In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform you that the personal data provided through the website chinitasurbanrooms.com and the contact channels of Chinitas Urban Rooms will be processed by:
Data Controller: HISTÓRICO DE NOCHE, S.L. Tax ID No.: B70889191 Registered address: Pasaje Chinitas 3, 29015 Málaga (Spain) Telephone: +34 951 13 63 70 Email: centro@grupochinitas.com Company registration: Málaga Commercial Registry, Section 8, Sheet MA-180782
For the purposes of this policy, when we refer to Chinitas Urban Rooms, we mean the hotel establishment managed by HISTÓRICO DE NOCHE, S.L., part of Grupo Chinitas.
2. Data we process and how we obtain it
We may process the following categories of data:
Identification and contact details: name, surname, email address, telephone number, country of residence.
Booking and stay details: dates, number of guests, room type, special requests, stay history.
Billing details: Tax ID/National ID number where applicable, address and any data necessary to issue an invoice.
Financial and payment details: amounts, payment status, token or masked card number where applicable as a guarantee. We do not store the CVV under any circumstances.
Browsing data: IP address, device identifiers, pages visited and usage events according to the cookies accepted.
Communication data: messages sent via the contact form, email or telephone.
Special categories of data (only if you provide them voluntarily): allergies or accessibility needs, used solely to handle the specific request made.
The data is obtained:
Directly from you through the website, contact form, email, telephone or the establishment’s reception.
From third parties managing your booking: agencies, booking platforms or OTAs.
From technical providers essential for the operation of the service: booking engine, payment gateway and channel manager.
3. Purposes and legal bases for processing
3.1. Management of enquiries and contact To respond to requests for information, queries and general communications.
Legal basis: the user’s consent and/or pre-contractual measures.
3.2. Management of bookings and provision of accommodation services To process bookings, confirmations, modifications, cancellations, check-in/check-out and customer service during the stay.
Legal basis: performance of the contract or pre-contractual measures.
3.3. Invoicing, payments and administrative management Issuing invoices, managing payments, guarantees and internal accounting.
Legal basis: performance of the contract and compliance with legal, tax and accounting obligations.
3.4. Traveller registration and compliance with legal obligations Communication of data to the competent authorities regarding public security and traveller control where required.
Legal basis: compliance with a legal obligation.
3.5. Operational communications about the booking and stay Sending confirmations, reminders, practical accommodation information and operational notices by email, SMS or telephone.
Legal basis: performance of the contract and legitimate interest in ensuring the proper provision of the service.
3.6. Sending commercial communications Sending offers, news and promotions from Chinitas Urban Rooms and Grupo Chinitas.
Legal basis: the user’s consent or legitimate interest for communications to customers about similar services, always offering the option to unsubscribe.
Unsubscribe: you may unsubscribe at any time by writing to centro@grupochinitas.com.
3.7. Website security and fraud prevention Maintaining the security of the website, preventing misuse, attacks and unauthorised access.
Legal basis: the legitimate interest of the data controller.
3.8. Analytics, measurement and cookies Usage statistics and improvement of the website chinitasurbanrooms.com. Legal basis: the user’s consent when accepting analytics or marketing cookies. See the Cookies section below.
4. Data recipients
Your data may be disclosed to:
- Public authorities where there is a legal obligation, such as traveller registration.
- Financial institutions and payment gateways to manage payments and refunds.
- Technology providers necessary for operations: booking engine, web hosting, email and technical support.
- Booking platforms and agencies when the booking is made through these channels.
- Accounting and tax advisors for compliance with accounting and tax obligations.
Data will not be transferred to third parties for purposes other than those indicated, unless there is a legal obligation or the user’s express consent.
5. International transfers
As a general rule, data is processed within the European Economic Area. However, some technology providers, such as analytics or messaging tools, may be located outside the EEA. In such cases, appropriate measures are applied in accordance with the GDPR, including standard contractual clauses or other valid mechanisms.
6. Retention periods
- Bookings, stays and invoicing: for the time necessary to provide the service and for the applicable legal, tax and accounting periods.
- Traveller registration: for the period required by the applicable regulations.
