Last updated 23 October 2026

This privacy notice explains how we process your personal data when you visit the website, contact us or book a stay. We publish it as required by Articles 13 and 14 of the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR).


At a glance

  • The data controller, who decides how your data is used, is HOTEL SA BARRERA - Adults Only. If you have any questions, write to info@hotelsabarrera.com.
  • We use your data to respond to your requests, manage your booking and stay, and comply with legal obligations, such as guest registration.
  • If you have stayed with us, we may email you offers for similar stays. You can opt out at any time.
  • We do not sell your data. We do not make decisions about you based solely on automated processing.
  • You can ask us at any time to view, correct or delete your data. You can also object to certain uses of your data and lodge a complaint with the Data Protection Authority.


1. Data controller

The data controller is HOTEL SA BARRERA - Adults Only , CALLE de la BARRERA 12, Alaior, 07730, ES , VAT number , email info@hotelsabarrera.com.


2. What data we process

Data you provide.

  • If you contact us using the contact form or by email, we process your name, email address, message and phone number, if you provide one.
  • When you make a booking, we process booking details, including your first and last name, email address, phone number, dates, accommodation, number of guests, any special requests, and payment or guarantee details.
  • At check-in, we ask you for an identity document. We record the details of you and anyone staying with you, including minors, because we are required by law to report them to the Police Headquarters.

Data we receive from others.

  • If you book through a booking platform or travel agency, we receive your booking details from them.

Browsing data.

  • When you visit the website, the systems that run it record certain technical data, such as your IP address, browser and device type, pages visited and time of visit. Your IP address is also personal data.
  • The website also uses cookies and similar tools, described in section 8.

If you provide us with other people’s details, for example someone travelling with you, please show them this privacy notice.


3. Why we process your data, the legal basis and how long we keep it


Responding to your enquiries. We use the data you send us to reply and, if you ask, to prepare a quote for you. If you contact us about a stay, the legal basis is the need to respond to your request before entering into a possible contract (Article 6(1)(b) of the GDPR). For other enquiries, the legal basis is our legitimate interest in responding to you (Article 6(1)(f)). We keep messages for 12 months after our last exchange, unless they lead to a booking.


Managing your booking and stay. We use your data to confirm your booking, take payment or a guarantee, prepare for your stay and stay in touch with you before and during your stay. The legal basis is the contract (Article 6(1)(b)). We retain this data for the duration of our relationship and then for 2 years after your departure, to handle any requests or disputes. The retention period stated below under Tax and accounting applies to data included in tax documents.


Comply with legal obligations.

  • Guest registration. Article 109 of the Consolidated Public Security Act requires us to report the details of everyone staying with us to the police headquarters. We do this through the Italian State Police’s Alloggiati Web portal, either directly or through our property management system. For families and groups, we only need the details from one person’s ID document. We need the document to identify guests and submit this report. After submitting it, we do not keep any copies, either on paper or digitally. We keep only the submission receipt for five years, as required by the Minister of the Interior’s decree of 7 January 2013.
  • Tax and accounting. Where required by law, we issue invoices, receipts or other tax documents. We retain them, along with the data they contain, for the period required by civil and tax regulations. For businesses, this is 10 years (Article 2220 of the Italian Civil Code), unless tax regulations require a longer period.
  • Tourist tax and statistics. Where the local authority charges a tourist tax, we use the data needed to calculate and declare it. We also use data for tourism statistics that we are required by law to submit.

The legal basis is our legal obligation (Article 6(1)(c)). We retain the data for the period required by these rules.


Website security and operation. We use browsing data to keep the website running, identify errors and protect it from misuse. The legal basis is our legitimate interest in maintaining a secure, functioning website (Article 6(1)(f)). This data is retained only for as long as necessary for these purposes.


Protecting our rights. Where necessary, we use your data to assert or defend our rights, for example in the event of non-payment or a dispute. The legal basis is our legitimate interest (Article 6(1)(f)). We retain the necessary data until the dispute is resolved.


