Legal Notice and Privacy Policy

Home / Legal Notice and Privacy Policy

Legal notice

1. Website owner

In accordance with Article 10 of Spanish Law 34/2002 of 11 July on Information Society Services and E-commerce (LSSI-CE), we inform you that this website, losleones.info, is owned by:

Owner: Manuel Górriz Martín (Hotel Los Leones)
Tax ID (NIF): 18420630E
Address: Plaza Igual y Gil, 3, 44415 Rubielos de Mora (Teruel), Spain
Email: hotel@losleones.info
Phone: +34 978 804 477
Business activity: hotel accommodation and restaurant

2. Purpose and users

This legal notice governs access to and use of the website. By accessing or using it, you become a user and accept these terms. If you do not agree with them, please do not use the website.

3. Use of the website

Users agree to use the content and services of the website properly, in accordance with the law, good faith and public order, and not to use them to:

Carry out unlawful activities or activities contrary to good faith.
Spread racist, xenophobic or pornographic content, content that glorifies terrorism or content that violates human rights.
Damage the systems of the owner, its providers or third parties, or introduce viruses or other harmful software.
Provide false information, or the details of other people without their permission, when making an enquiry or a booking.

4. Bookings

Bookings made through this website are governed by our Booking Conditions, which you accept when you confirm your booking. All prices shown include VAT.

5. Intellectual and industrial property

The content of this website (texts, photographs, logos, design and code) belongs to the owner or is used with the permission of its authors, and is protected by intellectual and industrial property law. It may not be reproduced, distributed, publicly communicated or transformed without the owner’s express permission, except for personal and private use.

6. Liability and links

The owner makes every effort to keep the information on this website accurate and up to date, but cannot guarantee that it is free of errors or that the website will always be available, as it may be interrupted for maintenance or technical reasons. The owner is not liable for any damage resulting from improper use of the website.

Links to third-party websites are provided for information only. The owner has no control over those websites and is not responsible for their content, but will remove any link as soon as it becomes aware that its content is unlawful.

7. Changes

The owner may change the content of the website and this legal notice at any time. The terms that apply are those published at the time of each visit.

8. Applicable law and jurisdiction

This legal notice is governed by Spanish law. Where the user is a consumer, the courts of the user’s place of residence will have jurisdiction. In all other cases, the parties submit to the courts of Teruel (Spain). Official complaint forms are available to guests at the hotel.

Privacy policy

1. Data controller

In accordance with the EU General Data Protection Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the controller of your personal data is Manuel Górriz Martín (Hotel Los Leones), tax ID 18420630E, Plaza Igual y Gil, 3, 44415 Rubielos de Mora (Teruel), Spain, email hotel@losleones.info, phone +34 978 804 477. The controller is not required to appoint a Data Protection Officer.

2. What data we process, why, and on what legal basis

a) Enquiries (contact form, email or phone)

Data: name, email address, phone number and the content of your message.
Purpose: to answer your enquiry or request for information or a quote.
Legal basis: your consent (Art. 6.1.a GDPR) and steps taken at your request before entering into a contract (Art. 6.1.b GDPR).
Retention: for as long as needed to deal with your enquiry and for no more than one year afterwards, unless a booking is made.

b) Room and restaurant bookings

Data: first name and surname, email address, phone number, postal address (if provided), dates of stay, number of guests, special requests and billing details.
Purpose: to manage your booking, your stay, payment and invoicing, and to send you communications related to your booking.
Legal basis: performance of the accommodation contract (Art. 6.1.b GDPR) and compliance with legal tax and accounting obligations (Art. 6.1.c GDPR).
Payments: card payments are made through the bank’s secure payment gateway (Cecabank). The hotel never has access to your full card number.
Retention: for the duration of the contractual relationship and afterwards for the periods required by law: 4 years for tax purposes (Spanish General Tax Law 58/2003) and 6 years for accounting purposes (Article 30 of the Spanish Commercial Code).

c) Guest registration

Data: the information required by Spanish public safety legislation (including personal details and identity document details), collected on arrival at the hotel.
Purpose and legal basis: to comply with the legal obligation to register guests and report them to the Spanish Ministry of the Interior (Art. 6.1.c GDPR; Organic Law 4/2015 and Royal Decree 933/2021).
Retention: 3 years, as required by that legislation.

d) Website analytics

Only if you accept it in the cookie banner, we use Google Analytics to obtain aggregate statistics on how the website is used (Art. 6.1.a GDPR). You can withdraw your consent at any time from the cookie settings. Find out more in our Cookie Policy.

We do not create profiles or make automated decisions using your data, and we will not send you marketing communications without your prior consent.

3. Recipients

We do not share your data with third parties unless required by law (for example, with the Spanish police and security forces or the Spanish Tax Agency). To provide our services, we work with providers that process data on behalf of the hotel under a data processing agreement and with appropriate safeguards:

Web hosting and email: Webempresa Europa, S.L. (servers located in the European Union).
Payment gateway: Cecabank, S.A.
Website analytics, only with your consent: Google Ireland Limited.
Website technical maintenance: a digital services agency engaged by the hotel.

4. International transfers

Google may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

5. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before its withdrawal. To do so, write to hotel@losleones.info or to the postal address above, stating which right you wish to exercise. Where necessary, we will ask you to verify your identity.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).

6. Required data and accuracy

Fields marked with an asterisk are required; if you do not complete them, we will not be able to deal with your enquiry or booking. You confirm that the data you provide is accurate and that, if you include details of other guests, you have their permission to do so. This website is not intended for children under 14.

7. Security

We apply appropriate technical and organisational measures to protect your data against loss, alteration or unauthorised access, such as the website’s encrypted (HTTPS) connection.