This Privacy Policy describes how AIXPE LANDETXEA S.L. processes personal data in connection with the management of its website and the provision of tourist accommodation services. Access to and use of the website, as well as the making of bookings, imply acceptance of this policy, which may be updated to reflect changes in legislation or developments in the services offered.

1. Data Controller The data controller is AIXPE LANDETXEA S.L., with its registered office in Mallabia (Bizkaia) and the corresponding tax identification number. For any queries regarding data protection, the user may contact the email address provided for this purpose or the establishment’s registered office.

2. Personal data processed The personal data that may be collected includes identification and contact details, data necessary for managing bookings, payment details, accommodation preferences and any information voluntarily provided by the user via the website forms or during their stay. Furthermore, data derived from the use of the website may be processed, such as IP addresses, device identifiers or technical information necessary to ensure its proper functioning.

3. Purposes of processing Personal data will be processed for the following purposes: to manage bookings and the contractual relationship with the guest; to respond to enquiries and requests; to comply with legal obligations applicable to the tourism sector, including the disclosure of data to the competent authorities; to improve service quality and the user experience; and, where express consent has been given, to send information regarding the establishment.

4. Legal basis for processing The processing of data is based on the performance of an accommodation contract or on the implementation of pre-contractual measures requested by the user. Certain processing operations are based on compliance with legal obligations, particularly those arising from tourism and public safety regulations. The sending of marketing communications will only take place with the express consent of the data subject, which may be withdrawn at any time.

5. Data retention Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected and, subsequently, for the periods required by applicable regulations. Data relating to legal obligations will be retained for the periods established by current legislation.

6. Disclosure of data to third parties Data may be disclosed to suppliers providing services necessary for the management of the accommodation, always under contracts that guarantee confidentiality and compliance with the GDPR. Furthermore, data may be disclosed to the relevant public authorities where required by law. Under no circumstances will data be disclosed to third parties for commercial purposes.

7. International data transfers As a general rule, no international data transfers will be made. Should any service involve the use of suppliers located outside the European Economic Area, compliance with the appropriate safeguards provided for by data protection regulations will be ensured.

8. Users’ rights Users may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability by sending a request to the data controller’s email address or registered office. They may also lodge a complaint with the Spanish Data Protection Agency if they consider that the processing of their data does not comply with current regulations.

9. Data security AIXPE LANDETXEA takes the necessary technical and organisational measures to ensure the security, integrity and confidentiality of personal data, preventing its loss, alteration or unauthorised access. However, users should be aware that no system is completely invulnerable and that browsing the internet involves certain inherent risks.

10. Links to third parties The website may contain links to third-party websites. AIXPE LANDETXEA accepts no responsibility for the privacy policies or the content of such sites; users are therefore advised to review their terms and conditions before providing any personal data.

11. Changes to the policy AIXPE LANDETXEA may amend this Privacy Statement to adapt it to regulatory changes or the development of its services. Any amendments will be published on the website and will come into effect from the date of update.