Privacy and Data Protection

This policy explains how we process personal data at El Molino del Sol (rural hotel), operated by the sole trader Elise Billy. It applies to processing arising from the management of bookings and stays, communications with guests, customers, agents and suppliers, events, and the website.

1. Who is the controller of your data?

Controller: Elise Billy – El Molino del Sol (sole trader) – NIE Y0574646M
Legal and correspondence address: Calle Alcalde Reig 6, 46006 Valencia (Spain).
Contact email: datos@elmolinodelsol.com

2. For what purposes do we process your data and what is the legal basis?
  • Management of bookings, stays and payments/collections (including communications before and after the stay). Legal basis: Performance of a contract or pre-contractual measures (Art. 6.1(b) GDPR).
  • Compliance with legal obligations (as examples including tax/accounting; documentary registration of travellers and communication to the Ministry of the Interior). Legal basis: Compliance with a legal obligation (Art. 6.1(c) GDPR; tax regulations and RD 933/2021).
  • Handling enquiries and requests for information (email, web form, social networks). Legal basis: Consent (Art. 6.1(a) GDPR) or pre-contractual measures (Art. 6.1(b) GDPR).
  • Occasional sending of promotional and, in general, commercial information related to products and/or services provided by El Molino del Sol. Legal basis: Legitimate interest of the controller (Art. 6.1(f)). You may object at any time.
  • Events: The purpose of processing in this area is the management of the event. Legal basis: Consent (Art. 6.1(a) GDPR) or performance of a contract (Art. 6.1(b) GDPR).
  • Management of spontaneous applications or recruitment processes. Legal basis: Consent (Art. 6.1(a) GDPR).
  • Management of cookies on the website: technical cookies necessary and, if you accept, analytics/measurement. Legal basis: Consent (Art. 6.1(a) GDPR). Technical cookies do not require consent.
3. How did we obtain your personal data?

All personal data collected by El Molino del Sol have been obtained because they were provided by the data subject (you) or your authorised agent. When you provide us with your personal data via our website forms, you will be asked to accept and consent to the personal data processing detailed in this Privacy Policy.

You are solely responsible for the truthfulness, accuracy and validity of the data provided. If you do not wish to provide any of your data, this may prevent you from using some of the services we offer.

4. To whom will we disclose your personal data?
  • To those third parties, bodies and public institutions of the General State Administration, the Autonomous and local Administrations, including judicial bodies to which we are legally obliged to provide them, including for communicating data to the Ministry of the Interior through the SES.HOSPEDAJES platform or any system that may replace it in the future.
  • To financial entities where necessary based on your relationship with El Molino del Sol.
  • To external technology service providers, such as hosting services, IT maintenance and similar, who provide services to El Molino del Sol and who will process your data strictly following our instructions and under our responsibility.
  • To employees or collaborators (who may be third parties or volunteers) or service providers, solely for internal administrative purposes and/or for the purposes indicated above.
  • To your travel agent, if any, solely for internal administrative and billing purposes.
5. Are international transfers carried out?

If, to provide the service, it is necessary to use providers located outside the European Economic Area, appropriate safeguards will be ensured (adequacy decisions or standard contractual clauses). Specific information will be provided at the time of collection or upon request.

6. How long will we keep your data?
  • Personal data obtained through the job application form and CVs will be kept for a maximum period of two years, after which they will be deleted from the database. However, if the candidate is selected, the CV data will be kept in order to manage the employment relationship.
  • Personal data obtained through the information request form will be kept only for the time necessary to deal with the request.
  • If you have given your express consent to receive commercial information, your data will be kept until you express your wish to revoke that consent. If the sending of promotional information is based on legitimate interest, your data will be kept as long as the interest persists or until you exercise your right to object.
  • Personal data provided for purchases and bookings will be kept for the duration of the contractual relationship and, once ended, for the limitation period of any legal actions that may arise from it.
  • Personal data obtained through events will be kept for that purpose for the time necessary to manage the event and will subsequently be kept until the limitation period of possible legal liabilities.
  • Personal data obtained through cookies will be kept for the period determined for each cookie, which may vary according to your selection in the cookie configurator. The maximum retention time is two years. You can find more information in our Cookie Policy.
  • If you have exercised your data protection rights or we need to process your data in compliance with legal obligations, your data will be kept for the time necessary to comply with our obligations and, subsequently, until the limitation period of possible legal actions, duly blocked.
7. What security measures will be applied to your personal data?

The processing of the personal data provided will be carried out by adopting appropriate technical and organisational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of the processing, as well as the varying probability and severity risks to the rights and freedoms of natural persons.

8. How can you exercise your rights concerning your personal data or contact the person responsible for Data Protection)?

If you wish to revoke any consent granted, as well as to exercise the rights of access, rectification, erasure, objection, restriction, portability and the right not to be subject to automated decisions, you may contact El Molino del Sol by sending a written request to the postal address at Calle Alcalde Reig 6, 46006 Valencia; or by email to datos@elmolinodelsol.com.

The request must include: name and surname of the data subject; address or email for notification purposes; and the specific request. If necessary to verify your identity, El Molino del Sol may request additional data such as a telephone number or even a copy of your National Identity Document, passport or other valid identification document of the data subject and, where appropriate, of his/her representative, as well as proof of representation.

If you consider that the above rights have not been addressed in accordance with current legislation, you may lodge the corresponding complaint for the protection of rights with the Spanish Data Protection Agency (www.aepd.es).

9. Data Protection Officer (if applicable)

El Molino del Sol is not currently required to appoint a Data Protection Officer. If this becomes necessary in the future, we will update this policy with their contact details.

Update date: 02/03/2026