GDPR

Privacy Policy

We at Doña Rose Hostels take the protection of your personal data very seriously. This Privacy Policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for processing your personal data is:

Doña Rose Hostels
Las Palmas de Gran Canaria, Spain

2. Personal Data We Collect

We may collect and process the following personal data when you interact with our website or contact us:

Name
Email address
Phone number (if provided)
Message content
Booking or travel details (e.g. dates, number of guests)
Any other information you voluntarily provide

3. How We Collect Your Data

Your personal data may be collected when you:

contact us via our website
send us an email
submit a booking or group inquiry
communicate with us through other direct communication channels

4. Purpose of Data Processing

We process your personal data for the following purposes:

responding to inquiries and messages
handling booking and accommodation requests
communicating with you regarding your stay
fulfilling contractual or pre-contractual obligations
improving our services and website communication

5. Legal Basis for Processing

The processing of your personal data is based on one or more of the following legal grounds under GDPR:

Consent (Art. 6(1)(a) GDPR), when you voluntarily contact us
Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), when your inquiry relates to a booking
Legitimate interest (Art. 6(1)(f) GDPR), for responding to inquiries and improving our services

6. Data Retention

We store your personal data only for as long as necessary to fulfill the purpose for which it was collected or as required by applicable legal obligations.

7. Data Sharing

We do not sell or rent your personal data to third parties.

Your data may be shared with service providers only where necessary to operate our website or manage bookings, and only in compliance with GDPR.

8. Your Rights Under GDPR

You have the right to:

request access to your personal data
request correction of inaccurate data
request deletion of your data
restrict or object to processing
withdraw your consent at any time
lodge a complaint with a data protection authority

9. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website.