Privacy policy

Privacy policy

This privacy policy is applicable to the information obtained through the reservations made on the website, which reserves the right to update it at anytime, as a result of business decisions or regulatory changes.

Through the assumption of the contents of this document, you tacitly express that the information you will provide us with, now or in the future, are correct and true, and that you commit to communicate any future changes on them. In the case of providing personal information about third persons, you commit to obtain their prior consent and to inform them about the contents of privacy.

In general, the fields of our forms marked as mandatory, should necessarily be filled to be able to process you reservations.

1.-Responsability in terms of data protection.

Except when indicated otherwise, the responsible for the processing data contained on the website is the company Basque Smart Country S.L, with registered office in Barrio Basaras nº 7, Larrabetzu, 48195 – Bizkaia – Basque Country. Phone: +0034 944564457 Email:

2.-Types of obtained information.

The data we process is that one obtained from:

-The forms you fill and the requests you enter to our website, for instance when you register on it, when joining our newsletter, booking a hotel or interacting with our social networks. We also process that data included in applications and requests received via email.
-From analytics and profiles obtained from the use of our websites by the customers, whether they are registered or not.

The data categories we process consist usually in:

-Personal information, such as the language, gendre, email,…
-Related with the use of the website, for instance the IP adress from which you connect to or the visited pages and other activites developed on the website. For those purposes we use cookies and similar technologies, which may imply the tracking of your navigation.
-Related with the history of your purchases and the group contacts.

3.-Destination of the data.

We process all the data of our customers and users for the following purposes.

-Maintain with them a fluent and more flexible relationship.
-Process their requests and deliver the contracted services.
-Evaluate the quality of our services. For this quality evaluation we may send you some satisfaction enquiries, althoug the filling of them is not mandatory.
-Comply with our legal requirements, for example in legal and accounting matters.

The data of the website users will be equally processed for the administration, management and control of the website and its restricted access areas, and for statistical purposes and the improvement of itself and the provided services.

This data will never be processed for commercial purposes out of the common contents and services provided by

4.-Entities to which we may communicate that data associated with you.

In general, we will only communicate your data when necessary for the process of your requirements, for the provision of contrated services or fulfill the legal obligations.

In particular:

-For the correct processing of the requested reservations, the data placed in these reservation will be communicated to the tourist services providers.

-We may also communicate this operation data to the platforms for the detection of frauds to detect and prevent fraudulent payments or reservations.

We may also go draw upon technological solutions or services provided by companies located outside of the European Economic Area to manage some functionalities of the website. In such case, we will take the appropiate actions to ensure a suitable protection level of your personal data.

In particular:

-We use different services provided by Google and its subsidiaries.

5.-Legal basis of the processes.

The basis for data processes is the management of the legal relationship that is established with you, the provision of the requested or contracted services and the fulfilment of the legal obligations, specially the applicable regulations in terms of accounting, taxes, tourist or security and cotroll of travelers matters.

The following processes are based on the existence of a legitimate interest:

-The management of the security on the website, as well as the adoption of measures for the detection and prevention of frauds, is based on the existence of our legitimate interest to ensure the security of our systems and the one of the transactions.
-The statistics production and quality control, are based on the legitimate interest to evaluate our services.
-The analysis of consolidated data of customers is based on our interest to process that information with internal administrative purposes.

The following purposes are based on your consent, although it does not mean that this consent will condition the provision of the contracted services:

-The performance of commercial profiles for the sending of offers and personalized commercial communications are based on the requested consent.
-The performance of navigation profiles based on the obtained data by using cookies or similar technologies.

6.-Data retention time.

In general, we will conserve your data during the life of the relationship you have with us, and above all during and before the end of the planned deadline in the applicable provisions, for exemple in accounting and taxes matters, and during the necessary time to response to potential responsabilities caused by the proccessing.

We will cancel your data once they are no longer necessaries or relevant for the aim they have been collected.

More specifically:

The access logs to restricted areas of the website will be cancelled a month after of its creation. The data related to the website navigation, will be cancelled once the connection is finalized and the statistics are made.

7.-What are your rights.

You have the right to obtain information about how we are processing your personal data and access them anytime.

Once registered on the website, you will be able to check your reservations as well as access to your profile and update the information you provided at the registration moment.

You may also request the data rectification, in the case they were inexact, or request they were filled, in the case they were uncompleted, as well as request its suppression when, among other reasons, the data will be no longer required to those purposes they were collected for.

Under some circumstances and reasons related with its particular situation, you will be equally able to oppose to the process of your data. In this case, we will end processing your data, except it is the case of imperative legitimate reasons that prevail over your interest or rights and liberties. We will do the same in the case of the formulation, performance or defense of complaints.

You may withdraw consent given for concrete purposes without affecting the legality of the process based on the consent previously to its removal.

To ask to be disenrolled of the data processes with commercial purposes you may:

-Update your preferences on your profile accessible from your account.
-Email to the following address:

You also have the right to present a complaint in front of the authority of the data protection. You may check the list and contact details of the European data protection agencies on the website of the European Commision:

To exercise your rights you should send us a application form accompanied by a copy of your identity card, passport or any other valid identifying document, via email, to the address described in paragraph 1

You may obtain some more information about your rights and how you can exercise them on the website of the Spanish Agency for the Data Protection or on the website of the data protection agency of your country.