Privacy notice under Articles 13/14 of the RGPD and the LOPDGDD 3/2018, following the AEPD (Agencia Española de Protección de Datos) two-layer model (short layer + full layer) — required for any processing of personal data: bookings/reservations, Wi-Fi, loyalty programmes, marketing, CCTV/video-surveillance.
⚠️ This is a blank template, not legal advice: check the wording with a lawyer and adapt it to your jurisdiction and your case.
This template has no optional clauses: the text is the same for everyone.
Required fields not filled: 12. The PDF will have blank lines in their place to fill in by hand.
Click a field label in the text and type, or use the form. Empty fields become blank lines in the PDF.
PRIVACY POLICY (POLÍTICA DE PRIVACIDAD)
(NIF/CIF ), Effective date:
This notice explains how (the "Company", responsable del tratamiento / data controller) collects, uses and protects personal data, in accordance with Articles 13 and 14 of the RGPD (Reglamento General de Protección de Datos) and the Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD), following the two-layer model recommended by the AEPD (Agencia Española de Protección de Datos): a short, immediate-layer summary (this notice) plus a fuller layer available on request or by link.
1. RESPONSIBLE PARTY 1.1. is the data controller (responsable del tratamiento) for the processing described in this notice. 1.2. Data Protection Officer (DPD), if appointed:
2. PURPOSES AND LEGAL BASIS 2.1. Purposes: 2.2. Legal basis:
3. DATA COLLECTED 3.1.
4. RECIPIENTS AND INTERNATIONAL TRANSFERS 4.1. 4.2. Transfers of personal data outside the EEA require either an adequacy decision or appropriate safeguards (e.g. EU standard contractual clauses).
5. RETENTION 5.1.
6. YOUR RIGHTS (DERECHOS ARSOPOL) 6.1. 6.2.
7. COOKIES AND TRACKING 7.1.
8. CONTACT US 8.1. Questions about this notice, or requests to exercise your rights, may be sent to .
⚠️ If CCTV/video-surveillance, a loyalty programme, or online booking/Wi-Fi data is used, describe it explicitly in section 3 above and record it in the internal registro de actividades de tratamiento (RGPD art. 30) — this is typically the first document the AEPD asks for at inspection. In Catalonia, remember the parallel Catalan-language requirement for consumer-facing notices under the Codi de consum.
This is a boilerplate template, not legal advice. Spanish employment, consumer-protection and data-protection law (Estatuto de los Trabajadores "ET", the applicable PROVINCIAL convenio colectivo de hostelería/comercio, the sector-wide ALEH VI framework agreement, RGPD/LOPDGDD 3/2018, Regulation (EU) No 1169/2011 "INCO") is highly procedural, includes fixed statutory calendars and changes frequently — statutory figures (SMI, convenio pay tables, LISOS sanction amounts) are re-indexed periodically. Have this document reviewed and adapted by a Spanish employment/legal advisor (abogado laboralista / gestoría) and verified against the current provincial convenio and rates before use. In Catalonia, under the Codi de consum de Catalunya (Ley 22/2010, art. 128-1), documents intended for consumers — price lists, terms of sale, mandatory notices — must be available at least in Catalan; where a Catalan-language version of this document is also used, that version prevails in case of conflict for consumers in Catalonia.
2 of 14 fields are taken from the company, employee or counterparty record, the questionnaire can be dictated to the AI, and the finished document comes with a number, a PDF and an acknowledgement record.