La Maestranza

Your data, plainly

Privacy Policy

Last updated: August 5, 2026

We keep this simple, because what we do with your data is simple: we use it to host you, plus basic statistics about how this website is used. We never sell or rent personal data, we run no advertising trackers, and we send no newsletters.

1 · Who is responsible for your data

The data controller is DMC S.R.L., NIT 50004305511, with address at Calle Cuba No. 82, e/ Chacón y Cuarteles, Habana Vieja, La Habana, Cuba (the company that operates La Maestranza). For anything in this policy, write to lamaestranzahabana@gmail.com.

2 · What data we collect

  • Booking details: name, email address, phone number, country, the dates and room you book, party size, and any special requests you send us. Collected through our booking system when you reserve.
  • Payment data: handled entirely by PCI-DSS certified payment providers. Your card or account details go encrypted directly to the payment processor; we only ever receive a payment confirmation and, for cards, at most the last four digits, never the full number.
  • Guest registration: at check-in, Cuban lodging regulations require us to register every guest, so the front desk records the details of each guest's passport (or official ID for Cuban residents). This happens at the hotel; we do not collect ID documents through this website.
  • Messages: the emails and messages we exchange with you, so we have the context of your stay at hand.
  • Technical data: standard, short-lived server logs (IP address, browser type, pages requested) kept for security and diagnostics, plus the cookies and website analytics described in section 5.

We do not collect sensitive personal data (health, beliefs, biometrics), and we don't knowingly collect data about children beyond the number of guests in your party.

3 · What we use it for

Purposes necessary for hosting you:

  • Managing and confirming your reservation, and charging the payment you authorize.
  • Communicating with you before, during and after your stay about that stay.
  • Registering guests at check-in, as Cuban lodging regulations require.
  • Complying with our legal, tax and accounting obligations.
  • Preventing fraud, and handling payment disputes or claims.

One optional purpose: after your stay we may send you a single follow-up message asking how it went. You can ignore it or ask us to stop; that changes nothing about your booking or any future one.

4 · Who we share it with

Only what each of these needs, and only for the purposes above:

  • Beds24: the booking system that runs our reservations and checkout (based in the European Union).
  • Payment providers: the PCI-DSS certified processors that handle the payment you authorize at checkout (based outside Cuba). They receive your payment details directly; we never do.
  • Google: website analytics only (Google Ireland Limited; data may be processed on Google servers in the United States). It receives the technical data in section 5, plus anonymous booking statistics — the room, number of nights, party size and amount being booked, and the booking's reference number once paid — never your name, email, phone or any payment detail.
  • Authorities: the guest-registration data Cuban law requires lodgings to report, and anything else only when the law requires it.
  • Professional advisors: our accountants, for tax and bookkeeping compliance.

Some of these recipients are outside Cuba; in every case the transfer is necessary to perform the contract between us: your booking.

5 · Cookies, analytics and this website

  • A functional cookie, lang, which remembers your language choice for a year. No advertising cookies, ever.
  • Our own visit statistics: our server counts visits and how far people get in the booking form, so we can tell whether the site is working. It stores no name, no email and no IP address — only a random number, in two places: your browser's tab memory, which disappears when you close the tab, and one cookie of ours (av) that lets us tell that the same browser has come back before. Where the law requires asking (the EU and UK), that cookie is set only if you accept it in the consent notice on our booking page — declining changes nothing about how the site works; elsewhere it is set automatically, and you can remove it at any time by clearing cookies. It holds nothing but the random number, is never shared with anyone, and is read only by this site. These records, and the cookie, are deleted after at most 400 days. Clearing your cookies makes you a new visitor to us.
  • Google Analytics: we also use Google Analytics 4 (Google Ireland Limited) to see where visitors come from and which pages they read. Where the law requires asking (the EU and UK), it loads only after you accept the consent notice on our booking page. It does set cookies (_ga and _ga_…, lasting up to two years) and sends Google your shortened IP address, your device and browser, the pages you view, and the anonymous booking statistics described in section 4. We do not use it for advertising, remarketing or audience selling. You can opt out at any time: install Google's opt-out browser add-on, block cookies for this site, or use a browser that blocks trackers — nothing on this site stops working if you do. Google's own privacy policy is at policies.google.com/privacy.
  • Our pages load fonts and a styling library from public CDNs (Google Fonts, Tailwind), which receive your IP address when they serve those files, as any web server does.
  • When you book, checkout happens on a secure page served by our booking partner Beds24, with the payment handled by the payment processor shown there. Neither our own statistics nor Google Analytics runs on the pages where payment happens, and neither ever receives your name, email, phone or any payment detail.

6 · How long we keep it

Booking and billing records are kept for as long as tax and commercial law requires. Correspondence is kept while it is useful for looking after your stays. After that, data is deleted or anonymized. Server logs rotate on a short cycle. Our own visit statistics are deleted automatically after at most 400 days; Google Analytics data is kept for the period set on our Google Analytics property (Google's default is 14 months).

7 · Your rights

You may, at any time, request access to the data we hold about you, its correction if it's inaccurate, its deletion when we no longer need to keep it, or object to its processing for specific purposes, as provided by the applicable data-protection law (in Cuba, Law 149/2022 on Personal Data Protection; if you are visiting from the EU, UK or elsewhere, we honour the equivalent rights of your home framework through the same email address).

To exercise any of these, email lamaestranzahabana@gmail.com with your name, the right you want to exercise, and enough detail to identify you as the data's owner (for example the email your booking was made with). We answer promptly, and always within the timeframes the applicable law sets.

8 · How we protect it

All connections to this site and our checkout are encrypted (HTTPS). Payment data is handled exclusively by PCI-DSS certified payment providers. Access to booking data is limited to the people who need it to host you.

9 · Changes to this policy

If we change this policy we will publish the new version on this page with a new date at the top. A material change will also be flagged on the site. The version published here is always the one in force.

10 · Contact

DMC S.R.L. · NIT 50004305511
Calle Cuba No. 82, e/ Chacón y Cuarteles, Habana Vieja, La Habana, Cuba
lamaestranzahabana@gmail.com
Client support: (+53) 5264 5279 · Reception (24 h): (+53) 7861 2798 · Customer support