Privacy policy

Ilustración Zarcillo


This privacy policy applies to the website.

Please read it carefully. It contains important information about the processing of your personal data and your rights under applicable law.

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with possible legislative or jurisprudential changes. If you have any questions or need any clarification regarding our Privacy Policy or your rights, you can contact us through the channels indicated below.

You declare that the data you provide us, now or in the future, are correct and truthful and you agree to inform us of any changes to them. In the event of providing personal data of third parties, you undertake to obtain the prior consent of those concerned and to inform them of the contents of this policy.

In general, the fields on our forms that are marked as mandatory must be completed in order to process your requests.



The person responsible for the processing of personal data collected on this website is:

  • Responsible: HARO LUXURY SUITES S.L. (en adelante, el HOTEL)
  • Postal address: Calle Esteban de Agreda número 3, 26200 Haro, La Rioja
  • TAX: B42793844
  • Registration data: Inscrita en el registro Mercantil Tomo 868 folio 168 hoja LO19211
  • Email:
  • Phone number: +34 680 580 936



Management of the relationship with customers and users: We process the data that our customers and users provide in their queries and booking forms to meet their requests, manage their reservation and the provision of services related to it. The categories of data we process for these purposes are as follows:

Identification data (name, surname and ID/passport) and contact data (address, email and telephone) of the reservation holder;  Data of the reservation itself (dates of stay, number and age of guests and services included in the reservation).
The data of the transactions made on the web will also be processed for accounting and administrative management purposes and the fulfillment of our legal obligations in accounting and tax matters.

These treatments are necessary for the execution of the contract or for the application of pre-contractual measures at the request of the interested parties.

Statistical and quality management purposes: In order to evaluate and manage the quality of our services and products we perform statistics based on aggregated data obtained from web browsing data, e.g. IP address, web logs, pages visited or actions performed on the Web (more information in our cookies policy).

These treatments are based on our legitimate interest to evaluate and manage the quality of our services and products. In weighing this interest against your rights and freedoms, it has been determined that the processing had a limited impact on the privacy of data subjects, corresponded to reasonable expectations of data subjects and did not pose significant threats.

Sending commercial communications and mailing list management: We process the identification and contact data provided by our customers and people who register on our mailing lists to send them communications about our products and services.

These processing operations are based on the consent requested. Not giving your consent or withdrawing it does not condition the execution of the order or the provision of the contracted services.

At any time you may request to unsubscribe from the processing for commercial purposes by activating the link provided for this purpose in our communications or by sending an email to:



In general, we keep your data for the duration of your relationship with us and in any case for the periods provided for in the applicable legal provisions, for example, in accounting and tax matters, and for the time necessary to meet possible liabilities arising from the processing. We will delete your data when they are no longer necessary or relevant for the purposes for which they were collected. Data processed for commercial purposes will be kept for as long as you do not request their deletion.



Your data will only be communicated to third parties by legal obligation, with your consent or when your request implies such communication.



You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, to access it. You may also request that your data be corrected if they are inaccurate or that incomplete data be completed, as well as request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you may request that we restrict the processing of your data. In such a case, we will only process the data concerned for the formulation, exercise or defense of claims or for the protection of the rights of other persons. Under certain conditions and for reasons relating to your particular situation, you may also object to the processing of your data. In this case, we will stop processing the data except for compelling legitimate reasons that override your interests or rights and freedoms, or for the formulation, exercise or defense of claims.

You may also, under certain conditions, request the portability of your data to be transferred to another data controller. You may revoke the consent you have given for certain purposes, without affecting the lawfulness of the processing based on the consent prior to its withdrawal, and file a complaint with the Spanish Data Protection Agency.

To request your cancellation of the processing for commercial purposes you can send an email to the following email address:

To exercise your rights you must send us a request accompanied by a copy of your national identity card or other valid document that identifies you by mail or email to the addresses indicated in the section Who is responsible for the processing of your data?

You can obtain more information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at