Polityka prywatności

This policy clearly explains what personal data BOUTIQUE HOTEL ORIOLA collects and uses, why it needs it, how long it keeps it and what rights you have.

 

Last updated: 28 July 2026

 

1. Who is responsible for your personal data?

The data controller responsible for processing your personal data is:

• Legal company name: ANTONIO MAURA 38, S.L.
• Trading name: BOUTIQUE HOTEL ORIOLA
• Tax identification number: B16555575
• Registered address: Calle C / Joan XXIII, 104, 07470, Pollença, Illes Balears, Spain
• General contact email: reservations@boutiquehoteloriola.com
• Telephone: +34 871 25 29 25

In this policy, we refer to the organisation responsible for processing your data as “BOUTIQUE HOTEL ORIOLA”, “we”, “us” or “our”.

 

2. What personal data may we use?

The personal data we use depends on how you interact with us.

We may process the following categories of data:

• Identification details: first name, surname, signature, nationality, date of birth, and identity document or passport details.
• Contact details: postal address, email address and telephone number.
• Booking details: arrival and departure dates, room type, number of guests, accompanying guests, services booked, preferences and requests related to your stay.
• Billing details: billing address, tax identification number and any other information required to issue an invoice.
• Payment details: payment amount, payment method and confirmation of the transaction. When payment is managed by an external payment gateway, BOUTIQUE HOTEL ORIOLA will not retain your full card details unless expressly stated otherwise and supported by a valid legal basis.
• Guest registration details: information required under the regulations applicable to accommodation providers.
• Communication details: enquiries, requests, complaints and other communications with the hotel.
• Marketing details: newsletter subscription, membership of CLUB MÁS, marketing preferences and responses to our communications.
• Technical data: IP address, browser, device, access logs and cookie preferences.
• Information about specific requirements: details concerning allergies, mobility, disabilities or other needs that you voluntarily provide so that we can prepare for or adapt your stay.

We will only request the information needed for each purpose.

Please do not provide sensitive information that is not necessary. If you need to tell us about an allergy, disability or another matter relevant to your stay, we will use this information solely to respond to your request and provide the appropriate service.

 

3. How do we obtain your personal data?

We may receive your personal data:

• Directly from you when you complete a form, make a booking, contact the hotel, check in or book a service.
• From someone who makes a booking on your behalf or includes you as an accompanying guest.
• From travel agencies, tour operators, partner companies and platforms through which you have made or managed your booking.
• Through the booking engine on our website, managed by Mirai España, S.L.
• From payment providers or financial institutions in connection with the confirmation of a transaction.
• Through analytics and advertising tools when you have consented to the relevant cookies. These tools may collect information about your device, browsing activity and interaction with the website.

If you provide another person’s details, you must ensure that they have been informed about this policy and that you are authorised to share their personal data with us.

 

4. What do we use your personal data for?

4.1. Responding to enquiries and requests

We use the information you provide through forms, email, telephone or other channels to:

• respond to your enquiries;
• provide information about the hotel;
• prepare a quotation;
• respond to requests concerning a potential booking;
• handle comments, incidents or complaints.

We process this information to take the steps you request before entering into a contract. For general enquiries, we may rely on our legitimate interest in responding and providing an appropriate service.

If you do not provide the information marked as required, we may be unable to respond to your request.

4.2. Managing bookings and stays

We use your personal data to:

• check availability;
• process and confirm your booking;
• manage amendments or cancellations;
• collect payment for the services booked;
• prepare for your arrival;
• manage check-in and check-out;
• provide the services included in your booking;
• handle special requests;
• communicate with you before, during and after your stay;
• resolve issues related to your booking.

We process this information to perform the accommodation contract or take steps you have requested before entering into the contract.

The information required to manage your booking is mandatory. If you do not provide it, we will be unable to provide the services you have booked.

4.3. Complying with guest registration requirements

BOUTIQUE HOTEL ORIOLA is required to collect, record and report certain guest information to the relevant authorities under the regulations applicable to accommodation providers.

We process this information to comply with our legal obligations.

We will not use this information for marketing unless we have a separate valid legal basis for doing so.

4.4. Managing payments and invoicing

We use the necessary information to:

• manage payments, deposits, refunds and authorised charges;
• issue invoices;
• manage any outstanding payments;
• comply with our tax, accounting and commercial obligations.

We process this information to perform the contract and comply with the applicable legal obligations.

