Privacy policy
PRIVACY POLICY
In compliance with the obligations established in Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, we provide you with the following information regarding the processing of your personal data.
Who is responsible for processing your data?
INVERSIONES PUENTE ALVAREZ, S.L. Tax ID (CIF): B52519063
- Address: C/ Gloria Fuertes, 3 Oviedo, Spain
- Telephone: +34 985 080 430
- Email: contratacion@hotelnatureoviedo.com
- Website: www.hotelnatureoviedo.com
You may contact us through any of the above channels.
We reserve the right to modify or update this Privacy Policy at any time. We recommend reviewing it periodically. If you are a registered user and access your account or profile, you will be informed of any changes.
GUESTS
What are the purposes of processing your personal data?
We process your personal data in order to:
- Manage your reservation.
- Manage your stay at the hotel.
- Guarantee payment for expenses arising from your stay.
Your data will be disclosed to the State Security Forces and Corps in accordance with current legislation, as well as to the travel agencies or tour operators involved.
Your data will be retained for at least six (6) years in compliance with tax, commercial, consumer protection, and traveller registration regulations.
What is the legal basis for processing your data?
The legal basis is your consent.
WEBSITE OR EMAIL CONTACTS
What data do we collect through the website?
We may process:
- Your IP address.
- Your operating system.
- Your browser type.
- The duration of your visit.
This information is processed anonymously.
If you submit your information through our contact form, you will be identified so that we can contact you if necessary.
What purposes do we process your personal data for?
- Respond to your enquiries, requests or questions.
- Manage the requested service.
- Respond to your request or process your application.
- Send electronic communications related to your request.
- Send commercial information or event invitations by electronic means, provided that you have expressly authorised us to do so.
- Analyse and improve our website, products and services.
- Improve our commercial strategy.
What is the legal basis?
The legal basis is your consent.
Whenever completing a form requires clicking the "Send" button, doing so confirms that you have been informed and expressly consent to the privacy clause attached to the form and to this Privacy Policy.
All mandatory fields are marked with an asterisk (*). If these fields are not completed, or if the Privacy Policy acceptance box is not checked, the form cannot be submitted.
Typical wording:
"I am over 14 years of age and I have read and accept the Privacy Policy."
CUSTOMERS
What purposes do we process your personal data for?
- Preparing quotations and monitoring them through communications between the parties.
- Electronic communications relating to your request.
- Commercial information or event invitations where expressly authorised.
- Managing administrative, communication and logistics services.
- Billing and tax compliance.
- Processing transactions.
- Debt collection and payment control.
SUPPLIERS
What purposes do we process your personal data for?
- Electronic communications relating to your request.
- Commercial information or event invitations where expressly authorised.
- Managing administrative, communication and logistics services.
- Billing.
- Processing transactions.
- Tax compliance.
- Debt collection and payment control.
What is the legal basis?
The legal basis is the performance of a contractual relationship or, where applicable, your consent when contacting us or offering your products or services.
SOCIAL MEDIA CONTACTS
What purposes do we process your personal data for?
- Respond to enquiries, requests or questions.
- Manage requested services.
- Build and maintain our online community.
What is the legal basis?
The legal basis is the contractual relationship established through the relevant social media platform and in accordance with each platform's Privacy Policy.
- X (formerly Twitter)
- YouTube
How long will we retain your personal data?
We can only access or remove your data within the limits established by your profile settings.
Your data will be processed while you continue to follow us, remain connected with us, or interact with us by clicking "Like", "Follow", or similar buttons.
Any corrections to your data or restrictions on information or publications must be made through your own profile settings on the relevant social network.
JOB APPLICANTS
What purposes do we process your personal data for?
- Managing recruitment processes.
- Inviting you to interviews and assessing your application.
- With your consent, sharing your CV with partner or affiliated companies solely to help you find employment.
- If you accept the Privacy Policy, sharing your application with companies within our corporate group for recruitment purposes.
One year after receiving your CV, it will be securely destroyed.
What is the legal basis?
Your explicit consent when submitting your CV.
COMPLAINTS AND CLAIMS
What purposes do we process your personal data for?
- Receiving and processing complaints and claims.
What is the legal basis?
- Compliance with legal obligations established by applicable legislation.
- Your consent where a complaint or request is submitted through an online form.
Mandatory fields are marked with an asterisk (*). Failure to complete them or to accept the Privacy Policy will prevent submission of the form.
VIDEO SURVEILLANCE (CCTV)
What purposes do we process your personal data for?
- Ensuring the security of our premises.
- Controlling employee and similar personnel activities.
- Assessing service quality.
What is the legal basis?
Protection of the public interest.
Who may receive your data?
State Security Forces and Courts:
- In the event of criminal offences.
- To investigate serious misconduct.
- To exercise our legitimate legal rights.
How long do we retain CCTV recordings?
For a maximum period of 30 days.
Do we process third-party personal data?
As a general rule, we only process data belonging to the data subject.
If you provide us with third-party data, you must first inform those individuals and obtain their consent. Otherwise, you accept responsibility for failing to comply with this obligation.
Do we process data relating to minors?
We do not process personal data relating to individuals under 18 years of age.
Please do not provide such data if you are under 18 or on behalf of anyone under that age.
INVERSIONES PUENTE ALVAREZ, S.L. accepts no liability for failure to comply with this requirement.
Electronic communications
We will only send electronic communications:
- To manage your request, using the contact details you have provided.
- For commercial purposes where you have previously given your explicit consent.
Security measures
We have implemented an appropriate level of security to protect the personal data we process and have adopted all available technical and organisational measures to prevent loss, misuse, alteration, unauthorised access and theft.
Who may receive your data?
Your data will not be disclosed to third parties except where legally required.
They may be disclosed to:
- The Spanish Tax Agency.
- Banks and financial institutions for payment processing.
- Data processors necessary for the performance of the contract.
Where you choose to pay through an online platform, payment gateway, banking application or similar service, your data will be processed securely within that provider's environment.
Our website developers, maintenance providers and hosting providers may access your data where necessary. They are contractually bound to maintain the same level of confidentiality and data protection.
Your rights
You have the right to:
- Know whether we process your personal data.
- Access your personal data.
- Request correction of inaccurate data.
- Request deletion of your data where it is no longer necessary or where you withdraw consent.
- Request restriction of processing in certain circumstances.
- Receive your data in a structured, commonly used and machine-readable format (data portability).
- Lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
- Withdraw your consent at any time.
Please notify us if your personal data changes so that we can keep it up to date.
How can you exercise your rights?
You may request the relevant forms by email or use those provided by the Spanish Data Protection Agency (AEPD).
Where there are reasonable doubts regarding your identity, we may require:
- An electronically signed request, or
- A copy of your identity document.
Requests may be submitted:
- In person.
- By post.
- By email.
How long will it take us to respond?
We will respond within one month of receiving your request.
Where requests are particularly complex, this period may be extended by up to two additional months, and you will be informed accordingly.
Cookies
If we use cookies other than those strictly necessary, you may consult our Cookie Policy via the corresponding link on our website.
How long will we retain your personal data?
· Your data will be retained while you maintain a relationship with us.
- Once that relationship ends, your data will be retained for the periods required by applicable law, including any limitation periods during which courts or authorities may require access.
- Data will be retained until legal retention periods expire or, where no such obligation exists, until you request deletion or withdraw your consent.
- We will retain records relating to purchases or services provided for the duration of applicable warranties in order to deal with any potential claims.
Last updated: 17 June 2026.
Come enjoy it