Privacy Policy

At HUERTA SANTA ZITA, S.L.U. (hereinafter, “Casa Vesta” or “the Data Controller” ) we respect your privacy and are committed to protecting your personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and other applicable regulations.

1. Data Controller

Data Controller: HUERTA SANTA ZITA, S.L.U.

Tax ID Number (CIF): B-21369889

Registered Office: C/ Porvenir, 7, 41013 Seville (Spain)

Email: recepcion@casa-vesta.com

Website: www.casa-vesta.com

2. What Personal Data We Process

We may process the following categories of personal data:

Identifying information (first and last names).
Contact information (email, phone number, and mailing address when necessary).
Reservation details (dates of stay, number of guests, room type, preferences, and requests).
Billing data.
Payment data (processed through payment gateways or financial institutions; Casa Vesta does not store full credit card details except when absolutely necessary for managing the reservation and in accordance with applicable regulations).
Communications with the establishment.
Browsing and website usage data, in accordance with the Cookie Policy.

3. Purposes of Data Processing

Your data may be processed for the following purposes:

To manage requests for information submitted via the website, email, or phone.
To manage reservations and provide the contracted services.
To confirm, modify, or cancel reservations.
To manage payments and billing.
To address inquiries, issues, or complaints.
To comply with legal obligations applicable to the hotel and tourism establishment.
Send marketing communications regarding promotions, offers, or similar services, provided there is a legal basis for doing so or consent has been obtained when necessary.
Improve the quality of our services and the user experience on the website.
Ensure the security of the website and prevent fraud.

4. Legal Basis for Processing

The processing of personal data is based on one of the following legal bases:

The performance of a contract or the implementation of pre-contractual measures requested by the data subject.
Compliance with legal obligations applicable to the Data Controller.
Casa Vesta’s legitimate interest in improving its services, ensuring website security, or managing its relationship with its customers.
The data subject’s consent when required, particularly for sending commercial communications not covered by another legal basis.

When processing is based on consent, such consent may be withdrawn at any time without affecting the lawfulness of the processing carried out prior to the withdrawal.

5. Data Retention

Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected.

They will subsequently remain blocked for the periods required by current legislation to address potential legal liabilities, and once those periods have elapsed, they will be securely deleted.

Data used for commercial communications will be retained as long as the data subject does not request its deletion or withdraw their consent, when consent serves as the legal basis for processing.

6. Recipients of the Data

In general, the data will not be disclosed to third parties, except where required by law or when necessary for the provision of the service.

The following may have access to the data:

Financial institutions for the management of collections and payments.
Technology providers offering web hosting, maintenance, email, reservations, or IT support services.
Government agencies and law enforcement authorities when there is a legal obligation to do so.
Other data processors acting in accordance with Casa Vesta’s instructions and in compliance with the safeguards required by the GDPR.

In the event of international data transfers, these will be carried out only when the appropriate safeguards provided for in the GDPR are in place.

7. Rights of Data Subjects

Every individual has the right to:

Access their personal data.
Request the rectification of inaccurate data.
Request the erasure of their data when applicable.
Request the restriction of processing.
Object to the processing of their data.
Request data portability when legally applicable.
Withdraw consent at any time when processing is based on consent.

To exercise these rights, you may submit a request to:

HUERTA SANTA ZITA, S.L.U.

C/ Porvenir, 7

41013 Sevilla (Spain)

Email: recepcion@casa-vesta.com

The request must sufficiently identify the requester and specify the right the requester wishes to exercise.

Furthermore, if you believe that the processing of your data does not comply with current regulations, you may file a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

8. Commercial Communications

Casa Vesta may send commercial information related to its services via electronic means when there is a prior contractual relationship and the services are similar to those contracted, or when the data subject has expressly given their consent.

You may opt out of receiving these communications at any time by clicking the link provided in the emails or by writing to recepcion@casa-vesta.com.

9. Information Security

Casa Vesta implements appropriate technical and organizational measures to ensure a level of security commensurate with the risk, preventing the loss, alteration, unauthorized access, or unlawful processing of personal data.

However, users should be aware that security measures on the Internet are not completely foolproof.

10. Minors

The services offered by Casa Vesta are not intended for minors under the age of 14. If a minor provides personal data without the authorization of their parents or guardians when such authorization is required, Casa Vesta may proceed to delete such data.

11. Cookies

The website uses first-party and third-party cookies to ensure proper functioning, analyze browsing behavior, and, where applicable, personalize content and display advertisements.

You can find detailed information about their use, configuration, and how to revoke your consent in the corresponding Cookie Policy.

12. Changes to the Privacy Policy

Casa Vesta may modify this Privacy Policy when necessary to adapt it to changes in legislation, case law, or the website’s operation.