Legal texts

Hoteles Toledo's privacy policy

Privacy Policy

Last review date: May 21, 2022

We believe that your privacy is important. For the person responsible for this website, the fact that you read and show interest in this section shows that you are interested in it. You should do this every time you visit new websites, especially if they are going to ask you for personal information. Below, in this document, we explain what personal data we collect, on what basis, for how long it will be stored and aspects related to data protection regulations, in compliance with current legislation. We encourage you to read these terms carefully before providing your personal data. For minors under 14 years of age, the consent of parents or guardians is required for the processing of their data. If you are under 14, you should not leave your data on this website unless your parents authorize it. Under no circumstances will data relating to the professional or economic situation or the privacy of other family members be collected from minors without their consent. If you have any questions in this regard, please contact us through the email addresses of the data controller or, where applicable, the data protection officer. This person responsible assumes a permanent commitment to privacy and guarantees the best practices in the processing of your personal data. In compliance with the provisions of data protection regulations (EU Regulation 2016/679, of April 27, 2016), Restoledo SL (hereinafter, "The Owner Entity" or simply "The Owner"), Owner of the website (hereinafter, the “Website”), establishes the following Privacy Policy, which will continue in the processing of personal data. This policy is understood, in any case, without prejudice to the provisions of the corresponding Legal Notice / General Conditions and the corresponding Cookies Policy.

1. Responsible for the Treatment

Responsible for the Treatment: Restoledo SL

Address: Reyes Católicos 5, 45002, Toledo


Telephone: 925283535

We try to guarantee the privacy of the users of this website. You should know that we will never request personal information unless it is really necessary for the provision of services, we will never share it with third parties (except in certain cases in which it is essential and based on legitimate and previously informed situations) and we will never use your data for others. purposes that have nothing to do with the contractual relationship. This entity assumes the commitments of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, Regulation (EU) 2016/679 of the European Parliament and of the Council and Law 34/2002 , of July 11, on Information Society Services and Electronic Commerce (LSSICE or LSSI), as well as the regulations that develop or complement them. The data that may be requested from users of this Website through contact forms, those others provided by the mere fact of accessing the Website (cookies), the personal data that the user enters within the enabled sections or those provided Through the rest of the communication channels or channels enabled (for example, email) they will be processed by the indicated data controller.

2.Purposes of the treatment

It depends on the data processing carried out:

-By simply visiting the Website, there is certain information that is collected on the servers that provide hosting services. Among such information is information related to the IP address from which the Website is accessed. The purpose of the processing in this case is to facilitate your navigation on the website. We may also collect certain information (cookies), which we will process according to the specific Cookies Policy that you can consult.

-If you provide us with the data through one or some of the enabled forms, the purpose will be relative to that indicated in the corresponding form. For example, in the case of providing us with your data in contact forms, the purpose will be to respond, where appropriate, to the query made. If you use the reservation form, the purpose will be the management and, where appropriate, confirmation of the reservation, as well as compliance with the legal obligations associated with this action. If you include your data in the newsletter form, your data will be processed in relation to the periodic sending of information from our entity, via email. Finally, if you enter your data in the blog form, we may process your identifying data in relation to your comments, publishing them on the website.

-In particular, we inform you that in the case of entering your personal data in the reservation form, third-party companies that have provided us with the reservation engine intervene.

-If you provide us with personal data via email or through other means (traditional or not), in general we will process your data in relation to the management or query carried out. In compliance with Law 34/2002, on Information Society Services and Electronic Commerce, the Owner will not send commercial communications without identifying them as such and without prior information in this regard. For these purposes, all information sent to interested parties will not be considered commercial communication, provided that its purpose is to maintain the contractual relationship or respond to your request or other information related to your request - if applicable - and that is derive directly from this relationship.

-If you provide us with information through one or some of the social networks that this entity maintains and that are linked through this Website, this entity assuming the role of Controller of the data provided (for example, photos uploaded by we or third parties, comments that the interested party makes in relation to publications that we make, etc.), we will process the information exclusively in relation to your query, management or comment made, and always within the social network and in its context, Under no circumstances will this data be extracted unless we obtain consent to do so from the interested party. However, the use of these platforms is subject to full acceptance of their conditions, and this implies the processing of your data with conditions other than those set forth here. The official profiles on the social networks linked from this Website have been created so that you can better understand our activity and create an alternative channel of communication with people interested in our entity and the services we offer, but we decline responsibility for the processing of data that The companies that manage the aforementioned social networks do the same.

