Privacy Policy

Last updated: 2026-11-02

1. Data controller

The controller of the personal data collected on nisakihotels.com is Cristian Cruz Ramos, NIF 27202129Y, Carrer del Tinent Flomesta, 38, Sants-Montjuïc, 08028 Barcelona (Spain).

If you have any questions about this policy or about your data, you can write to us through the contact page.

2. What data we process and why

2.1 Browsing the site

When you visit nisakihotels.com, the server hosting the site automatically records some technical data: IP address, date and time of the request, page requested, referring page, browser type and device type. We need this data to run the site, protect it from abuse and attacks, and fix technical problems. Legal basis: our legitimate interest in the security and proper functioning of the site (Article 6(1)(f) of Regulation (EU) 2016/679 (the GDPR)).

The site's traffic passes through Cloudflare, Inc., which acts as a content delivery network and protects the site against cyberattacks: to do so, it processes the IP address and the technical data of the request. Legal basis: legitimate interest in the security and speed of the site.

2.2 Contact form

If you write to us through the contact page, we process your name, email address, the subject and text of your message, and the language of the page, solely in order to reply to you. Legal basis: your request and our legitimate interest in replying (Article 6(1)(b) and Article 6(1)(f) GDPR). The message reaches us by email from the site's server and is not used to send you advertising.

To block spam, the form uses Google reCAPTCHA (Google Ireland Limited), which assesses whether a submission comes from a person or from an automated program: to do so, Google collects data about your device and how you use the page, including your IP address. Legal basis: legitimate interest in the security of the form. Google's privacy policy and terms of service apply.

2.3 Visitor statistics

We use Google Analytics 4 (Google Ireland Limited) to find out how many people visit the site, which pages they arrive on, which content they read and which links they click (for example, links to booking sites). Google Analytics uses cookies and collects data about your device and your browsing; in Google Analytics 4, IP addresses are neither logged nor stored. We do not use this data to identify you or for personalised advertising. Details of the cookies are in the cookie policy.

2.4 Links to booking sites and affiliate partners

nisakihotels.com is funded through affiliate marketing: some links lead to booking or travel service sites and, if you book, we may receive a small commission at no extra cost to you. These links go through the Travelpayouts affiliate platform, which records the click and passes it on to the partner's site (accommodation booking platforms and other travel service platforms) so that any booking can be attributed. On our site, Travelpayouts loads a script that recognises these links when you click them.

When you open one of these links, you enter the partner's site: from that moment on, any data you enter (for example, to make a booking) is processed by the partner as an independent controller, in accordance with its own privacy policy. We do not receive your booking or payment data: we only receive aggregated data on commissions.

2.5 Maps

The maps on the listings use OpenStreetMap tiles, downloaded from the servers of the OpenStreetMap Foundation (United Kingdom) when the map is displayed: to send them to you, those servers receive your IP address and the technical data of the request. The maps do not use cookies.

3. Cookies

The site does not use its own cookies to profile you. Which cookies may be used, by whom and how to refuse them is explained in the cookie policy.

4. Who we share your data with

We do not sell your data. Solely for the purposes set out above, your data may be processed by the providers who help us run the site: the provider of the server hosting the site, Cloudflare, Google (reCAPTCHA and Google Analytics), Travelpayouts and partner sites when you open one of their links, and the OpenStreetMap Foundation for the maps. We may disclose data to the authorities where required by law.

Some of these providers are based, or have servers, outside the European Economic Area (for example in the United States or the United Kingdom). In these cases, the transfer is based on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework for companies that participate in it, or the decision on the United Kingdom) or on the standard contractual clauses approved by the Commission.

5. How long we keep your data

• Technical server logs: a few weeks at most, unless they are needed to investigate an attack or abuse.
• Contact form messages: as long as needed to reply to you and handle your request, then 24 months at most.
• Google Analytics data: according to the retention period set in Google Analytics, 14 months at most.

6. Your rights

You can ask at any time for access to your data, rectification, erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest. To exercise these rights, write to us through the contact page: we will reply within one month.

If you believe that the processing does not comply with the law, you can lodge a complaint with the supervisory authority: in Spain, the Agencia Española de Protección de Datos (www.aepd.es), or the authority of the EU country where you live.

7. Children

The site is not aimed at children under 14 and we do not knowingly collect their data.

8. Changes

We may update this policy when the services used by the site or the law change. The date of the last update is shown at the top.