Privacy Policy

Privacy Policy

CORTIJO ABRIL works to offer you the best customer experience possible through our services. In some cases, this requires gathering information. Your privacy matters to us and we believe that it is important to be transparent about this.

This privacy policy has been adapted to the current Spanish and European regulations on personal data protection on the internet. Specifically:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, with regard to the protection of natural persons with regard to the processing of personal data and free movement of such data (GDPR).
  • Spanish Organic Law 3/2018 of 5 December on personal data protection and the guarantee of digital Rights (LOPDGDD).
  • Spanish Law 34/2002 of 11 July on Information Society and Electronic Commerce Services (LSSICE).

If you would like more information on the processing of your data, please read the different sections in the Privacy Policy below:

Who is the data controller of your personal data?



Tax Identity Number: 34016929K; Phone: 648 008 518; Email:

What sort of personal data do we collect?

Data provided for bookings:

  • Identity details: Name and last name.
  • Contact details: Mail address – Phone number – Email.
  • Preferences for your stay.
  • Any other information or details that you may share with us.

Data entered into the contact form:

  • Identity details: Name and last name.
  • Contact details: Phone number – Email.
  • Any other information or details that you may share with us.

If you decide not to provide the personal data requested or not to accept this Privacy Policy, we will not be able to send you the information you requested.

Why do we process your data and what for?

We process the information you provide us with for the following purposes:

  • Process bookings made on the website.
  • Address requests for contact and information through the form displayed on the website.
  • Address the requests made.

The personal data gathered will be entered into a Record of Processing Activities that will be regularly updated in accordance with the GDPR.

What is the lawful basis for the processing of your data?

The processing of your data is based on the following lawful basis:

To process bookings made on the website: Carry out a contract between the parties.
To address requests made on the website: The interested party’s consent.

How long will we keep your data?

Your data will be kept for the following periods:

Data provided for bookings made on the website: They will be kept as long as the contract remains in force and once it is terminated, as long as required for any legal actions that may derive from it.
Data provided for requests made on the website: The data will be kept as long as required to address and reply to your request and after this, as long as required for any legal actions that may arise from the request.

Do we disclose your data?

No, the data will not be disclosed to third parties unless enforced by law.

What are your rights and how can you exercise them?

You may write to us and exercise your rights by emailing your request to:

In accordance with the GDPR, you may request your:

  • Right to access: you may ask for information about the personal data we have about you.
  • Right to rectification: you can inform us of any changes in your personal data.
  • Right to erasure and to be forgotten: you can request the blocking and deletion of your personal data.
  • Right to restriction of processing: this means limiting the processing of the personal data.
  • Right to object: you may withdraw your consent to process the data so that we may no longer be able to process them.
  • Right to data portability: in some cases you may ask for a copy of your personal data in a structured, commonly used and machine-readable format to then send the data to another controller.
  • Right to not be subject to automated individual decision-making: you may ask to not be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects the interested party.

Moreover, you have the right to file a claim before the Spanish Data Protection Agency if you believe that the way we process your data does not conform to the GDPR.

Accuracy and veracity of the data provided

As user, you are solely responsible for the accuracy and correction of the data provided and you therefore exempt CORTIJO ABRIL from any liabilities thereof. As user, you guarantee and are responsible for, in any case, the accuracy, validity and authenticity of the personal data provided and you agree to keep them duly up to date.

Furthermore, you certify that you are above the age of 14 and you are legally competent to provide your consent regarding the processing of your personal data.

Processing of personal data on social media

We have social media accounts to promote our business. We have no control over the different social media platforms as they have their own terms and conditions and privacy policies.

If you have a social media account and you decide to follow us with that account, our interaction on the social media platform will be subject to the terms and conditions of said platform.

If you contact us through a social media platform to ask for information, we will process your data according to this Privacy Policy.

Please remember to check the privacy policies carefully before using social media to make sure that you agree with the way your personal data is collected and shared.

Which security measures do we take to protect your personal data?

In order to keep your personal data secure, we have taken all the technical and organisational measures required to guarantee the security of the personal data you supply and prevent their alteration, loss, misuse, disclosure and processing or unauthorised access in accordance with the personal data protection regulation. In this regard, CORTIJO ABRIL guarantees the custody of the data processed and takes all the appropriate measures for such purpose, always in line with the state of the art at the time.

Our security measures are constantly updated based on the latest technologies and requirements from the data protection regulations.

Links to other websites

The website may have links to other websites. By clicking on one of those links and being forwarded to an external website, the visit will be subject to the privacy policy of said website. In those cases, CORTIJO ABRIL disclaims any liability regarding their privacy policy.

How do we use cookies?

CORTIJO ABRIL’s website and social media accounts use cookies to optimise and customise your browsing. Cookies are physical files of information that are downloaded onto the user’s device. The information gathered through these cookies is used to make the user’s browsing of the portal easier and optimise their browsing experience. The data gathered through cookies can be shared with their creators but the information collected through these cookies will never be linked to the user’s personal data or identify him/her.

However, if the user does not want any cookies on his/her hard drive, he/she may change the browser settings to prevent their download. For more information, please see our Cookies Policy.

Changes to the Privacy Policy

CORTIJO ABRIL reserves the right to update or change this Privacy Policy and the specific Privacy Statements from time to time and without prior notice.

LAST UPDATE: 30 October 2019