Privacy Policy
This privacy policy was last updated on 26 October 2026 and applies to users of the alojamientosuniversitariosalfil.es website.
1. Data controller
RESYALMA NEO, SL.
VAT NO: B13760749
37 Calle Dr. Miguel Díaz Recio, Teatinos-Universidad, 29010 Málaga (Spain)
Telephone number: (+34) 952 215 013
Email: info@alojamientosuniversitariosalfil.es
2. Data we process
- Contact and registration forms: full name, telephone number, email address, message and, where applicable, the details of the parent or guardian, as well as the information required to process the registration or booking.
- Billing details, provided the booking or accommodation contract is finalised.
- Browsing data (IP address, cookie identifiers, device type and pages visited) collected via cookies, only when the user accepts them. Further information is available at the Cookie Policy.
3. Purposes and legal basis
- Answer enquiries received via online form, post or telephone. Legal basis: consent of the data subject (Article 6(1)(a) of the GDPR).
- Manage registrations, bookings and the accommodation contract. Legal basis: performance of a contract or the implementation of pre-contractual measures (Article 6(1)(b) of the GDPR).
- Issue invoices and fulfil accounting and tax obligations. Legal basis: legal obligation (Article 6(1)(c) of the GDPR).
- Website usage statistics using Google Analytics. Legal basis: consent (Article 6(1)(a) of the GDPR), which is given by accepting the analytics cookies.
- Protecting forms against spam and bots with Google reCAPTCHA. Legal basis: consent (Article 6(1)(a) of the GDPR), which is given by accepting marketing cookies. Without this consent, the form cannot be submitted; in that case, you can contact us by email or telephone.
- Display the 360° virtual tour (YouTube and Vimeo players) and customer reviews (Trustindex). Legal basis: consent (Article 6(1)(a) of the GDPR), which is given by accepting marketing cookies.
- Send information about our services, provided the user has given their express consent. Legal basis: consent (Article 6(1)(a) of the GDPR).
Consent may be withdrawn at any time, without this affecting the lawfulness of any processing carried out previously. Cookies can be managed via the Cookie Policy.
4. Minors
If the resident is under 14 years of age, the details must be provided by their parents or legal guardians. Where the form requests details of the father, mother or guardian, these are used solely to process the registration and to maintain contact in relation to the stay.
5. Retention period
- Enquiries: the time required to respond to them and, at the latest, one year thereafter.
- Registrations, bookings and contracts: for the duration of the relationship and, thereafter, for the statutory retention periods (six years for commercial purposes and four years for tax purposes).
- Google Analytics data: up to 14 months.
- Cookies: the period specified for each one in the Cookies Policy.
6. Recipients
We do not disclose data to third parties unless legally required to do so. In order to provide the service, some suppliers access data in their capacity as data processors or provide their services independently:
- SiteGround: web hosting.
- Google Ireland Limited and Google LLC: Google Analytics, Google reCAPTCHA and YouTube.
- Vimeo.com, Inc.: 360° virtual tour video player.
- Trustindex: displaying Google reviews on the website.
- Public authorities, courts and tribunals, where there is a legal obligation to do so.
7. International transfers
Google LLC and Vimeo.com, Inc. are based in the United States. Data transfers to these companies are covered by the European Commission’s adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework (Data Privacy Framework), under which both companies are certified, and, as an additional safeguard, by the standard contractual clauses approved by the European Commission. You can view the certification at dataprivacyframework.gov.
8. Users’ rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, as well as withdraw your consent, by writing to info@alojamientosuniversitariosalfil.es or by post to the data controller’s address, specifying the right you wish to exercise.
9. Complaints
If you feel that we have not dealt with your request correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), at www.aepd.es.
10. Safety
RESYALMA NEO, SL. implements the necessary technical and organisational measures to ensure the security of personal data and to prevent its alteration, loss, unauthorised processing or access.
11. Changes to this policy
We may update this policy to reflect changes in the law or to the website’s services. The date of the last update is shown at the top.