3.Period of retention of your data

It depends on the data processing carried out:

-The data related to the cookies existing on this Website have a retention period indicated in the Cookies Policy itself.

-The data that you send us through the means that this Website makes available (forms, email) will be kept for as long as the relationship with the interested party lasts or the interested party withdraws his consent, if applicable. Subsequently, we will retain the data depending on whether or not there is a legal obligation, in any case the minimum period required depending on the relationship or management carried out. For example, we will retain billing data for legal tax and accounting purposes for 6 years. There is also the 5-year term established by art. 1964 of the Civil Code (personal actions without special deadline). In the event of a room reservation, the record books of entry parties in hotel establishments will be kept for three years at the disposal of the state security forces and bodies.

-The data included in the social networks linked through this Website will be maintained by us until the interested party withdraws their consent. However, it is possible that the responsible entities keep this data according to other processing policies for which we are not responsible in any case.

4.Legitimacy for the processing of your data.

It depends on the data processing carried out: -The existence of one or more legal obligations that oblige us to process it. For example, the aforementioned tax obligation in relation to the invoices issued or the obligation derived from the conservation of entry data in hotel establishments (Organic Law 4/2015, of March 30, on the Protection of Citizen Security and Royal Decree 933/ 2021, of October 26, which establishes the obligations of documentary registration and information of natural or legal persons who carry out lodging and motor vehicle rental activities) -You have given us consent to process your data in the terms exposed, checking the corresponding acceptance box. -There is a legitimate interest for the treatment. For example, in the event that the interested party provides us with their data in relation to a task entrusted to us, we will process it because we understand that we have to fully respond to it.

5.Recipient of your data.

In addition to the Data Controller set out above, the data may be processed by other entities depending on the nature of the data processing:

-Certain companies responsible for the cookies that are hosted on your computer simply by visiting this Website may have information associated with your IP address, browsing habits, etc., as described in the corresponding Cookies Policy.

-Certain service companies related to this Website. For example, the entity that provides us with hosting and/or reservation services, entities with which we have regularized a data processor contract in the terms required by current legislation. In our case, we use the Amazon Web Services infrastructure, which is a global infrastructure. In the case of international data transfer, it will be based on the signing of standard contractual clauses. More information at

-By legal obligation, the Spanish Tax Administration Agency may also request information of tax significance, and we have the obligation to provide it. Or the state security forces and bodies in the development of the functions entrusted to them.

-In case of reservation, and in relation to guest registration: competent authorities in compliance with the provisions of Organic Law 4/2015, of March 30, on the Protection of Citizen Security and Royal Decree 933/2021, of March 26. October, which establishes the obligations of documentary registration and information of natural or legal persons who carry out lodging and motor vehicle rental activities.

6.Your Rights.

Any person has the right to obtain confirmation as to whether this entity is processing personal data that concerns them or not. Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims. In other circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In those cases in which you have given us consent, we additionally inform you that you have the right to withdraw it at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal. If you request it, this entity will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. You can also require us to have your data processed by another entity, this entity facilitating the portability of your data to the new controller. For this purpose, specific forms have been prepared (which are at your disposal and which you can request) so that you can exercise your rights of access, rectification, deletion, limitation of processing, opposition to processing, opposition to automated individual decision-making. including profiling and data portability. In any case, if you consider that these rights have not been adequately satisfied on our part, we inform you that you can file a claim with the control authority (Spanish Data Protection Agency, Jorge Juan 6, 28001, Madrid, or before its headquarters. electronic If you prefer, the interested party can send it by postal mail to the address listed in the heading, or by email to the indicated email, including a photocopy of your DNI/NIF or equivalent document to justify your identity and request the exercise of your rights. above mentioned.

