1. Data Controller
The entity responsible for processing the personal data collected through this website is:
Mountain Suites and Chalets Group, SL (MSCG, SL)
Registered office: 51A Pleta Sant Pere del Tarter, El Tarter, AD100, Andorra
NRT: 710982-Z
Commercial Registry: 922230-U
Email: book@vistaarinsal.com
Telephone: +376 825111
2. Applicable regulations
The processing of personal data will be carried out in accordance with Law 29/2021, of October 28, qualified on the protection of personal data of the Principality of Andorra, as well as with the regulations that develop or modify it.
Andorran legislation recognizes, among others, the rights of access, rectification, erasure, objection, limitation of processing and portability.
3. Personal data that we may process
Depending on your relationship with Vista Arinsal Apartments and the services you use, we may process data such as:
- identification and contact information;
- information needed to manage a reservation;
- billing and payment information;
- information voluntarily included in forms or communications;
- documentation required to comply with the legal obligations associated with accommodation;
- information related to inquiries, requests or incidents;
- data derived from the use of the website where applicable and in accordance with the Cookies Policy.
Only the data necessary for each purpose will be requested.
4. Purposes of the processing
Personal data may be processed for the following purposes:
- Manage bookings and stays.
- Process and manage reservations made, handle payments, modifications or cancellations, and carry out the necessary actions before, during and after the stay.
- Manage access to accommodation.
- Process the information necessary to organize the arrival and self check-in process, as well as fulfill the identification and registration requirements of guests.
- To handle inquiries and requests.
- Respond to communications received through forms, email, telephone or other enabled channels.
- Fulfill legal obligations.
- Manage the administrative, tax, accounting, security and registration obligations applicable to the accommodation activity.
- Manage commercial communications.
- When the user has given their consent, to send commercial information, news, promotions or other communications related to Vista Arinsal Apartments.
- Manage loyalty programs.
- Where applicable, manage registration and participation in Vista Arinsal Rewards, as well as communications and benefits linked to the program.
5. Legal basis for the processing
The legal basis for processing will depend on each purpose:
- the execution of a contractual relationship or pre-contractual measures, when the data are necessary to make or manage a reservation;
- compliance with legal obligations, when we must process certain data due to regulatory requirements;
- the consent of the interested party, when necessary, for example for certain commercial communications;
- legitimate interest, where applicable and provided that the rights and freedoms of the person concerned do not prevail.
When a treatment is based on consent, this consent may be withdrawn at any time without affecting the lawfulness of the treatment carried out previously.
6. Data retention
Personal data will be kept for the time necessary to fulfill the purpose for which it was collected and, subsequently, for the periods required by applicable legal obligations.
When the processing is based on consent, the data may be kept until the user withdraws said consent, without prejudice to any additional periods that may be necessary to address possible legal liabilities.
Once the relevant deadlines have passed, the data will be securely deleted or blocked.
7. Data recipients
Personal data will not be transferred to third parties except when necessary to manage the requested services, there is a legal obligation or it is essential for the proper functioning of the activity.
They may have access to certain data provided by suppliers that provide services to MSCG, SL, such as technological services, reservation systems, web hosting, maintenance, payment methods, advice or communications.
Likewise, the data may be communicated to public bodies, administrations or competent authorities when there is a legal obligation.
The form provided by Vista Arinsal Apartments expressly contemplates the possible communication of data to suppliers and authorities when necessary.
8. International data transfers
Some technology providers used by the website may be located outside the Principality of Andorra or process data from other countries.
When international data transfers occur, these will be carried out respecting the guarantees required by the applicable regulations and using, where appropriate, suitable protection mechanisms.
The user has the right to be informed about the safeguards used when their data is subject to an international transfer.
9. Rights of interested parties
You can exercise the following rights regarding your personal data:
- Access: to know what personal data we process about you.
- Rectification: requesting the correction of inaccurate or incomplete data.
- Deletion: request the deletion of your data when appropriate.
- Opposition: to oppose the treatment in certain cases.
- Limitation: request that the processing of your data be temporarily restricted.
- Portability: to receive the data you have provided in a structured format and, where appropriate, transmit it to another controller.
Andorran regulations also stipulate that the responsible party must facilitate the exercise of these rights through accessible procedures and respond, in general, within a maximum period of one month from receipt of the request.
To exercise these rights, you can contact: book@vistaarinsal.com
The application must allow for the correct identification of the interested party and specify the right they wish to exercise.
10. Complaints to the supervisory authority
If you believe that the processing of your personal data does not comply with applicable regulations, you can file a complaint with the Andorran Data Protection Agency (APDA).
The APDA itself expressly recognizes this right within the personal data protection regime.
11. Data Security
MSCG, SL adopts appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized access, disclosure or improper processing.
These measures are reviewed and adapted taking into account the nature of the data processed, the existing risks and the evolution of available technologies.
12. Third-party data
If the user provides personal data of other people, for example when making a reservation for several guests, they must ensure that they have sufficient legitimacy to communicate such information and that the data provided is correct.
13. Data on minors
The services offered through the website are primarily aimed at people with sufficient capacity to contract.
When data of minors is provided in the context of a booking or stay, this data will only be processed when necessary to manage the service and in accordance with applicable regulations.
14. Commercial communications
Vista Arinsal Apartments will only send commercial communications by electronic means when there is a legal basis for doing so.
When these communications are based on consent, the user may withdraw it at any time using the unsubscribe mechanism included in the communication or by contacting: book@vistaarinsal.com
15. Cookies
The website uses its own cookies and, where appropriate, third-party cookies.
Information about the categories of cookies used, their purposes, duration and how to manage consent can be found in the Cookie Policy.
16. Changes to the Privacy Policy
MSCG, SL may update this Privacy Policy to adapt it to legal, technical or data processing-related changes.
It is recommended to check this page periodically for the current version.
Last updated: August 24, 2026