Privacy policy

This policy explains what personal data we process when you visit hospediasuite.com or email us, and what your rights are. Here, "we" means Aecetia Soluciones Administrativas SL, the company that develops Hospedia Suite.

Who is responsible for your data

• Aecetia Soluciones Administrativas SL
• Tax ID (NIF): B57616013
• Address: Calle Reina María Cristina, 39, 1.º 1.ª, 07004 Palma, Illes Balears, Spain
• Email for anything about your data: [email protected]

What data we process and why

If you email us

There are no forms on this site. To contact us you email [email protected] or another @hospediasuite.com address. We process what you send us (your name, your email address, your company or hotel, and whatever you tell us) to reply to you and, if you're interested, to continue the conversation and prepare a proposal or contract with your company.

The legal basis depends on who you're writing for:

• If you write on behalf of a company or hotel (the usual case), it's our legitimate interest in dealing with that company and keeping in touch with it (Article 6(1)(f) of the General Data Protection Regulation, GDPR). Spanish law presumes this interest when we use only your work contact details (Article 19 of Spain's data protection act, the LOPDGDD).
• If you write for yourself and the contract would be with you (for example, you're self-employed), it's taking the steps you ask for before that contract (Article 6(1)(b) GDPR).

We won't use your address to send you marketing you haven't asked for.

You only need to give us the details you want to, but without an email address we can't reply.

Visitor statistics

We use Cloudflare Web Analytics to see how many visits the site gets and which pages are read. It records the page visited, the page you came from, your browser, operating system, device type and country, and how long the page took to load. We only see aggregated figures. The tool uses no cookies and stores nothing on your device; we've checked. Cloudflare states that it doesn't track people from one website to another.

We do this because of our legitimate interest in knowing how the site is used so we can improve it (Article 6(1)(f) GDPR).

Running and securing the site

To show you the pages, the company that hosts the site processes your IP address (the number that identifies your internet connection) and the technical details of each request: your browser, the page requested, and the date and time. It also uses them to protect the site against attacks and abuse.

We do this because of our legitimate interest in the site working and being secure (Article 6(1)(f) GDPR).

If you'd like to know how we weighed our interests against your rights, ask us at [email protected].

We don't make automated decisions about you or build profiles from your data.

Cookies

This site uses no analytics, advertising or tracking cookies. It doesn't remember the language you choose, it serves fonts from our own domain, and it doesn't embed videos, maps or other third-party content.

We store nothing in your browser, so you won't see a cookie banner.

Who we share your data with

We don't sell your data. We only disclose it to others if the law requires us to (for example, to a court or the tax authorities). These providers also process it on our behalf, under contracts that forbid them from using it for anything else:

• Microsoft, our email provider (Microsoft 365).
• Cloudflare, for visitor statistics and for hosting and securing the site.

Transfers outside the European Economic Area

Microsoft stores and processes email in the European Union and the European Free Trade Association (EFTA). It transfers it outside only in limited cases, such as when its support or security staff access it from the United States. Cloudflare processes visit data across its global network, which includes the United States.

For these transfers to the United States:

• The European Commission has decided that the United States provides an adequate level of protection for companies that have joined the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795). Microsoft and Cloudflare have joined; you can check on the official list.
• Both also use the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914): Microsoft for all its transfers, and Cloudflare if its Framework certification stops applying. You can read them on the European Commission's website or ask us for a copy at [email protected].

How long we keep your data

Emails

as long as we need to deal with your request. If no business relationship follows, we delete them 12 months after our last contact. If one does, we keep them for as long as it lasts and then for six more years, as Spain's Commercial Code requires for business correspondence (Article 30). During that time they are blocked: we would only use them to respond to courts or authorities (Article 32 LOPDGDD).

Visitor statistics

Cloudflare keeps the full data for 7 days and after that only aggregated data, which can't identify you.

Hosting technical data

Cloudflare keeps them for a short, limited period, as long as needed to serve the site and protect it, under its data processing agreement.

Your rights

You can ask us at any time to:

• tell you what data we hold about you and give you a copy;
• correct it;
• delete it;
• restrict how we use it;
• give it to you in a format you can take to another provider.

Some rights have limits: portability only applies to data we process to prepare a contract with you, and we won't delete what the law requires us to keep.

Email [email protected] and tell us what you need. If we can't be sure who you are, we'll ask you to prove it. We'll reply within one month.

Your right to object

We use your data on the basis of our legitimate interests: to deal with your company, for visitor statistics and to keep the site secure. You can object at any time, on grounds relating to your situation. Email [email protected] and we will stop, unless we have compelling legitimate grounds that override your interests or need the data to establish, exercise or defend legal claims.

Where to complain

If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the data protection authority in the EU country where you live, work or think the problem happened.

Changes to this policy

If we change this policy, we'll publish the new version here with its date. If a change affects how we handle the data of people who have already emailed us (for example, a new use or a new transfer), we'll tell them by email before it takes effect.

Languages

This policy is published in Spanish and English. If the two versions differ, the Spanish version prevails.