Last updated: 22 October 2026.
This policy explains how we process personal data provided through the Hotel Royal website, when you contact the hotel or when you make a booking.
Company name: Asonipse Bedrooms S.L.
Hotel trading name: Hotel Royal.
Spanish tax identification number (NIF): B21654512.
Registered office: Calle Madre Petra, 7, 29400 Ronda, Málaga, Spain.
Data protection contact email: administracion@amarantastays.com.
Telephone: +34 608 454 005.
Website: https://hotelroyalronda.com/.
For booking enquiries, please email reservasroyal@amarantastays.com.
Depending on your relationship with the hotel, we may process:
Identity and contact details: name, surname, email address, telephone number and postal address.
Booking information: dates of stay, number of guests, requested services and related correspondence.
Billing and payment information: the details required to collect payments, issue invoices or process refunds.
Information required under accommodation regulations: details that must be collected to meet guest registration and reporting obligations.
Technical browsing data: IP address, access logs and, where applicable, information collected through cookies in accordance with your selected preferences.
We only request the information needed for each purpose. Please avoid including sensitive personal information in free-text fields.
We use your details to respond to messages, provide information and deal with requests.
Where an enquiry relates to a potential booking or an existing stay, processing is necessary to take steps at your request before entering into a contract or to perform that contract.
For other general enquiries, we rely on our legitimate interest in responding to communications we receive.
We process personal data to manage bookings, amendments, cancellations, assistance during your stay, payments and refunds.
Our lawful basis is the performance of a contract or taking steps at your request before entering into one.
We process the information needed to meet tax, accounting and guest registration requirements, and to respond to requests from the competent authorities.
Our lawful basis is compliance with the legal obligations applicable to the hotel.
We may use the information necessary to prevent unauthorised access, investigate incidents and establish, exercise or defend legal claims.
Our lawful basis is our legitimate interest in protecting our services, systems and rights, while respecting the rights of the individuals concerned.
If you choose to receive news or offers through an option provided for that purpose, we will use your details with your consent.
You can withdraw your consent at any time by emailing administracion@amarantastays.com or using the unsubscribe option included in each communication. Withdrawal will not affect the lawfulness of any processing carried out before you withdrew your consent.
Processing that requires consent will only take place once you have given it through the cookie settings panel. Further information is available in our Cookie Policy.
Retention periods depend on the purpose of processing:
Enquiries: for as long as necessary to respond to and deal with your request.
Bookings and stays: throughout the contractual relationship and subsequently for the applicable statutory retention and limitation periods.
Billing and accounting: for the periods required under tax and commercial legislation.
Guest registration: for the period required by the applicable regulations.
Marketing communications: until you withdraw your consent or unsubscribe.
Cookies: for the periods specified in our Cookie Policy.
Where required by law, data will be retained with access restricted solely to addressing potential legal liabilities before being permanently deleted.
Where necessary for the purposes described above, personal data may be accessed by:
Website hosting, maintenance and IT support providers.
Booking system and hotel management software providers.
Email and communications service providers.
Financial institutions and payment service providers.
Advisers and professionals involved in accounting, tax or legal matters.
Public authorities, courts and other competent bodies where disclosure is legally required.
Providers processing personal data on behalf of Asonipse Bedrooms S.L. must do so under an appropriate data processing agreement. Other organisations may act as independent data controllers where this follows from the nature of their services or their legal obligations.
[TO BE COMPLETED BEFORE PUBLICATION: check whether booking, hosting, email, analytics or other service providers allow personal data to be accessed or processed outside the European Economic Area. Where applicable, identify the providers, countries, relevant safeguards and how to obtain a copy of those safeguards. If no international transfers take place, state this expressly once verified.]
Subject to the conditions established by data protection law, you may request:
Access: confirmation of whether we process your personal data and information about that processing.
Rectification: correction of inaccurate or incomplete information.
Erasure: deletion of your personal data where applicable.
Objection: to object, on grounds relating to your particular situation, to processing based on legitimate interests.
Restriction: limitation of processing in the circumstances provided for by law.
Data portability: receipt of the personal data you have provided in a structured format where the legal requirements are met.
Withdrawal of consent: withdrawal of permission previously given.
To exercise your rights, email administracion@amarantastays.com, explaining your request. We will only ask for additional information to verify your identity where there are reasonable doubts about it.
You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) through its website: https://www.aepd.es/.
Fields marked as mandatory are necessary to deal with your request or provide the service. If you do not supply this information, we may be unable to proceed.
If you make a booking on behalf of other people, you must inform them of this policy and have a lawful basis for providing their personal data. Any information about children required for their stay must be provided by their legal representatives or an authorised person.
Appropriate technical and organisational measures will be implemented, taking account of the risks, to protect personal data against unauthorised access, loss, alteration or improper disclosure.
This policy may be updated to reflect changes to our services, data processing activities or applicable legislation. The published version will show the date of its latest update.