7.Special reference to social networks

The Owner Entity maintains several pages and/or profiles on various social networks, linked through this Website. The Owner entity will not be responsible for what is published by third parties on the aforementioned social networks. The use and processing of data by third parties on the aforementioned social networks will be subject to general or particular conditions other than these. The Owner Entity recommends your careful reading and awareness in this regard. Our presence on the Internet includes a presence on the social network and on Instagram, both networks operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. You can search for us on the aforementioned social network and Click "like" on it. If you are logged in to Facebook, it will be able to assign the navigation to your Facebook account. Please refer to the purpose and scope of data collection and its processing and use by Facebook, as well as your rights in this regard and setting options to protect your privacy, in the Facebook privacy statement: http://www. By the mere fact of using this social network and communicating with us, you authorize us to use your personal data only through the platform of the aforementioned social network for the purposes of managing our professional page that we maintain on this social network and communications. that we maintain bidirectionally with our followers through chat, messages or other means of communication that Facebook allows now and in the future. Thus, (1) we will process your data within this social network to manage the list of people who like our page on Facebook and (2) you may receive information related to events, activities and promotions. Outside of these cases we will not use your data.

8.Cookies and other aspects.

This website includes an SSL certificate. This is a security protocol that ensures that your data travels completely and safely. In this entity we have assumed the appropriate security measures after the corresponding risk analysis carried out. Such security measures include, in particular, the encrypted transmission of data between your browser and our server. As a user, you are solely responsible for the veracity and correctness of the data you submit on this website. The Owner Entity will not accept any type of responsibility in this regard, ensuring the accuracy, validity and authenticity of the personal data provided. The Owner reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, the Owner will announce on this page the changes introduced with reasonable advance notice of their implementation. This Data Controller reserves the right to modify and/or update the information on data protection when necessary for correct compliance with the Data Protection Regulation. If any modification occurs, the new text will be published on this page, where you can access the current policy. In each case, the relationship with users will be governed by the rules established at the precise moment in which the website is accessed. For all purposes, the validity of the document can be checked in the header. We use Google's reCAPTCHA service to determine whether a person or computer is writing to our contact or newsletter form. The operator and the party responsible for the processing of personal data is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, United States. For more information about the privacy policy, how the data is processed and the service, please see: Google uses the following data to verify whether you are a person or a computer: IP address of the device used, our website that you visit and has the captcha included, date and duration of the visit, identification data of the type of browser and operating system used, Google account, Google login, mouse movements on surfaces of reCAPTCHA and tasks that require you to identify images. This involves the transfer of your data outside the European Economic Area. The privacy guarantees that this entity gives in this regard can be reviewed in its privacy policy (Standard Contractual Clauses). This website also includes a link to the WhatsApp instant messaging platform. You can consult its privacy policy at and at The person responsible for the services is Whatsapp Ireland Limited, part of the Facebook group of companies. Therefore, your data may be transferred to external countries, in particular the United States of America. According to its privacy policy, the guarantees given for said transfer are based on the assumption of standard contractual clauses or on adequacy decisions. Under no circumstances should this tool be used to send sensitive information, although the information is transmitted in encrypted form. We only recommend it for general queries regarding our entity. We will not be responsible for the data processing that WhatsApp carries out subsequently, we only provide a link through this website to facilitate contact with this entity through this instant messaging tool. On this website there are certain videos treated through YouTube. YouTube is a social network and video portal. The video portal is used to publish, review, rate and comment on video clips. The purpose of the integration on our website is to disseminate our content through the service. If you provide us with certain information based on comments on images or videos, your personal data will be treated under the privacy policy of this social network. Likewise, we will use the data of users who make comments only to manage and respond to the messages that we will exchange with them. The person responsible for the service is: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, United States. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, United States. For more information about the privacy policy, how data is processed and the service, please see: If buttons are integrated on our site web, YouTube may automatically download information technology content. The individual pages accessed by the Internet user can automatically send data to YouTube. Through this technical process, YouTube receives personal data, such as the person's IP address and browsing habits, to optimize advertising directed to the user. YouTube retains this information in the United States of America and may share it with third parties where appropriate. If the user is logged in to YouTube with their profile, YouTube recognizes the user for each activity. Personal data such as the IP address of the person concerned, clicks on pages, time and location of access, frequency of visits, referral links, tracking links and data on the duration of the stay on the website are sent. If the buttons are integrated on our website, YouTube can assign any activity carried out by the user to their profile, as well as store and process it. This involves the transfer of your data outside the European Economic Area. The privacy guarantees that this entity gives in this regard can be reviewed in its privacy policy. In relation to the cookies collected on this website, we refer you to our Cookies Policy.

Follow us!