enabled channel.
Data may also be received via third parties when the user makes a booking through external platforms, agencies, accommodation portals, commercial partners or authorised intermediaries.

Recipients and data processors

Albir Experience may disclose personal data to third parties where necessary for the provision of the service, compliance with legal obligations or the management of its relationship with the user.

The data may be processed or disclosed to:

  • Webempresa, as a web hosting provider.
  • Orbook, as a booking engine.
  • Hotelgest, as a PMS or internal booking and accommodation management system.
  • YieldPlanet, as a channel manager for managing availability, rates and distribution across external channels.
  • Redsys, as a payment gateway for online payments.
  • Mailchimp, as an email marketing/newsletter tool, is used only when the user has consented to receiving marketing communications.
  • Web maintenance and technical support providers.
  • Banks and payment service providers.
  • Tax, accounting, employment or legal advice.
  • Providers of email, messaging, WhatsApp Business, CRM or customer service.
  • Web analytics and online advertising providers, provided the user accepts the relevant cookies.
  • External booking platforms, where the booking is made via them.
  • Social media, maps, advertising tools or external services, when the user interacts with them or accepts the relevant cookies.
  • Public authorities, law enforcement agencies or competent bodies where there is a legal obligation to do so.
  • Cleaning, maintenance, laundry or accommodation-related service providers, only where necessary to manage the service or deal with an incident.

International data transfers

Some of the technology providers used by Albir Experience may be based outside the European Economic Area or may process data from countries that do not offer an equivalent level of protection.
In the event of international data transfers, Albir Experience will ensure that these are carried out with adequate safeguards in accordance with the GDPR, such as adequacy decisions, standard contractual clauses approved by the European Commission or other legally established mechanisms.
Specific international transfers:

Retention periods

Personal data will be retained for as long as is necessary to fulfil the purpose for which it was collected and, thereafter, for the periods required by law or necessary to address any potential liabilities.
As a guide:
– Enquiries and requests for information: for as long as is necessary to deal with the request and, where appropriate, to follow up on it.
– Bookings and contractual details: for the duration of the contractual relationship and for the applicable statutory periods.
– Billing and accounting data: for the periods required by tax and company law.
– Guest registration details: for the periods required by the applicable tourism, administrative or security regulations.
– Marketing communications: until the user withdraws their consent or requests to be removed from the mailing list.
– Candidate data: during the selection process and, unless the candidate objects, for a maximum period of 24 months for future opportunities.
– Cookies: in accordance with the time limit set out in the Cookies Policy and in the settings panel.

Users’ rights

Users may exercise the following rights at any time:
– The right to access their personal data.
– The right to have inaccurate or incomplete data rectified.
– The right to have their data erased where applicable.
– The right to object to processing.
– The right to restrict processing.
– The right to data portability.
– The right to withdraw consent, without this affecting the lawfulness of processing carried out prior to withdrawal.
To exercise these rights, users may submit a request to:
Email: info@albirexperience.com
Postal address: C/ Sant Pere 26, 03590 Altea, Alicante, Spain
The request must specify the right the user wishes to exercise and include sufficient information to verify the applicant’s identity. Where there are reasonable doubts regarding identity, Albir Experience may request any additional information necessary to confirm it.

Right to lodge a complaint with the supervisory authority

If you believe that Albir Experience has not processed your personal data in accordance with the applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency.
Spanish Data Protection Agency website: www.aepd.es

Accuracy and timeliness of data

The user warrants that the personal data provided is true, accurate, complete and up to date, and undertakes to notify us of any changes.
Albir Experience shall not be liable for any loss or damage that may arise from false, inaccurate, incomplete or out-of-date data provided by the user.

Data on minors

Albir Experience may process data relating to minors where they are part of a family or group booking and this is necessary for the provision of accommodation, check-in, compliance with legal obligations or the management of the stay.
The person providing data relating to minors declares that they have parental authority, guardianship, legal representation or sufficient authorisation to provide such data.
Albir Experience will not use children’s data for unnecessary commercial purposes, nor will it process such data beyond what is required for the booking, the provision of the service or legal compliance.

Safety measures

Albir Experience implements reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
These measures will be reviewed and updated as necessary, taking into account the state of the art, the nature of the data processed, the existing risks and the applicable legal obligations.

Social media and external platforms

Albir Experience may have social media profiles and links to external platforms such as Instagram, Facebook, Google Maps, Booking, Airbnb or others.
When users interact with Albir Experience via these platforms, the privacy policies and terms of use of each platform will also apply. Albir Experience is not responsible for the processing carried out directly by these platforms in their capacity as independent data controllers.

Privacy Policy Update

Albir Experience may update this Privacy Policy whenever necessary due to legal, technical or organisational changes, or changes to the services offered.
The updated version will be available at www.albirexperience.com.