Controller
Hotel Dato S.C., tax number J01437573. Eduardo Dato 28, 01005 Vitoria-Gasteiz (Araba). Telephone: 945 147 230. Email: info@hoteldato.com. This policy explains the data processed when you browse this website, contact the hotel and use its embedded services.
Data, purposes and legal grounds
When you contact us by email or telephone, we use the contact details and information you provide to answer your request. For enquiries about our services, the legal ground is taking steps before entering a contract or performing the contract.
Identification, contact and stay details received to manage bookings are used to provide the service and meet applicable legal duties. Booking data is collected in the external engine’s environment, where the relevant information is displayed.
Technical connection data, such as IP address, access date and browser, allows us to deliver the website and support its security and operation. The legal ground is our legitimate interest in maintaining a secure, working site.
Google Maps and the embedded engine load on our website only when you allow the external content category. This choice allows their providers’ resources, including security and technical measurement. Withdraw it through Cookie settings. This website has no contact form and no analytics added to its own theme.
Providers and recipients
Infrastructure and email providers, such as Aruba, and the SiteMinder booking engine help deliver these services. Enabling external content connects to Google Maps or SiteMinder and their associated resources, described in the Cookie policy.
Bookings and their conditions are managed in the provider’s environment. Read SiteMinder’s privacy information and Google’s. These references do not replace the hotel’s responsibility for its own processing. Data will be disclosed to authorities or other recipients when required by law.
Retention and international services
We retain data for as long as necessary to answer the request, manage the service and meet applicable legal retention periods or liabilities. It is then deleted or restricted where required. Browser preferences and technologies have the lifetimes stated in the Cookie policy.
External content providers may process data outside the European Economic Area. SiteMinder publicly describes safeguards such as standard contractual clauses. Their policies explain the conditions and how to request information; you may also contact the hotel for information about processing for which it is responsible. We do not assume that all data remains in the European Union.
Your rights
Where applicable, you may request access, rectification, erasure, objection, restriction and portability by writing to the controller’s email or postal address. Consent may be withdrawn without affecting earlier lawful processing. You may complain to the Spanish Data Protection Agency.
We request additional identification only where there are reasonable doubts; a copy of an identity document is not routinely required. Providing necessary data allows us to answer or manage the service; without it this may not be possible. You do not need to accept external content to read hotel information or use the contact options.