Privacy policy


Pursuant to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, relating to the protection of natural persons with regard to the processing of personal data and the free movement of these data and by which Directive 95 /46/CE (General Data Protection Regulation) is repealed, we inform you that the person responsible for the processing of your personal data is:

MALBA NEPTUNO, SL informs you that it is the owner of the websites: with CIF B66393364, registered in the Mercantile Registry of Barcelona, ​​and registered office at Carrer Sant Josep 82, postal code 08370 Calella, province of Barcelona. The email address to contact the company is:

and the purposes for which we process your data according to the section in which your data is requested, are:

“Customer service/Contact”: The data you provide will be processed in order to respond to your queries or requests and provide the services requested by you.

“Subscription to the Newsletter”: We inform you that the data you provide will be processed for the purpose of managing the sending of commercial information via ordinary mail, e-mail, SMS, about the products and services offered by Malba Neptuno SL .

“Reservations”: The personal data provided in this section will be processed for the purpose of managing the reservations requested by you. In all cases, the data provided may be processed for the purpose of compiling internal statistics to improve our services.

Once in our facilities and for the provision of services during your stay, your data will be processed in order to give you the best service requested by you within our range of services in the area selected by you (excursions, spa, wellness, etc.).

Retention period: The personal data provided will only be kept as long as our commercial relationship is maintained, and will be blocked once it is terminated and during the period established by the legal prescriptions, they can only be made available to Courts and Tribunals to attend to possible claims . Once the blocking is complete, this data will be permanently deleted.

The data provided for sending commercial information will be kept for this purpose as long as you do not request the cessation of advertising messages.

The legal basis: The fulfillment of the contractual obligations assumed by you when requesting our services, whether hotel or extra.

For the rest of the purposes, the personal data provided will be treated in accordance with your consent. You will have the right to withdraw your consent at any time. The withdrawal of consent will not affect the legality of the treatment based on the consent prior to its withdrawal.

Children under the age of 14 cannot give their consent for us to collect and process their personal data; only their legal representatives (parents or guardians) can do so on their behalf.

Security measures and duty of confidentiality: In accordance with that established by General Regulation-EU-2016/679 of the Parliament and Council of Europe on the Protection of Personal Data, approved on April 27, 2016, the LOPD 3 /2018, on the Guarantee of Digital Rights, Law 34/2002, on Information Society Services and Electronic Commerce, and Law 9/2014, General Telecommunications, of May 9, MALBA NEPTUNO, SL informs the users of its websites that we are obliged to keep professional secrecy about the personal data collected by the company through the forms on its pages, this obligation will continue even after our commercial or contractual relationship has ended, and under no circumstances will we be able to make public the personal data of visitors and customers on the website without their consent.

Transfers to third parties: Your data will not be transferred to third parties unless legally required, or to carry out the contractual provision of services requested by you.

The data affected: will be the minimum necessary to fulfill the purposes for which they have been collected. As for the categories, it is identification data (name, surname, ID, passport, mobile phone, address, email), as well as bank data (credit/debit card).

International Transfers: No international transfers are made.

Exercise of rights: To exercise the rights of access, which allows the web user, to know what personal data the administrator of this page has and in such case he will answer within 30 days, as long as he keeps the data , rectification, which allows errors to be corrected, data to be modified that are inaccurate or incomplete and to guarantee the certainty of the information, opposition that can be requested and obtained so that it does not carry out the data processing, deletion that allows the data to be deleted inadequate or excessive, limitation, so you can request that the processing of your data be limited when you have exercised your right to rectify your personal data, and portability, so that the user can obtain a copy of the personal data you have provided on the website in order to be able to transmit them to other services, these rights may be exercised by any means that records their transmission and receipt to the email address:, providing a photocopy of documentation that proves your identity.

As long as you do not tell us otherwise, we will understand that your data has not been modified, that you undertake to notify us of any variation and that we have consent to use it in order to strengthen the relationship between the parties.

The transmission of your data through the form(s) on our website will be mandatory subject to having read/accepted the Privacy Policy, by means of a mandatory check-box at the foot of the form.

Scroll to Top