Last updated: 1 October 2026
This policy explains what personal data we process through this website, why, and what rights you have. It is governed by Andorran Law 29/2021 on the protection of personal data and, where applicable, Regulation (EU) 2016/679 (GDPR).
1. Data controller
- Controller
- Hotel Espel
- Address
- Plaça de la Creu Blanca, 1 · AD700 Escaldes-Engordany · Andorra
- hotelespel@andorra.ad
- Phone
- +376 820 855
2. What data we process and why
Contact form
If you write to us through the form, we process your name, email, phone number (optional), subject and message, solely to reply to your enquiry.
- Legal basis: your consent when submitting the form and, if your enquiry is about a booking, taking pre-contractual steps at your request.
- Retention: for as long as needed to handle your enquiry.
Bookings
Bookings are managed on an external provider's booking engine. We process the data you enter there to manage your stay (booking, invoicing and legal obligations such as guest registration), and the provider acts as a data processor on behalf of the hotel.
Email and phone
If you contact us directly by email or phone, we use your data only to handle your request.
Analytics and campaign measurement
Only if you accept cookies, we use Google Analytics and Google Ads to understand how the website is used and whether bookings come from our ads. Details are in the cookie policy.
- Legal basis: your consent, which you can withdraw at any time through “Cookie settings” in the footer.
We do not use your data to send advertising, and we do not build profiles.
3. Recipients
We do not share your data with third parties unless required by law. The providers that serve us (website and email hosting, and the booking engine) have access to it only to the extent necessary. If you accept cookies, so does Google Ireland Limited, which provides our analytics and measurement services.
4. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, by writing to hotelespel@andorra.ad. We will reply within the period set by law.
If you believe we have not handled your rights properly, you may lodge a complaint with the Andorran Data Protection Agency (www.apda.ad).
5. Security
We apply appropriate technical and organisational measures to protect your data. The website is served over an encrypted connection (HTTPS).
6. Changes to this policy
We may update this policy if our processing or the law changes. The date of the last update is shown at the top of the page.