In compliance with EU Regulation 2016/679 (General Data Protection Regulation – GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), this Privacy Policy informs users of the website www.sj7aparthotel.com (hereinafter, “the Website”) about how their personal data is collected, processed, and protected.

⸻ 1. DATA CONTROLLER • Business name: SJ7 Aparthotel • Legal owner: [Insert company or individual name] • VAT/NIF number: [If applicable] • Address: Carrer Sant Joan 7, 17220 Sant Feliu de Guíxols, Girona, Spain • Email contact: [your@email.com]

⸻ 2. DATA WE COLLECT We may collect the following types of personal data: • Full name • Identification number (when legally required) • Email address and phone number • Payment information (processed through secure third-party platforms) • Booking dates, guest preferences, number of guests • Technical data (cookies, IP address, browser type)

⸻ 3. PURPOSES OF DATA PROCESSING We process your personal data for the following purposes: • To manage booking requests and guest communication • To send booking confirmations and digital keys • To comply with legal and fiscal obligations (e.g., tourist registry, invoicing) • To provide relevant information before, during or after the stay • To improve the Website and user experience We do not make automated decisions that produce legal effects on users.

⸻ 4. LEGAL BASIS FOR PROCESSING We process personal data based on: • Performance of a contract (i.e. lodging reservation) • User consent (i.e. contact form, newsletter) • Legal obligations (e.g. tax or tourism records) • Legitimate interest to improve our services and website functionality

⸻ 5. DATA SHARING We do not share your personal data with third parties, except: • When legally required (e.g. police or tax authorities) • With secure service providers (e.g. payment processors, booking platforms), under confidentiality agreements Your data will not be transferred to countries outside the European Economic Area, unless appropriate legal safeguards are in place.

⸻ 6. DATA RETENTION Your data will be stored: • As long as there is a contractual relationship • For legally required periods (e.g. invoices: 5 years) • Until the user requests deletion, where applicable

⸻ 7. YOUR RIGHTS As a data subject, you have the right to: • Access your data • Request correction • Request erasure • Request restriction of processing • Data portability • Object to processing To exercise your rights, please contact us at [your@email.com], including a copy of your valid ID and clearly indicating the right you wish to exercise. If you believe your rights have not been respected, you may file a complaint with the Spanish Data Protection Authority (AEPD): www.aepd.es

⸻ 8. DATA SECURITY SJ7 Aparthotel applies appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, misuse, or alteration. ⸻ 9. CHANGES TO THIS PRIVACY POLICY We reserve the right to update or modify this Privacy Policy to reflect changes in legal or technical requirements. Users are advised to review it periodically.