Privacy Policy

1. Data Controller

In accordance with Regulation (EU) 2016/679 General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), you are informed that the personal data collected through this website will be processed by:

  • Data Controller: CAREPO SA (commercial brand HOSTAL SANS)
  • Tax ID (CIF): A-59934117
  • Address: Carrer Antoni de Capmany, 82, 08014 Barcelona, Spain
  • Email: info@hostalsans.com
  • Phone: +34 933 313 700

2. Personal data we collect

HOSTAL SANS only collects basic personal data voluntarily provided by the user through the website forms:

  • First and last name
  • Email address
  • Phone number
  • Any other information the user voluntarily includes in the message field

3. Purposes of processing

The personal data provided will be processed for the following purposes:

  • To manage and respond to inquiries, requests, or information submitted via the contact form.
  • To manage reservations and provide accommodation services.
  • To maintain commercial relationships and communication with users.
  • To send commercial communications about our services, offers, and updates, provided the user has given explicit consent.
  • To conduct internal statistical studies and website usage analysis.
  • To comply with applicable legal obligations.

4. Legal basis for processing

The legal basis for processing your personal data is:

  • Consent of the data subject (Art. 6.1.a GDPR): when completing and submitting contact or information request forms.
  • Performance of a contract (Art. 6.1.b GDPR): when data is necessary for managing a booking or providing accommodation services.
  • Legitimate interest (Art. 6.1.f GDPR): for maintaining the commercial relationship.
  • Compliance with a legal obligation (Art. 6.1.c GDPR): to comply with tax, accounting, and administrative obligations.

5. Data retention period

Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and to determine any potential liabilities. Specifically:

  • Contact data and enquiries: retained while the relationship exists and, once ended, for the applicable legal limitation periods (5 years under Article 1964 of the Spanish Civil Code).
  • Booking and invoicing data: retained for the legally required tax periods (4 years under the General Tax Law).
  • Commercial communications: until the user withdraws consent.

6. Data recipients

Personal data will not be shared with third parties except where legally required. In particular, it may be shared with:

  • Public authorities in cases required by law.
  • Technology service providers acting as data processors (hosting, email platforms, booking systems), with whom CAREPO SA has signed data processing agreements in accordance with Article 28 GDPR.

No international data transfers outside the European Economic Area are carried out.

7. User rights

Users may exercise the following rights at any time:

  • Right of access: to know what personal data is being processed.
  • Right to rectification: to correct inaccurate or incomplete data.
  • Right to erasure: to request deletion of data when no longer necessary.
  • Right to object: to object to data processing.
  • Right to restriction of processing: to request limitation under certain conditions.
  • Right to data portability: to receive data in a structured, commonly used, machine-readable format.
  • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.

To exercise these rights, users may send a written request to Carrer Antoni de Capmany, 82, 08014 Barcelona, Spain or to info@hostalsans.com, including a copy of their ID or equivalent document.

If you believe your data is not being processed in accordance with current regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security measures

CAREPO SA has adopted the necessary technical and organizational measures to ensure the security and integrity of personal data, as well as to prevent alteration, loss, unauthorized processing, or access, in accordance with applicable regulations.

9. Changes to the privacy policy

HOSTAL SANS reserves the right to modify this privacy policy to adapt it to legislative or jurisprudential developments or industry practices. In such cases, changes will be announced on this page with reasonable notice before implementation.

Last updated: February 2026.