Privacy policy

The controller of the data collected on this website is the property:

Owner

Hotel Ro Che Hil

Only the data needed for each purpose is requested:

• Enquiries

  Name, email address and the message sent through the contact form, to answer the enquiry.

  Legal basis: the consent of the person who sends the data

• Booking requests

  Name, email address, phone number, dates, number of guests and comments, to handle and confirm the booking and send messages about the stay.

  Legal basis: handling the requested booking

• Guest register

  The identity details required by lodging regulations (for example, ID document, nationality, date of birth and address), to keep the mandatory guest register.

  Legal basis: compliance with a legal obligation

• WhatsApp

  When you write on WhatsApp, the conversation takes place on that service, subject to the WhatsApp (Meta) privacy policy. The property sees the number and the messages it receives.

  Legal basis: the consent of the person who sends the data

• Browsing and security

  Technical connection data, such as the IP address and browser, to protect the forms against abuse and keep the website running.

  Legal basis: the legitimate interest in keeping the website secure

The website uses strictly necessary technical cookies, for example to remember the chosen language and currency. They are not used to identify anyone.

No third-party measurement or advertising tools are used.

Cookies can be blocked or deleted in the browser settings; without the technical ones, some features of the website may stop working.

The data is never sold or shared for commercial purposes. Only these have access to it:

• The technology provider that runs this website and the booking platform, as data processor, and the services it relies on: Vercel (website hosting), Neon (database), Brevo (email delivery), Cloudinary (images), Cloudflare (abuse protection), Sentry (error diagnostics).
• The competent authorities, when a regulation requires it.

Some of those providers process data on servers located outside the country, mainly in the United States and the European Union, with the contractual safeguards required by data protection law.

• Guest register: 5 years. After that period, it is deleted automatically.
• Bookings: for as long as the relationship with the guest lasts and, afterwards, for the periods required by accounting and tax rules.
• Enquiries: for as long as needed to answer and follow them up.
• Technical security data: a short period of a few days.

Data travels encrypted (HTTPS) and only authorised staff can access it.

The identity details in the guest register are stored encrypted, shown masked, and every view of the full value is logged.

You may request access to your data, its rectification, update or deletion, object to its processing and withdraw any consent you have given.

To do so, write to the property through the contact details on this website, stating your name and what you are requesting.

The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in article 14, paragraph 3 of Law No. 25,326. The Agency for Access to Public Information, as the supervisory authority of Law No. 25,326, has the power to handle complaints and claims filed by anyone whose rights are affected by a breach of the personal data protection rules in force.

Bookings must be made by adults. When regulations require a minor staying at the property to be registered, their details are provided by the responsible adult.

This policy is updated when the website's services or the applicable regulations change. The date of the last update is shown at the top.