Privacy Policy



1. Data controller

The data controller for the personal data collected through this website is:

ESTANCES I SERVEIS NRY I PIFARRE, S.L.NIF: B27576016Commercial name: Noray EstancesAddress: Passatge Sant Feliu, 17, 25527 La Vall de Boí, LleidaEmail: info@norayestances.comTelephone: 686 935 252 / 973 694 021

2. What personal data may we process?

Depending on how the user interacts with Noray Estances, the following categories of data may be processed:

First and last name.

Email address.

Phone number.

Accommodation you are interested in.

Planned arrival and departure dates.

Number of adults, children or infants.

Information voluntarily entered in the comments or message field.

Technical data related to website use and browsing.

Information generated through cookies or similar technologies, where the user has authorised their use.

Users are asked not to enter unnecessary sensitive information in free-text fields when submitting an enquiry.

3. Purposes of processing

3.1. Enquiries and requests for information

Information provided through forms, email or other contact channels is processed for:

respond to enquiries;

provide information about accommodation and services;

manage availability requests;

maintain the necessary communications with the person concerned.

3.2. Accommodation requests

When someone submits an accommodation enquiry, their data is processed to check availability, prepare an offer and contact the person concerned.

You cannot make or pay for a booking directly through the website.

Submitting the form is solely a request or enquiry.

3.3. Management of a potential contractual relationship

If a booking is subsequently confirmed, the necessary data may be used to manage the accommodation, assist the guest, process payments and invoicing, meet administrative obligations and handle other matters related to the provision of the service.

3.4. Compliance with legal obligations

Certain data may be processed when necessary to comply with applicable tax, accounting, administrative, security, tourism or other legal obligations.

3.5. Website analytics and improvement

Noray Estances uses Google Analytics to obtain statistical information about website usage, such as visits, pages viewed, device used and interactions with the website.

Where these technologies require consent, they will only be activated after the user has accepted them through the cookie management system.

Google Search Console can also be used to analyse the website’s technical performance and visibility in Google Search. Its use by the website owner does not necessarily involve installing additional cookies on the user’s device.

4. Legal basis for processing

The applicable legal bases may include:

Taking pre-contractual measures at the interested party’s request, when they request information, availability or a possible stay.

Performance of a contract, where a reservation or contractual relationship has been confirmed.

Compliance with legal obligations applicable to Noray Estances.

The user’s consent, when processing is based on express authorisation, particularly in relation to certain cookies or analytics technologies.

Legitimate interests, where necessary to ensure security, protect systems, manage incidents or defend Noray Estances’ rights, provided that the rights and freedoms of the people concerned do not override those interests.

5. Required data

Fields marked as required on forms are necessary to process the relevant request.

If the user does not provide this data, it may not be possible to deal with the request properly.

6. Accuracy of data

Users warrant that the information they provide is correct, complete and up to date.

If you provide another person’s data, you confirm that you have sufficient legal authority to do so and have informed them where necessary.

7. Minors

Forms for requesting accommodation or entering into a contractual relationship are intended for people aged 19 or over.

People under this age must not submit booking requests on their own.

8. Recipients of the data

As a general rule, personal data will not be disclosed to third parties, except where:

is necessary to provide the requested service;

there is a legal obligation;

is necessary for administrative, tax or accounting purposes;

service providers acting on behalf of Noray Estances as data processors are involved.

Technology providers may include:

Duda, as the platform used to host or manage the website;

Google, in connection with Google Analytics and other technical services used.

These providers may process certain information under their own contractual terms and data protection safeguards.

9. International transfers

Some technology providers may process information in countries outside the European Economic Area.

Where international data transfers take place, they will be carried out in accordance with the mechanisms and safeguards permitted under the General Data Protection Regulation, such as adequacy decisions or standard contractual clauses, where applicable.

10. How long do we retain your data?

Data will be retained only for as long as necessary to fulfil the purpose for which it was collected.

In particular:

Enquiries or requests that do not result in a contractual relationship will be retained for as long as reasonably necessary to manage them and deal with any potential issues.

Data relating to bookings and services provided will be retained for the duration of the contractual relationship and thereafter for the periods required by tax, accounting and administrative regulations, or to address any potential liabilities.

Data processed on the basis of consent will be retained until that consent is withdrawn, without prejudice to any applicable legal retention periods.

Once these periods have elapsed, the data will be deleted or blocked where legally required.

11. Rights of data subjects

Data subjects may exercise the following rights, where applicable:

access to their personal data;

rectification of inaccurate or incomplete data;

deletion of the data;

right to object to processing;

restriction of processing;

data portability;

withdrawal of consent.

To exercise these rights, you can send a request to:

info@norayestances.com

The request must contain sufficient information to identify the data subject and the right they wish to exercise.

Noray Estances may request additional information when necessary to verify the identity of the person making the request.

Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

12. Complaints to the supervisory authority

If someone believes that the processing of their personal data violates applicable regulations, they may lodge a complaint with the Spanish Data Protection Agency (AEPD).

This does not prevent you from contacting Noray Estances first in an attempt to resolve any issue.

13. Data security

Noray Estances implements appropriate and proportionate technical and organisational measures to protect personal data against loss, destruction, alteration, unauthorised access or improper disclosure.

However, no system connected to the Internet can guarantee absolute security.

14. Cookies

This website uses cookies and similar technologies.

Cookies that are not necessary for the website to function, including certain analytics cookies, may only be used where there is an appropriate legal basis.

Users can find detailed information and change their preferences through the Cookie Policy and the cookie settings panel.

15. Changes to the Privacy Policy

Noray Estances may amend this Privacy Policy to reflect changes in legislation, regulatory guidance, services or the technologies used.

Last updated: September 2026.