Privacy Policy


Hotel Canaleta Heras is the Responsible for the processing of the personal data of the Interested Party and informs them that this data will be treated in accordance with the provisions of current regulations on personal data protection, Regulation (EU) 2016/679 of April 27, 2016 (GDPR), for which the following treatment information is provided.

End of the treatment: we treat the data and information provided by the persons interested in this form in order to offer the services that you request and send you the commercial offers of the Hotel Canaleta Heras.

The contact data will be kept in the system until you revoke the authorization granted by accepting this policy in order to send you commercial information about us. The rest of the information will be kept during the statute of limitations for legal actions, which can be up to 10 years.

Communication of the data: the information will be recipients: the personnel of the person responsible for the treatment who are authorized by the management, the providers necessary to provide the services and the public administration in the field of their competences.

We use the segura platform to manage the sending of commercial emails, which involves an international transfer of data.

Profiling: In order to fulfill the objectives of the data controller and, above all, to provide more personalized, careful and effective attention to the user, it is sometimes necessary to create profiles of the recipients of the services. In no case the elaboration of the profile is done exclusively automated.

Legal basis of the treatment: The treatment of the data is legitimized by the contractual relationship that you have with us, compliance with the laws and the consent that you grant when you expressly accept this policy.

Rights: You can exercise the rights of access, rectification, deletion, opposition, limitation, portability, not to be subject to automated individual decisions and revocation.

Contact information to exercise your rights: Hotel Canaleta Heras, calleBalmanya, 24, 17753 Espolla (Spain)

The competent authority to hear the conflicts derived from the application of this policy is the Spanish Data Protection Authority with address at Calle Jorge Juan n. 6 from Madrid.


It is understood that the user accepts the established conditions if they press the 'ACCEPT' button found on all the data collection forms, or if they send a message by email to the contact addresses that appear on the web.

Personal data is stored in the general administration database of the data controller, which guarantees technical and organizational measures to preserve the integrity and security of the information it deals with.


The general database is equipped with the mandatory security document and has all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access or theft of the data you provide us. The processing of personal data is in accordance with the provisions of Organic Law 3/2018 on data protection and guarantee of digital rights and Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 .