Your privacy and trust are important to us, which is why in this Privacy Policy we offer you important information about how we treat your personal data in accordance with current regulations on the protection of personal data on this website. We recommend that you carefully read the following, and if you have any doubts after reading it, you can contact us through the means we provide.
Data Controller and Contact Information
The Data Controller of your Personal Data and owner of this website is SUNMAR SPAIN, S.L., a company registered in the Mercantile Registry of Madrid, Volume 29,792, Folio 61, Section 8, Sheet M-536010 with CIF no. B86429545 and registered office in Madrid, C/ Atocha nº117, 28012; Operator of the Hostel “Sunmar Spain, S.L.”.
Email: hostalsanblas@yahoo.es
Website
www.hostalsanblas.com
Collection methods of personal data. Types, purposes, and legitimate basis.
We collect your personal data through:
Employment contracts
Through these channels, we collect data from our employees, specifically, identifying data, academic data, employment details, and economic data, for the purpose of maintaining an employment relationship, for which the processing of your data is legitimized in that relationship between the parties and in the execution of an employment contract.
Invoices, delivery notes, or purchase orders
Through these channels, we collect data from our suppliers (identifying and economic data), for the purpose of maintaining a commercial relationship, for which the processing of your data is legitimized in that relationship between the parties and in the execution of a commercial contract.
Reservations
The data of our customers provided to formalize a reservation are merely identifying data necessary for the formalization of the reservation. Once again, the processing of this data is legitimized in the relationship between the parties, in the execution of a contract, and in the legitimate interest of the Data Controller.
Contact forms
In these cases, only identifying data of the interested parties are requested, such as name, surnames, and an email, with the purpose of attending to their request. The legitimate basis in this case is your consent.
The email established for the exercise of rights is the one provided above. However, you can also send your request by post, attaching a copy of your ID or identifying document.
Data retention periods
The personal data provided will be kept for as long as the relationship that may link us persists (for example, resolving an inquiry or exercising rights), during the legal retention periods, or until the User requests their deletion or opposition. As a general rule, a retention period of five years from the end of the relationship between the parties is established. After this, they will be canceled or confidentially destroyed.
| Type of data |
Retention period |
| C.V. |
6 months |
| Contracts and payslips |
10 years from the end of the relationship |
| Reservation data |
2 years |
| Data related to purchases |
5 years |
| Invoices |
10 years |
| Financial statements |
6 years |
| Permits, licenses, Deeds, Lease agreements |
Indefinite |
| Exercise of rights |
4 years |
Automated decisions, profiling, and logic used Sunmar Spain, S.L. will not carry out profiling analysis or automated decision-making with the collected personal data.
How do we share information with third parties?
We share personal information with third parties in order to provide services as described in this Privacy Policy or when we believe that the law permits or requires it. When we share personal information, we do so in accordance with privacy and data security requirements.
Sunmar Spain, S.L. informs the User that some of our providers may process their personal data as data processors, for example, in the case of:
- third-party service providers, when necessary for the provision of services, coordination of activities, internal management, supplier approval, software support, cloud hosting services, and electronic communications. In such cases, access to their data by a third party will only be allowed when Sunmar Spain, S.L. maintains a contractual relationship with the data processor that guarantees confidentiality, non-use of personal information of users for purposes other than those indicated above, and compliance with our internal privacy and information security regulations;
- when such data transfer is based on a legal obligation or is required by competent authorities to respond to legal requirements, criminal investigations of possible illegal activity or claims that content infringes the rights of third parties, to protect the rights, property, or safety of third parties, in the case of merger, sale, restructuring, acquisition, joint venture, assignment, transfer, or other total or partial disposition of our business, assets, or shares. (Example, transfers to the AEAT, TGSS…)
International transfers
In some cases, Sunmar Spain, S.L. uses tools and services from third parties for service management. Some of these services may be owned by third parties residing outside the European Economic Area.
Sunmar Spain, S.L. seeks to use secure tools whose servers are preferably located in Spain, or failing that, in a Member State of the European Union, or that comply with European legislation according to the guidelines and recommendations of the Spanish Data Protection Agency, the European Commission, and the community agreements regarding international data transfer.
Exercise of Rights and Complaint to the Spanish Data Protection Agency
At any time, the User can withdraw their consent and/or exercise their rights of access, rectification, erasure, restriction, objection, and portability provided for in European data protection regulations by sending an email to hostalsanblas@yahoo.es or by sending a letter to Sunmar Spain, S.L., Calle Atocha nº 117, 28012 Madrid (Spain).
In this case, the User must indicate the right they wish to exercise and attach a copy of their ID or any other valid identification documentation that legitimizes them to do so, including one that allows for electronic identification.
If your rights are not effectively attended to, you may file a complaint with the Spanish Data Protection Agency.
Your commitment, the accuracy of the data you provide
The User declares that the personal data provided to Sunmar Spain, S.L. are truthful. As a User, you should know that you are solely responsible for any direct or indirect damage that could be caused to Sunmar Spain, S.L. as the owner of this website or to a third party if you send false data or data from third parties without their prior consent causing deception, harm, or damage.
In order to keep your data accurate and up-to-date, we ask the User to inform us of any changes that may occur in the data provided.
Consent of Minors
Sunmar Spain, S.L. prohibits the sending of personal data through this website or the means indicated on it by users under 14 years of age. In the event that Sunmar Spain, S.L. detects users who may be under the indicated age, it will not process their data or respond to their requests.
Sunmar Spain, S.L. reserves the right to request a copy of your ID or equivalent document to prove your legitimacy in case of having well-founded suspicions about the minority of the User.
Applicable Security Measures
In order to protect the personal data of users, Sunmar Spain, S.L. ensures and controls its data processors in the application of adequate technical and organizational measures according to the state of the art to protect personal data, taking into account the scope, context, and purposes of the processing, as well as the varying risks of probability and severity to the rights and freedoms of the data subjects, ensuring the confidentiality, integrity, availability, and resilience of the processing systems and services.
Our information security policies and procedures are regularly reviewed and updated to meet the needs of our business, technological changes, and regulatory requirements.
Applicable Legislation and Jurisdiction
Sunmar Spain, S.L. is based in Spain, so the content of this Privacy Policy has been drawn up under Spanish legislation and applicable regulations of the European Union.
By accepting this Privacy Policy, you agree that claims or complaints against Sunmar Spain, S.L. arising from or relating to the use of this website and more specifically to the processing of your personal data will be resolved by the competent court located in Madrid. If Sunmar Spain, S.L. had to make any kind of claim, it will do so before the competent court of the User’s domicile or in Madrid if they are legal entities or non-consumer professionals.
If the User accesses this site from a location outside Spain, they are responsible for complying with all relevant local and international laws.
Last Update
Privacy Policy last updated on 03/26/2025 