Offers for guests who have stayed with us. If you have stayed with us, we may send you offers for similar stays. We send them to the email address you gave us. The legal basis is Article 130, paragraph 4, of the Privacy Code (Legislative Decree 196/2003), which allows us to send these offers without your consent. You can opt out at any time using the link at the bottom of each email or by writing to info@hotelsabarrera.com. We keep your email address for this purpose until you opt out, and in any case for no longer than 24 months after your last stay. We will ask for your consent before sending any other promotional communications.


4. If you do not provide your data

The data required to make a booking and the data required by law are necessary. Without them, we cannot confirm your booking or accommodate you. In the contact form, only the marked fields are required; the others are optional.


5. Who receives your data

Only authorised staff at the property process your data. The following parties also receive data, only to the extent necessary.

  • Octorate, which provides our booking engine, channel manager, property management system and this website. Octorate’s technical providers also receive the data, for example the platform hosting the website. They process the data on our behalf as data processors.
  • The payment providers and banks we use to collect payment for your stay.
  • The portal or agency you booked through, if you made your booking through them.
  • Our email provider and the consultants who assist us, such as our accountant, who are bound by confidentiality.
  • Authorities to whom we are legally required to disclose data, such as the police headquarters, municipality, Italian Revenue Agency and statistical offices.

We do not sell your data or publish it.


6. Data outside the European Economic Area

Some technical providers, such as the provider of the platform hosting the website, also process data outside the European Economic Area (the European Union, Iceland, Liechtenstein and Norway), for example in the United States. In these cases, the transfer is protected by an adequacy decision from the European Commission or by standard contractual clauses approved by the Commission. For the United States, the adequacy decision is the one under the Data Privacy Framework and applies to certified companies. You can ask us for information and a copy of the safeguards by writing to info@hotelsabarrera.com.


7. Your rights

You can exercise these rights at any time and free of charge.

  • Access. You can find out whether we process data about you and receive a copy.
  • Rectification. You can ask us to correct or complete your data.
  • Erasure. You can ask us to delete your data, for example when it is no longer needed, except for data we are required by law to keep.
  • Restriction. You can ask us to restrict the use of your data, for example while we check whether it is accurate.
  • Data portability. You can receive the data you provided for a contract or with your consent in a commonly used, machine-readable format. Where technically possible, you can also ask us to send it to another controller.
  • Withdrawing consent. If processing is based on your consent, you can withdraw it at any time, without affecting what was done before.


Right to object. You can object at any time to processing based on our legitimate interest, on grounds relating to your particular situation. You can always object to email offers without giving a reason, and you will no longer receive them.


How to exercise your rights. Write to info@hotelsabarrera.com. We’ll respond within one month. If your request is complex, or if we receive many requests, we may take up to two additional months. In that case, we’ll let you know within the first month and explain why. If we’re unsure of your identity, we may ask you for some additional information to verify it.


Complaints. If you believe we are handling your data improperly, you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the supervisory authority in the EU country where you live or work.


Automated decisions. We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.


8. Cookies

This website uses technical cookies that are necessary for it to function and do not require consent. We use other cookies and third-party content, such as maps, videos or non-anonymous statistics, only if you give your consent via the banner shown on your first visit. Some content, such as maps, loads only when you click. You can change your choices at any time using the cookies link at the bottom of the page.

The booking window is provided by Octorate and may use its own technical cookies to complete your booking. Social media links take you to other companies' websites, which have their own privacy policies.


9. Security

We protect your data with appropriate technical and organisational measures, such as an encrypted website connection and access limited to authorised personnel. If a personal data breach is likely to pose a high risk to you, we will notify you as required by the GDPR.


10. Changes

We may update this privacy notice, for example if laws or the services we use change. The current version is always available on this page, with the date of the last update at the top.