Privacy Policy
Hotel Nantipa understands that privacy is an important issue for guests and visitors of the hotel's website and its related domains. Hotel Nantipa is committed to protecting and respecting your privacy. The following information has been designed to help guests and visitors understand what information we collect from our premises and websites, and how that information is handled, stored and used after that. Please note that the policy relates only to living individuals in relation to personal data relating directly to themselves, and not to persons in any other capacity.
Information collection and use:
We collect personal data from you which you volunteer when you provide such personal data to us or via our services with which you interact. We may also be given other personal data relating to you by other persons or we may obtain such other personal data about you as may be provided to us in the course of our legitimate business activities. Such Data we may collect and process could include your personal data as follows: Hotel Nantipa is the sole owner of all information collected on this site. We will not sell, share nor rent this information to others in ways different from what is disclosed in this statement. Hotel Nantipa may collect information, volunteered from our users at several different points within our premises and websites with clear permission being sought. All information collected by Hotel Nantipa is treated with the highest standard of security and confidentiality.
General Enquiries:
If a website user contacts any website and/or domains of Hotel Nantipa with a general enquiry, the user may need to provide Hotel Nantipa with personal information (e.g. contact details). Hotel Nantipa will use this personal information to respond to the enquiry and track further correspondence. Personal data collected is not used for any other purpose.
Legal basis for processing (GDPR Article 13):
For visitors in the European Economic Area, the table below states the legal basis we rely on for each category of data processing:
- • Contact and enquiry form submissions — Legal basis: Consent (Article 6(1)(a)). You provide information voluntarily to receive a response.
- • Reservation and booking data — Legal basis: Contract (Article 6(1)(b)). Processing is necessary to fulfil your reservation.
- • Essential cookies and site security — Legal basis: Legitimate interest (Article 6(1)(f)). Necessary for secure, functional operation of the website.
- • Analytics cookies — Legal basis: Consent (Article 6(1)(a)). Activated only upon your explicit opt-in via the cookie banner.
- • Marketing cookies — Legal basis: Consent (Article 6(1)(a)). Activated only upon your explicit opt-in via the cookie banner.
- • Follow-up correspondence — Legal basis: Legitimate interest (Article 6(1)(f)). Used to track and respond to ongoing enquiries within the stated retention period.
Cookies:
Cookies are small text files that a site transfers to a visitor's hard disk or browser for added functionality or for tracking site usage. Our website uses the following categories of cookies:
- • Essential cookies: Required for the website to function (e.g., your cookie consent preference). These cannot be disabled.
- • Analytics cookies: Help us understand how visitors use our site. Only activated if you accept them via our cookie banner.
- • Marketing cookies: Used for personalized advertising. Only activated if you accept them via our cookie banner.
You can manage your cookie preferences at any time using the cookie banner that appears on your first visit. You can also clear cookies from your browser settings. Visitors can use this website with no loss of functionality if non-essential cookies are declined.
Cookie declaration:
The table below lists every cookie and browser storage item this website may set, along with its provider, purpose, and duration.
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| cookie_consent | Nantipa | Stores your cookie consent choice so the banner is not shown again until consent expires (12 months). | Essential | 12 months |
| [booking session] | reservations.nantipa.com | Session management for the hotel booking engine at reservations.nantipa.com. | Essential | Session |
| ph_*_posthog | PostHog, Inc. | Usage analytics via PostHog — distinguishes returning visitors and records events such as page views and clicks (stored as a cookie and in local storage). * | Analytics | 12 months |
| __ph_opt_in_out_* | PostHog, Inc. | Records your analytics opt-in or opt-out choice in local storage so PostHog keeps respecting it on this and later visits. * | Analytics | Persistent |
| ph_* (session storage) | PostHog, Inc. | Temporary PostHog session data for the current tab (session and window identifiers) — cleared automatically when the tab is closed. * | Analytics | Session |
* Analytics and marketing cookies are only set if you explicitly accept them via the cookie banner. If you decline, or if your browser sends a Global Privacy Control (GPC) signal, these cookies are never written.
Data retention:
Personal data submitted via enquiry forms is kept for as long as necessary to respond to your request and for up to 24 months thereafter for follow-up purposes. Cookie consent preferences are stored in your browser's local storage and persist until you clear your browser data. Analytics data, if collected, is retained for up to 26 months.
Your rights (GDPR):
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
- • Right of access — request a copy of your personal data.
- • Right to rectification — request correction of inaccurate data.
- • Right to erasure — request deletion of your personal data.
- • Right to restrict processing — request we limit how we use your data.
- • Right to data portability — request your data in a machine-readable format.
- • Right to object — object to processing based on legitimate interests.
To exercise any of these rights, please contact us at the email address below. We will respond within 30 days.
We extend these rights to all visitors regardless of location, including visitors from the United Kingdom (UK GDPR), Brazil (Lei Geral de Proteção de Dados — LGPD), Canada (PIPEDA), and Costa Rica (Law No. 8968), who hold equivalent rights under their local data protection laws.
Security:
Your personal data is held on secure servers hosted by our Internet Service Provider. The nature of the Internet is such that we cannot guarantee or warrant the security of any information you transmit to us via the Internet. No data transmission over the Internet can be guaranteed to be 100% secure. However, we will take all reasonable steps (including appropriate technical and organizational measures) to protect your personal data.
How your consent works:
Where we rely on your consent to process personal data — such as for analytics or marketing cookies — you may withdraw that consent at any time by clicking 'Cookie Settings' in the footer of any page. Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal. For strictly necessary cookies, no consent is required as these are essential for the website to function.
Third-party data sharing and sale:
Hotel Nantipa does not sell, rent, or trade your personal information to third parties. Where we use third-party service providers (such as booking platforms, email delivery, or analytics services), they act as data processors on our behalf and are contractually prohibited from using your data for their own purposes. Our booking platform (reservations.nantipa.com) processes reservation data solely to fulfil your booking and does not share that data for cross-context behavioral advertising.
Third-party service providers (data processors):
The following processors handle personal data on our behalf. All are bound by data processing agreements and may only use data for the purpose described:
- • Vercel, Inc. (hosting and CDN) — processes all page requests and associated server logs, including IP addresses and browser identifiers, to serve and secure the website.
- • Booking platform — reservations.nantipa.com processes guest name, contact details, stay dates, and payment information to fulfil hotel reservations.
- • PostHog, Inc. (analytics — only active if you accept analytics cookies) — processes usage data such as pages visited, clicks, and session duration to help us understand how visitors use the site. This data is stored on PostHog's servers in the United States; the transfer is safeguarded by a data processing agreement and EU standard contractual clauses. More information: PostHog Privacy Policy
- • Email delivery provider (Resend) — transmits the information you submit through our forms (name, email address, phone number, message content and, for job applications, your CV/resume and related employment details) to our team as email.
US visitor rights (CCPA / CPRA and state privacy laws):
If you are a resident of California or another US state with applicable privacy laws, you have the right to know what personal data we collect, request deletion of your data, and opt out of any sale or sharing of your personal data. As stated above, Hotel Nantipa does not sell or share personal data for targeted advertising. If your browser or device is sending a Global Privacy Control (GPC) signal, our website will automatically honor it by blocking all non-essential cookies. To exercise any other rights or to ask questions, contact us at info@nantipa.com.
Contact us and data requests:
Questions, comments, requests and complaints regarding this policy and the information we hold are welcome and should be addressed to info@nantipa.com . This is also the address for GDPR data access, correction, and deletion requests.
Last updated: April 2026