book now
book now

Privacy Policy

1. Data Controller

  • Identity: Bodegas y Viñedos Mainetes S.L.
  • Tax ID (NIF/CIF): B02365898
  • Address: C/ Concepción, 11, 5º Izqda., 02002 Albacete, Spain
  • Contact email for privacy matters: hotel@enoturismomainetes.com
  • Data Protection Officer (DPO): Not applicable (not mandatory for this type of establishment)

2. What data do we process and for what purpose?

Booking Engine (MotoPress)

  • Processed data: First name, last name, email, phone number, stay details, payment data (managed by the payment gateway)
  • Purpose: To manage the request and confirmation of accommodation bookings
  • Legal basis: Performance of a contract (Art. 6.1.b GDPR)

Event Contact Form

  • Processed data: First name, email, phone number, details regarding the requested event
  • Purpose: To respond to information requests concerning weddings and corporate events
  • Legal basis: Pre-contractual measures / Legitimate interest

Purchase of Experiences and Gift Vouchers (Fluent Forms + Stripe)

  • Processed data: First name, email, billing details, payment details (processed directly by Stripe, not stored by us)
  • Purpose: To manage the purchase, issue the voucher, and send it by email
  • Legal basis: Performance of a contract

Browsing and Cookies (Google Analytics 4, Google Tag Manager)

  • Processed data: Browsing data, device identifiers, website behavior
  • Purpose: To analyze website usage and improve the user experience
  • Legal basis: User consent (managed via cookie banner)

Google Search Console

  • Processed data: Aggregated search engine performance data (does not identify individual users)
  • Purpose: To measure and optimize website ranking
  • Legal basis: Legitimate interest

Special categories of personal data (health, political opinions, etc.) are not processed, except for information voluntarily provided by the user in the booking comments field (e.g., food allergies for breakfast), which is processed solely to properly render the requested service.

3. How long do we retain your data?

  • Booking and billing data: For the period required by commercial and tax regulations (generally 6 years from the last transaction, in accordance with the Commercial Code).
  • Contact form data: Until the inquiry is resolved, and for a maximum of 12 months if no booking is formalized.
  • Browsing data / Analytical cookies: According to the retention settings of Google Analytics, up to a maximum of 14 months.

4. Who is your data shared with?

In order to provide our services, certain data is shared with the following data processors, all of whom operate under the guarantees required by the GDPR:

  • Website Hosting Provider: [PENDING — hosting provider name]
  • MotoPress: (booking engine management)
  • Fluent Forms / Stripe: (form management and online payments)
  • Google LLC: (Google Analytics 4, Google Tag Manager, Google Search Console) — these services may involve data transfers to the USA under the Standard Contractual Clauses of the European Commission and the EU-US Data Privacy Framework.

Data is not transferred to third parties for commercial purposes, nor is automated profiling with legal effects conducted on users.

5. Rights of Users

Any user may exercise the following rights at any time and free of charge by sending an email to hotel@enoturismomainetes.com along with a copy of their ID document:

  • Access: To know what personal data we process about you.
  • Rectification: To correct inaccurate or incomplete data.
  • Erasure (Right to be Forgotten): To request the deletion of your personal data.
  • Objection: To object to specific processing activities.
  • Restriction of Processing: To request that processing be restricted in certain circumstances.
  • Data Portability: To receive your data in a structured, commonly used format.

If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) — www.aepd.es.

6. Security Measures

The necessary technical and organizational measures are implemented to ensure the security of personal data and prevent its alteration, loss, or unauthorized processing/access, in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

7. Changes to this Policy

This Privacy Policy may be updated to adapt to legislative changes or modifications in website services. We recommend reviewing it periodically.