When a payment is processed by an external provider, that provider will process the information needed to authorise and manage the transaction.

4.5. Sending communications related to your stay

We may use your telephone number or email address to send you necessary information about:

• your booking confirmation;
• changes or issues;
• arrival instructions;
• online check-in;
• services you have booked;
• important information during your stay;
• lost property;
• requests you have made.

These communications are necessary to manage your booking and stay. They are not marketing communications.

4.6. Sending newsletters, offers and promotions

If you subscribe to our newsletter or join CLUB MÁS, we will use your name and email address to send you:

• hotel news;
• offers and promotions;
• discounts;
• information about our services;
• benefits associated with CLUB MÁS.

We will send you these communications with your consent.

Subscription is voluntary. You can withdraw your consent at any time by using the unsubscribe link included in every message or by emailing marketing@boutiquehoteloriola.com

Withdrawing your consent does not affect the lawfulness of any messages sent before it was withdrawn.

Where we have an existing contractual relationship with you, we may send you communications about our own services that are similar to those you have previously booked, where permitted by law. You can always opt out easily and free of charge.

4.7. Analysing and improving our website

If you give your consent, we will use analytics tools to understand, for example:

• how many people visit our website;
• which sections receive the most visits;
• how visitors navigate the website;
• what technical errors occur;
• how we can improve the user experience.

We use the following tool:

• Google Analytics

We will only use this tool with your consent. You can accept, reject or change your preferences through the cookie settings panel.

4.8. Measuring campaigns and showing personalised advertising

If you give your consent, we may use advertising tools to measure the performance of our advertisements or show you advertising related to our services.

We may use:

• Meta Pixel
• Google Ads

We will only use these tools with your consent.

Advertising cookies will not be installed if you reject them. You can change your choice at any time through the “Cookie settings” tab in the bottom-left corner of the screen.

4.9. Preventing fraud and protecting our systems

We may use certain information to detect fraudulent transactions, unauthorised access, misuse of our services or threats to the security of our website and systems.

We process this information because we have a legitimate interest in protecting our business, systems and customers.

 

5. How long do we keep your personal data?

We do not keep personal data indefinitely. The retention period depends on the purpose for which it was collected:

• Enquiries that do not result in a booking: for as long as necessary to respond to the enquiry and subsequently for as long as any related liabilities may arise.
• Bookings and provision of services: for the duration of the contractual relationship and subsequently for as long as necessary to deal with any potential liabilities.
• Invoices and accounting records: for the periods required under tax, accounting and commercial law.
• Guest registration records: for three years from the end of the accommodation service.
• Newsletters and marketing communications: until you withdraw your consent or unsubscribe.
• Details of people who have unsubscribed: we may retain the minimum information necessary to record that they do not wish to receive further communications.
• Cookies: for the periods stated in our Cookie Policy.
• Data protection rights requests: for as long as necessary to respond to the request and demonstrate that it was handled correctly.
• Complaints or legal proceedings: for as long as necessary to establish, exercise or defend legal claims.

When personal data is no longer needed, it will be deleted or securely restricted for the applicable statutory periods. While restricted, it will not be used for any other purpose.

 

6. Who may we share your personal data with?

BOUTIQUE HOTEL ORIOLA does not sell your personal data.

Where necessary, we may share it with:

• law enforcement agencies;
• public authorities and government bodies;
• the Spanish Tax Agency and other competent authorities;
• courts and tribunals;
• banks, financial institutions and payment service providers;
• insurance companies;
• legal, tax and accounting advisers and auditors;
• other organisations where disclosure is required by law, necessary to provide the service or based on your consent.

7. Service providers that may access your personal data

We use external service providers to operate the hotel and deliver our services. These providers may access personal data on our behalf and in accordance with our instructions.

We may use providers of:

• website hosting;
• email services;
• IT maintenance;
• booking engine services;
• property management systems or PMS;
• online check-in;
• payment processing;
• customer relationship management;
• email marketing;
• data storage and backups;
• website analytics;
• digital advertising;
• customer support;
• accounting services;
• professional services.

Our main service providers include:

• Website hosting: DREAMHOST, United States
• Booking engine: MIRAI España S.L, Spain
• PMS: FNS ROOMS, Spain
• Channel Manager: Siteminder, United Kingdom
• Payment gateway: Redsys, Spain
• Email marketing: GETRESPONSE, Poland
• Website analytics: Google Analytics, Ireland
• Digital advertising: Google Ads, Ireland
• Digital advertising: Meta Pixel, Ireland

These providers may only use personal data to deliver the contracted services and must apply appropriate security and confidentiality measures.

