Legal texts

Pensió La Creu's privacy policy

In compliance with current regulations on data protection, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, known as the General Data Protection Regulation (RGPD or GDPR) and the Organic Law 3/2018 of December 5 (LOPDGDD), we inform you that the Data Protection Policy and Privacy Policy of our company, regarding the processing of your personal data, is the following:


The person responsible for the processing of personal data is the natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of processing.

In this case, the data of the data controller are the following:

Identity: Gall-Bru S.L.

VAT number: B-25299447

Postal Address: Carrer Major, 1-3, 25580 Esterri d'Àneu

Telephone: (+34) 973 62 64 37

Email address:

PENSIÓ LA CREU as responsible for the data and the website, in accordance with current legal regulations, and specifically, with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 regarding the protection of natural persons in terms of the processing of personal data and the free circulation of these data (RGPD or GDPR), as well as Law 34/2002, of July 11, on Company Services of Information and Electronic Commerce (LSSICE), we inform you that we have implemented appropriate technical and organizational measures, according to the state of the art and the cost of its application with respect to the risks and the nature of the personal data processed, to guarantee and protect the confidentiality, integrity and availability of your personal data.


Personal data is any information about an identified or identifiable natural person ("data subject"); an identifiable natural person is any person whose identity can be determined, directly or indirectly, in particular by means of an identifier, such as a name, an identification number, location data, an online identifier or one or more elements of identity physical, physiological, genetic, psychological, economic, cultural or social of said person.

There is a wide variety of information that is considered personal data, for example, the name, contact information, identification number, IP of the computer, etc.

For more information, you can consult the website of the Spanish Data Protection Agency or the Catalan Authority for the Protection of Dades, among others.


Processing of personal data is considered to be any operation or set of operations carried out on personal data or sets of personal data, whether by automated procedures or not, such as collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of authorization of access, comparison or interconnection, limitation, deletion or destruction of the data.


For what purpose do we process your personal data?

The personal data provided by the interested parties will be used exclusively for the following purposes:

The company informs you that it will not process your personal data for any other purpose except those included in this section, except in cases where there is a legal obligation or judicial requirement.

Your personal data will not be subject to decisions based on automated processing that have legal effects for the interested party.

How long will we keep your personal data?

The personal data that you have provided us will be kept for the time necessary to carry out the requested or contracted service, and up to a maximum period of 5 years from the last confirmation on your part of the existence of an interest in us keeping your data. .

This is understood without prejudice to a possible longer conservation for the purposes of eventual compliance with legal obligations and for the exercise and monitoring of legal and judicial actions that may be relevant.

After the indicated deadlines, the personal data will be deleted.


The legal basis for the processing of your personal data responds to the free and legitimate acceptance of the legal relationship by the user at the time of acceptance of this Privacy and Personal Data Protection Policy.

Likewise, the legitimacy for the processing of your data for each of the purposes of the processing of personal data that have been previously identified is detailed below:


Your personal data will be communicated to other companies of the business group for purposes related to the processing of personal data of customers or users.

For the best fulfillment of the services that have been requested from us, we provide certain data to data processors with whom we have signed the corresponding data protection contracts. In these cases, the data provided is only strictly necessary for the specific activity to be carried out. By way of example only, the services that can be hired from data processors are listed: IT service providers, security companies, tax, legal or legal advice, etc. The above relationship is provided as an example, and the company may use the services of companies belonging to other sectors of activity in order to provide quality services. Apart from these cases, no transfer or communication of data has been foreseen either inside or outside the EU.

Information will also be provided to third parties in cases where this is imperatively established by current regulations or when judicially required (public administrations, courts and tribunals, security forces and bodies, tax agency, etc.)


We inform you that as an interested person you have the following rights:

To withdraw your consent regarding the sending of commercial communications of our products and services, see the section "How can you exercise your rights?". You can also unsubscribe directly each time you receive a commercial communication by email.

Interested parties can obtain additional information about their rights on the website of the Spanish Agency for Data Protection or on that of the Catalan Authority for the Protection of Dades.


You can exercise your rights by writing to the postal address Carrer Major, 1, 3, 25580 Esterri d'Àneu, Spain (+34) 973 62 64 37 or email, with the subject "Personal Data ” attaching a photocopy of your identity document or any analogous means established by law.


If you consider that your rights have not been adequately addressed, the interested party has the right to file a claim with the Spanish Agency for Data Protection or with any competent control authority.


What categories of personal data do we process?

We try that the information we request is the minimum and necessary for the management of the purposes that appear in this Data Protection and Privacy Policy.

Our company may process the following categories of personal data:

No specially protected data or special categories of data are processed.

The categories of interested parties of whom we treat their personal data a priori are the people interested in the products and services of our company, as well as in the contracting or reservations of the same. People who register in the job market or send their curriculum vitae will also be considered interested.

The interested party guarantees that the personal data provided is true and is responsible for notifying the company of any changes or errors in them, thus responding to the veracity and accuracy of the data provided at all times.

In the event that the interested party intends to communicate personal data of third parties, they must have previously informed and obtained their consent, in accordance with our Data Protection and Privacy Policy. That is why, in the event that the user has entered personal data from a third party, he declares and guarantees that he has the consent of the third party for the communication of his data and subsequent processing thereof by our company, as well as that has previously informed the third party whose data it provides of the content of this Data Protection and Privacy Policy.

Personal data we collect automatically:

When the interested party visits our web pages, we collect certain information automatically, even if no reservation or contract is made in the end. This information may include the IP address, the date and time our services were accessed, information about the hardware, software or Internet browser you use, the language selected, among others.

This information makes it possible to improve the services and the user experience on the website, and to identify possible fraudulent uses and possible attacks on the security of the website, as well as to compile statistics on the use and effectiveness of the website. Unless fraudulent use or against the security of the web is detected, this data will not be kept. In no case will automated decisions with legal effects for the user be made based on this information.

For more information, see the section on Cookies or computer cookies.


Whenever the interested party makes a reservation or contracts a service or product, an email will be sent in which the reservation or contract confirmation will be communicated, with information about it. Likewise, we may contact the interested party in order to inform them of any modification or novelty related to it.

On the other hand, the company may send commercial communications related to the products or services it offers as long as it has expressly and specifically consented to it by checking the box enabled for this purpose or by any manifestation of express consent in this regard.

The interested party may withdraw their consent to receive any type of commercial communication at any time by sending communication in the terms included in the "Right of interested persons" section. Likewise, this possibility will also be offered to the interested party in each commercial communication that they receive via email or SMS.


The services offered through the website are only available to adults. Therefore, those who do not comply with this condition must refrain from providing personal information on the website.


Our website may contain links to websites of third party companies and entities. Since we cannot be held responsible for the way in which these companies treat the protection of the privacy and personal data of their users, we advise you to carefully read the privacy policy statements of these web pages that are not owned by de the company in relation to the use, processing and protection of personal data.


Our company uses social networks to publicize its services and products and share information and experiences with its users and followers.

Since we cannot be held responsible for the way in which these companies treat the protection of privacy and personal data, and since each of them has its own policy on the matter, we advise you to carefully read the policy statements of privacy of each social network regarding the treatment they carry out with the personal data of their users, before using them.


The company reserves the right to modify this Data Protection and Privacy Policy in accordance with the data processing it carries out and with the applicable legislation at all times, of which it will duly inform on the website, for which it recommends the interested party to review it periodically to be informed of how the company treats and protects their personal data.


If you have any doubts or questions about this privacy policy, please contact us by sending an email to ( with the subject "Privacy Policy".