Privacy policy
Last updated: 1 August 2026 · Version: 1.0
This policy explains how personal data is processed when people visit the Albergue Vía de la Plata website, make an enquiry or request a booking.
1. Data controller
Controller: Centro Especial de Empleo PLASER
Tax ID: V10241644
Address: C/ Mayorga, 1, 10600 Plasencia (Cáceres), Spain
Telephone: +34 927 410 152
2. Data we may process
- Identification and contact details, such as name, email address and telephone number.
- Information required for an enquiry or stay request: dates, number of guests, preferences and comments.
- Billing and financial management data when a contractual relationship exists.
- Basic technical data needed for website security and operation, including IP address, access logs and cookie preferences.
- Accessibility or health-related information voluntarily provided to prepare the stay. Such data is processed only when necessary and with explicit consent.
Please do not provide unnecessary health information. Data concerning minors or represented persons must be provided by their legal representative.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answer enquiries and requests for information. | Consent and, where relevant, pre-contractual steps requested by the data subject. |
| Manage availability, booking requests, stays, billing and aftercare. | Performance of a contract or pre-contractual steps. |
| Deal with voluntarily disclosed accessibility or health needs. | Explicit consent to process the information solely to provide the service appropriately and safely. |
| Meet accounting, tax, administrative and legal obligations. | Compliance with a legal obligation. |
| Protect the website, prevent abuse and keep technical security logs. | Legitimate interest in securing the service. |
| Manage optional cookies and third-party services. | Consent, which may be withdrawn at any time. |
4. Recipients and service providers
Personal data is not sold or disclosed for commercial purposes. Providers required to deliver the service —web hosting, email, technical support, booking management, accounting or equivalent services— may access data under confidentiality and data-protection obligations. Data may also be disclosed where required by law.
Loading Google Maps voluntarily may send technical data to Google. The map remains blocked until the relevant consent category is accepted.
5. International transfers
Where a provider processes data outside the European Economic Area, the safeguards required by applicable law will be used, such as adequacy decisions or standard contractual clauses. Details of optional services are maintained in the Cookie policy.
6. Retention
- Enquiries: for the time required to answer them and then restricted for the applicable limitation periods.
- Bookings and services: during the contractual relationship and for the time needed to deal with incidents or claims.
- Accounting records and supporting documents: for the periods required by commercial and tax law; generally up to six years for commercial records and four years for tax obligations, without prejudice to other applicable periods.
- Consent-based data: until consent is withdrawn, unless another legal basis permits retention.
- Security logs: only for the time strictly required to prevent and investigate incidents.
7. Your rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent without affecting processing carried out before withdrawal. Where applicable, you may also object to decisions based solely on automated processing.
Contact PLASER at the postal address above or through ventas [arroba] placeat [punto] org, stating the right you wish to exercise. Additional information may be requested only where needed to verify identity.
You may lodge a complaint with the Spanish Data Protection Agency if you believe the processing is unlawful.
8. Automated decisions
This website does not make decisions with legal effects based solely on automated processing and does not create commercial profiles.
9. Security
Reasonable technical and organisational measures are used to prevent loss, misuse, unauthorised access or disclosure. Permissions, updates and security logs are reviewed periodically.
10. Changes
This policy may be updated when processing activities, services or legal requirements change. The current date and version appear at the top of the page.