Legal Notice & Privacy Policy

1. Legal Notice

In compliance with Article 10 of Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce (LSSI), the following identifying information is provided regarding the owner of this website:

• Trade name: El Agustín
• Legal entity: Malleore, S.L.
• Tax ID (NIF/CIF): B09951336
• Registered address: Lugar Recarei, 20, Parroquia Malvas, 36714 Tui (Pontevedra), España
• Email: hola@elagustin.es
• Phone: +34 669.01.23.45
• Tourism registration: Registered with the Registro de Empresas e Actividades Turísticas de Galicia, category Casa Rural B

Purpose of the website: elagustin.es is the official website of El Agustín, a boutique hospitality property in Galicia, Spain. Through this site, visitors can learn about the property, its events and retreats, and contact us for reservations and inquiries.

Terms of use: By accessing this website, you agree to use it in accordance with applicable law, good faith, and public order. You agree not to use the site for unlawful purposes, to harm the property or third parties, or to interfere with its normal operation. All content (text, images, design, logos, brand elements) is the intellectual property of El Agustín or its licensors and is protected by copyright. Reproduction, distribution, or modification without prior written authorization is prohibited.

Liability: El Agustín takes reasonable care to ensure the information on this website is accurate and current but does not guarantee the absence of errors or interruptions. We are not responsible for damages arising from the use of this website or from third-party content linked from it.

Applicable law and jurisdiction: This Legal Notice is governed by Spanish law. Any dispute arising from the use of this website shall be subject to the courts of Pontevedra, unless mandatory consumer protection law provides otherwise.

2. Privacy Policy

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you about how we process your personal data.

Data Controller

• Identity: Malleore, S.L.
• Tax ID: B09951336
• Address: Lugar Recarei, 20, Parroquia Malvas, 36714 Tui (Pontevedra), España
• Email: hola@elagustin.es

What data we collect

We may collect the following categories of personal data:

• Contact and inquiry data: name, email address, phone number, and any information you voluntarily provide via contact forms or email.
• Reservation data: name, contact details, dates of stay, number of guests, dietary restrictions or accessibility needs, and payment information (processed by our payment processor — we do not store full card details).
• Identification data at check-in: as required by Royal Decree 933/2021 and applicable Spanish hospitality regulations, we collect identification document details from all guests at the time of stay.
• Marketing data: email address and name if you subscribe to our newsletter or event communications.
• Technical data: IP address, browser type, device information, and browsing behavior collected via cookies (see our Cookie Policy).

Purposes and legal basis for processing

Data retention

We retain your data only as long as necessary for the purposes described:

• Inquiry data: up to 1 year after last contact, unless you become a guest.
• Reservation and guest data: as required by Spanish hospitality law (currently 3 years for guest registration data per RD 933/2021), and up to 6 years for tax and accounting purposes.
• Marketing data: until you withdraw consent.
• Cookie data: as specified in our Cookie Policy.

Recipients of your data

We may share your data with:

• Payment processors (Stripe) for transaction processing.
• Booking management software providers.
• Email marketing platforms (currently AWS) for sending requested communications.
• Spanish public authorities (Guardia Civil, tax authorities) when legally required, including the SES.HOSPEDAJES guest registration system per RD 933/2021.
• Professional advisors (accountants, lawyers) bound by confidentiality.

We do not sell your personal data to third parties.

International transfers

Some of our service providers may be located outside the European Economic Area (e.g., in the United States). When this occurs, we ensure transfers are protected by appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”) when no longer needed.
• Restrict processing in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interest or for direct marketing.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at hola@elagustin.es with proof of identity. We will respond within one month.

You also have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es if you believe your rights have been violated.

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Changes to this policy

We may update this Privacy Policy. The “last updated” date at the top reflects the most recent revision. Significant changes will be communicated to active customers.