- Enquiries and forms: for the time necessary to respond to the request and for the limitation periods of any potential liabilities.
- Commercial communications: until you withdraw your consent or request to unsubscribe.
- Browsing data and cookies: as indicated in the Cookies section of this document.
7. User rights
You may exercise the following rights in relation to your personal data:
- Access: to know what data we process about you.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request the deletion of your data where applicable.
- Objection: to object to the processing of your data.
- Restriction: to request the restriction of processing in certain cases.
- Portability: to receive your data in a structured format and transfer it to another controller.
- Withdrawal of consent: at any time, without retroactive effect on previous processing.
To exercise any of these rights, please send an email to centro@grupochinitas.com indicating the right you wish to exercise and proving your identity.
If you believe that the processing does not comply with current regulations, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8. Third-party data
If you provide data relating to other people — for example, guests accompanying you during the stay — you declare that you have their authorisation and that you have informed them of the content of this Privacy and Cookie Policy.
9. Security measures
HISTÓRICO DE NOCHE, S.L. applies appropriate technical and organisational measures to guarantee the confidentiality, integrity and availability of personal data, preventing its alteration, loss, processing or unauthorised access in accordance with the requirements of the GDPR.
COOKIE POLICY
10. What are cookies?
A cookie is a small file that is sent together with the pages of the website chinitasurbanrooms.com and stored by your browser on the hard drive of your computer or other device. The stored information may be returned to our servers or to third-party servers during a subsequent visit.
In addition to cookies, we use other similar technologies:
Scripts: code fragments that allow the website to function correctly and interactively, executed on our server or on your device.
Web beacons/pixels: small invisible elements on a web page that allow traffic and user behaviour to be monitored.
11. Types of cookies we use
11.1. Technical or functional cookies Necessary for the proper functioning of the website. They allow your preferences to be remembered between visits. They may be installed without prior consent as they are essential for the provision of the service.
11.2. Statistics or analytics cookies They collect anonymous information about how users use the website in order to improve its operation and content. They require your consent.
11.3. Marketing and tracking cookies Used to create user profiles and display relevant advertising on and off the website. They require your express consent.
12. Specific cookies used on chinitasurbanrooms.com
| Service | Type | Purpose |
|---|---|---|
| WordPress | Functional | Basic operation of the website |
| Elementor | Anonymous statistics | Improvement of the design and operation |
| Google reCAPTCHA | Functional / Marketing | Security in forms |
| Google Maps | Marketing | Display of maps and location |
| Complianz | Functional | Cookie consent management |
| Google Analytics | Statistics | Measurement of traffic and behaviour |
13. Consent management
When you visit chinitasurbanrooms.com for the first time, an informative banner about the use of cookies will be displayed. By clicking “Accept” or “Save preferences”, you accept the use of the selected cookie categories as described in this policy.
You may modify your cookie preferences at any time by accessing the settings panel available in the footer of the website.
Manageable categories:
- Functional: always active, as it is necessary for the operation of the website.
- Statistics: can be enabled/disabled.
- Marketing: can be enabled/disabled.
14. Enabling, disabling and deleting cookies
You can manage cookies directly from your browser:
- Chrome: Settings → Privacy and security → Cookies
- Firefox: Options → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Privacy, search and services → Cookies
Please note that disabling certain cookies may affect the proper functioning of chinitasurbanrooms.com. If you delete cookies from your browser, your preferences will be requested again on your next visit.
15. Changes to this policy
We may update this Privacy and Cookie Policy to adapt it to regulatory changes or service improvements. The “Last updated” date will always indicate the current version. We recommend consulting it periodically.
16. Contact
For any query, rights request or comment about this policy:
HISTÓRICO DE NOCHE, S.L. — Chinitas Urban Rooms Address: Pasaje Chinitas 3, 29015 Málaga (Spain)
Website: chinitasurbanrooms.com Email: centro@grupochinitas.com Telephone: +34 951 13 63 70
For complaints to the supervisory authority: Spanish Data Protection Agency (AEPD) www.aepd.es
Last updated: April 2026 Data Controller: HISTÓRICO DE NOCHE, S.L.