Using a service provider does not necessarily mean that BOUTIQUE HOTEL ORIOLA shares all its customer information with that provider. Each provider may access only the data needed to deliver its service.

 

8. International data transfers

Some of our service providers may process personal data outside the European Economic Area. In such cases, BOUTIQUE HOTEL ORIOLA will ensure that the data is protected by the safeguards required under European data protection law.

 

9. Bookings made through platforms or travel agencies

If you book through a travel agency, tour operator, partner company or platform such as Booking.com or Expedia, we will receive the information needed to manage your booking and stay.

The relevant platform or agency will have its own privacy policy and may act as an independent data controller when processing your personal data for its own purposes.

To find out how a particular platform uses your personal data, please read its privacy policy.

 

10. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies that are necessary for the operation and security of the website may be used without your consent where permitted by law.

Analytics, personalisation and advertising cookies will only be used after you have given your consent.

When you visit our website, you can:

• accept cookies;
• reject cookies;
• manage your preferences.

Accepting cookies is as easy as rejecting them. You can change your choice at any time through the “Cookie settings” tab in the bottom-left corner of the screen.

Please read our Cookie Policy for information about the tools we use, their purposes and how long the cookies are stored.

 

11. Third-party content and links

Our website may contain links to external websites or embedded content from services such as:

• YouTube
• Google Maps

These services may process personal data when you interact with their content. Where required, the content will remain blocked until you have given your consent.

External websites have their own privacy policies. BOUTIQUE HOTEL ORIOLA does not control how these websites process personal data for their own purposes.

 

12. Children’s personal data

Bookings must be made by individuals who have the legal capacity to enter into a contract.

In Spain, where processing is based solely on a child’s consent, parental or guardian authorisation is generally not required if the child is at least 14 years old. This does not mean that anyone under the age of 18 can book accommodation independently.

Where we need to process the personal data of children included in a booking, we will use it only to manage the stay, comply with our legal obligations and provide the requested services.

We will not use children’s personal data to send them marketing communications or attempt to collect unnecessary information about them.

 

13. What rights do you have?

You may exercise the following rights:

• Access: find out what personal data we hold about you and how we use it.
• Rectification: correct inaccurate or incomplete personal data.
• Erasure: ask us to delete your personal data when it is no longer needed or where another legal reason applies.
• Objection: ask us to stop using your personal data in certain circumstances.
• Restriction: ask us to temporarily restrict how we use your personal data.
• Data portability: receive certain personal data in a structured format or ask us to send it to another data controller, where applicable.
• Withdrawal of consent: withdraw consent you have previously given at any time.
• Automated decision-making: ask not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.

To exercise any of these rights, please contact: reservations@boutiquehoteloriola.com

Please include:

• your first name and surname;
• the right you wish to exercise;
• the information needed to locate your personal data;
• any additional details needed to process your request.

We may request additional information where necessary to verify your identity. You should not send a complete copy of your identity document unless it is essential. If a copy is required, you may conceal any information that is not relevant.

You also have the right to lodge a complaint with the competent data protection authority if you believe that your personal data has not been handled correctly.

 

14. Data security

BOUTIQUE HOTEL ORIOLA applies technical and organisational measures designed to protect personal data against:

• unauthorised access;
• loss or destruction;
• alteration;
• unauthorised disclosure;
• accidental or unlawful use.

Where appropriate, our website uses a secure protocol to encrypt communications. However, no system connected to the internet can guarantee absolute security.

We also require hotel staff and our service providers to maintain the confidentiality of personal data.

 

15. Changes to this policy

We may update this policy when there are changes to:

• our services;
• the tools we use;
• our data-processing activities;
• our service providers;
• applicable legislation.

The current version will always be available on this page. The date of the most recent update will appear at the beginning of the policy.

If a change significantly affects how we use your personal data, we will notify you through an appropriate channel.

 

16. Contact us

If you have any questions about this policy or how we use your personal data, please contact us:

• BOUTIQUE HOTEL ORIOLA
• Address: Carrer Torrent de Can Botana, 13, 07469 Cala Sant Vicenç, Illes Balears, Spain 
• Email: reservations@boutiquehoteloriola.com
• Phone number: +34 871 25 29 25