Privacy policy

By browsing the website and completing its forms, users accept that the personal data they provide will be processed by the establishment, including the collection of access data and the use of cookies and third-party features.

Purpose, legal basis and recipients

Data are used to operate the website; respond to requests sent through the forms; provide and manage hotel services, process bookings and payments; produce analytics and statistics; and include third-party features (such as Google Maps).

Browsing: we process the data needed to provide online services (IP address, pages visited, access date and device information), also for security and improvement. Legal basis: provision of the service and consent. Recipients: the establishment and web hosting companies.

Forms: to handle your requests. Legal basis: consent. Recipients: the establishment and companies providing the requested services.

Provision of services: managing bookings and payments, information about the establishment’s services and quality surveys. Legal basis: performance of the contract.

Web analytics and third-party features: understanding how the website is used and adding maps, analytics or social buttons. Legal basis: consent. These features connect your browser to third-party domains, which may be outside the European Economic Area. More information at https://policies.google.com/privacy

Accuracy of data

Users must provide true, accurate, complete and up-to-date data and must not enter another person’s data. They will be solely responsible for any damage resulting from providing third-party data.

Your rights

You may exercise your rights of access, rectification, erasure, objection, portability, restriction and withdrawal of consent at any time by signed letter sent by post to Nietos de Cándido, S.A. (Av. Gerardo Diego, s/n, 40006 Segovia), stating your request and enclosing a copy of your ID or passport. To stop receiving commercial communications, simply email info@candidohotel.es. If you believe the processing breaches the regulations, you may lodge a complaint with the data protection authority.

Minors and security

Use of the web services by persons under 18 is prohibited.

Sections that request sensitive information use SSL encryption, so data travels encrypted between your device and our server.