Privacy policy
This policy explains what personal data is processed when you visit wabihotel.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on personal data protection and digital rights (LOPDGDD). This is a translation for information purposes; if there is any discrepancy, the Spanish version prevails.
Data controller
- Controller: Wabiwebs Diseño Web, S.L. (Wabi Hotel)
- Tax ID (NIF): B05840178
- Registered office: Calle Francisco Silvela, 110, 2.º, 28002 Madrid
- Data protection contact: privacidadwabiwebscom
What data we process
wabihotel.com has no user accounts, contact forms or newsletters, and we do not ask you for personal data. The only data processed when you browse the website is:
- Technical connection data: IP address, browser, requested page, date and time. It is logged automatically by the server that hosts the website, to serve the pages, keep it secure and fix errors. It is kept for only a few days and we do not use it to identify you or to build profiles.
- What you type in the search box (a destination or a hotel) and the dates and guests you choose. It is used only to show you results and take you to the booking platform, and is not linked to your identity.
- The currency you choose, stored in your browser (see the cookie policy).
- Usage data, only if you accept analytics cookies: pages you visit, buttons you click, device and browser type and approximate country, measured with Google Analytics through Google Tag Manager. It is statistical and we do not use it to identify you or for advertising.
If you email us, we will process your address and what you tell us in order to reply, and keep it for as long as needed to deal with your query and any resulting liabilities.
Purposes and legal basis
- Serving the website, keeping it secure and fixing errors: the controller's legitimate interest in offering a website that works (article 6.1.f GDPR).
- Answering the queries you send us: your consent when writing to us and the handling of your request (article 6.1.a and b).
- Measuring use of the website with Google Analytics to improve it: your consent, given in the cookie notice, which you can withdraw at any time from «Cookie settings» (article 6.1.a).
- Complying with legal obligations where applicable (article 6.1.c).
We do not make automated decisions about you or build profiles for commercial purposes.
Bookings are handled by another company
When you click «See prices» or «Book» you go to book.wabihotel.com, the booking platform operated by Nuitee (LiteAPI). The data you enter there to book (name, email, phone, payment details, guests) is collected and processed by Nuitee to manage the booking and the payment, under its own privacy policy, shown on that platform. [Confirm with Nuitee whether it acts as an independent controller or as a processor on behalf of Wabi Hotel, and adjust this paragraph.]
Likewise, activities you book through the Civitatis widget are handled by Civitatis under its own privacy policy.
Who else is involved (processors and third parties)
- Vercel Inc. (United States): website hosting. It processes technical connection data as a processor. Transfers to the United States are covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
- Google Ireland Limited: Google Analytics and Google Tag Manager, only if you accept analytics cookies, as a processor. Google may process the data in the United States under the EU-US Data Privacy Framework. Google Analytics data is kept for 14 months.
- wsrv.nl (Netherlands): a service that delivers hotel photos at the right size. Your browser requests the images from it directly, so it receives your IP address.
- Civitatis Tours S.L. (Spain): destination pages show a list of Civitatis activities. It is loaded from Civitatis servers when you reach that part of the page, so Civitatis receives your IP address and your browser's technical data.
- LiteAPI (Nuitee): hotel information provider. Our server asks it about destinations and hotels; we do not send it any data that identifies you.
We do not sell or pass on your data to anyone for advertising purposes.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to privacidadwabiwebscom, stating which right you wish to exercise. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Children
The website is not aimed at children under 14 and we do not knowingly collect their data.
Changes to this policy
If the way we process data changes (for example, if we add a form), we will update this page and its date.