Data protection
Privacy Notice
Effective date: 29 August 2026
This notice explains how personal data is handled when you visit this website, submit a confidential enquiry or correspond with Hotel Lease Solutions.
Please do not send financial statements, identity documents or other sensitive materials through the website form. If further information is appropriate, a secure and confidential process will be agreed separately.
1. Who is responsible for your personal data?
Adrian Padina is the controller responsible for the personal data collected through the Hotel Lease Solutions website and described in this notice.
For any data-protection question or request, email adrian@hotelleasesolutions.com.
2. What personal data do we collect?
When you make an enquiry, we may collect your name, company or ownership entity, email address, telephone number, and the information you provide about the hotel, including its name, location, room count, operating status and your message.
Our website and service providers may also process limited technical and security information, such as an IP address, browser information, timestamps and anti-spam data, where necessary to deliver and protect the website and form.
3. Why do we use it, and on what legal basis?
| Purpose | Legal basis |
|---|---|
| Respond to your enquiry, understand your objectives and assess whether the hotel may be suitable for a potential lease. | Steps taken at your request before entering into a possible agreement, where applicable; and our legitimate interest in evaluating and responding to genuine hotel lease opportunities. |
| Arrange confidential discussions and, where appropriate, progress an opportunity with relevant participants and advisers. | Pre-contractual steps and our legitimate interest in considering and structuring a potential transaction. |
| Maintain website and email security, prevent spam and keep an appropriate record of communications. | Our legitimate interests in protecting our systems, preventing misuse and managing business correspondence. |
| Meet legal obligations and establish, exercise or defend legal claims. | Compliance with a legal obligation and our legitimate interests in protecting our legal position. |
We do not use enquiry data for unrelated marketing, sell personal data or make decisions about you solely by automated means.
4. Is providing the information compulsory?
Providing information is voluntary. Fields marked with an asterisk are needed so that we can understand and respond to your enquiry. If you do not provide them, we may be unable to assess or reply to it.
5. Who may receive your personal data?
Access is limited to those who reasonably need the information for the purposes above. This may include Chris Dexter, relevant professional advisers and representatives involved in assessing the opportunity, and—if discussions progress—the prospective hotel group or other transaction participants. Information is shared on a need-to-know basis and subject to appropriate confidentiality arrangements where required.
We also use service providers to operate this website and communications, including Formspree for form delivery, Namecheap Private Email for email, and website hosting and security providers. They process personal data under their own data-protection commitments and applicable contractual safeguards.
6. International transfers
Some service providers may process personal data outside the European Economic Area, including in the United States. Where GDPR transfer restrictions apply, transfers are supported by an adequacy decision, the European Commission's Standard Contractual Clauses or another legally recognised safeguard. Formspree states that it uses Standard Contractual Clauses for relevant international transfers.
You may request further information about applicable safeguards using the contact email above.
7. How long do we keep personal data?
If an enquiry does not progress, we normally retain the enquiry and related correspondence for up to 12 months after the last meaningful contact, then delete it unless there is a legal reason to retain it for longer. If discussions or a transaction progress, relevant information may be retained for the duration of that process and afterwards for as long as reasonably necessary to meet legal obligations or address legal claims.
Formspree currently retains submissions in its account archive for 30 days on the service plan used by this website. Copies delivered to email are governed by the retention periods above.
8. Your data-protection rights
Subject to the conditions in applicable law, you may ask us to:
- give you access to your personal data;
- correct inaccurate or incomplete data;
- delete your data;
- restrict how it is used;
- provide portable data where the right applies; or
- stop processing based on legitimate interests by raising an objection.
Where processing relies on consent, you may withdraw it at any time without affecting processing already carried out. To exercise a right, email adrian@hotelleasesolutions.com. We may ask for reasonable information to confirm your identity and will normally respond within one month.
9. Complaints
You may lodge a complaint with a data-protection supervisory authority, particularly in the EU or EEA country where you habitually reside, where you work, or where you believe an infringement occurred. If the matter concerns Spain, you can contact the Spanish Data Protection Agency (AEPD).
We would appreciate the opportunity to address your concern first, but this does not affect your right to complain directly to a supervisory authority.
10. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. No online transmission or storage system can be guaranteed to be completely secure.
11. Changes to this notice
We may update this notice when our services, providers or legal obligations change. The current version and its effective date will always appear on this page.