Privacy Policy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), please be informed that the data controller for the personal data collected through the website www.nuvihoteles.com and the chain's establishments is:

Nuvi Hoteles · Alicante, Spain Website: www.nuvihoteles.com Email: privacidad@nuvihoteles.com

Nuvi Hoteles may collect the following categories of personal data:

2.1 Data provided directly by the user

• Identification data: first and last name, ID or passport number, date of birth and nationality.
• Contact data: postal address, email address and telephone number.
• Booking and stay data: check-in and check-out dates, room type, number of guests, preferences and special requests.
• Payment data: credit or debit card information, cardholder and billing details. Payment data is processed through secure, PCI-DSS certified payment gateways and is not stored directly by Nuvi Hoteles.
• Communications: messages, emails or queries sent to us through any channel.

2.2 Automatically collected data

• Browsing data: IP address, browser type, operating system, pages visited, time spent and access origin.
• Cookies and similar technologies: as described in our Cookie Policy available at www.nuvihoteles.com.

2.3 Third-party data

When a booking is made through intermediary platforms (Booking.com, Airbnb, Expedia or other OTAs), Nuvi Hoteles may receive the data necessary to manage the stay. Users should review the privacy policy of the relevant platform.

Nuvi Hoteles processes personal data for the following purposes:

• Managing bookings and providing the accommodation service.
• Compliance with legal obligations arising from hotel and traveller registration regulations (Order INT/1922/2003 and applicable regional regulations of the Comunitat Valenciana).
• Payment processing, invoicing and security deposit management.
• Communication with the guest before, during and after the stay.
• Sending commercial communications and personalised offers, only when the user has given express consent.
• Preparing internal statistics and improving the services offered.
• Handling complaints and exercising or defending rights in the event of claims.
• Compliance with tax, accounting and legal obligations.

The processing of personal data is based on the following legal grounds:

• Performance of a contract: processing is necessary to manage the booking and provide the contracted accommodation service.
• Legal obligation: certain data must be processed and communicated to the competent authorities under current legislation on traveller registration and prevention of money laundering.
• Consent of the data subject: for sending commercial communications and using non-essential cookies. Consent may be revoked at any time without affecting the lawfulness of prior processing.
• Legitimate interest: for preparing internal statistics, improving services and defending against claims.

Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, in any case, for the periods legally established:

• Booking and stay data: minimum 5 years from the end of the stay, for accounting and tax obligations.
• Traveller registration data: 3 years, in accordance with current public security regulations.
• Commercial communications data: until the user revokes consent or requests deletion.
• Payment data: the time strictly necessary to complete the transaction and applicable legal retention periods.

Once the indicated periods have elapsed, the data will be securely deleted or anonymised.

6.1 Recipients

Nuvi Hoteles may disclose personal data to the following recipients:

• Public Authorities and State Security Forces: in cases provided for by current legislation (traveller registration, judicial requests, etc.).
• Banks and payment gateways: for the management of financial transactions.
• Technology service providers: hotel management systems (PMS), booking platforms and digital marketing tools, acting as data processors under contract and with appropriate guarantees.
• Online review and reputation platforms: only the necessary data and with the user's consent where required.

6.2 International transfers

If any technology service provider is located outside the European Economic Area (EEA), Nuvi Hoteles will ensure that such transfer is made with the appropriate guarantees required by the GDPR, such as standard contractual clauses approved by the European Commission or equivalent mechanisms.

Users may exercise the following rights recognised by the GDPR and the LOPDGDD at any time:

• Right of access: to know what personal data Nuvi Hoteles processes.
• Right to rectification: to request the correction of inaccurate or incomplete data.
• Right to erasure ('right to be forgotten'): to request the deletion of data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
• Right to object: to object to the processing of data for certain purposes, including direct marketing.
• Right to restriction of processing: to request the restriction of processing in certain circumstances.
• Right to data portability: to receive the data in a structured, commonly used and machine-readable format.
• Right not to be subject to automated decisions: including profiling with significant legal effects.

To exercise your rights, you may contact us at: Email: privacidad@nuvihoteles.com Website: www.nuvihoteles.com (contact form)

The request must be accompanied by a copy of the applicant's ID, passport or other valid identity document. Nuvi Hoteles will respond within a maximum of one month from receipt of the request, extendable by a further two months in cases of particular complexity.

If you believe that your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD) through its website at www.aepd.es.

Nuvi Hoteles applies the appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing, including data encryption, access control, security protocols in data transmissions and staff training in data protection.

However, due to the nature of the Internet, Nuvi Hoteles cannot guarantee the absolute security of electronic communications. The user accepts this inherent risk of using telematic means.

Nuvi Hoteles services are not intended for children under 14. Nuvi Hoteles does not knowingly collect personal data from minors without the consent of their parents or legal guardians. If data from a minor is found to have been collected without proper consent, it will be deleted immediately.

The website www.nuvihoteles.com uses first-party and third-party cookies for technical, analytical and personalisation purposes. Users can find detailed information about the cookies used, their purpose and how to manage them in the Cookie Policy available at www.nuvihoteles.com.

Nuvi Hoteles reserves the right to modify this Privacy Policy to adapt it to legislative, judicial or business practice changes. Any changes will be published on www.nuvihoteles.com indicating the date of the last update. Users are advised to review this policy periodically.

In the event of substantial changes affecting users' rights, Nuvi Hoteles will communicate proactively through the available channels.

This Privacy Policy is governed by current Spanish and European data protection legislation, in particular:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
• Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
• Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
• Law 7/1998 of 13 April on General Contracting Conditions.

For the resolution of any dispute arising from the interpretation or application of this policy, the parties submit to the Courts and Tribunals of Alicante, unless applicable law establishes another jurisdiction.