WinTuWin Apartments
Find the best hotel in Rialp for your dates, by price or preference
Compare deals for WinTuWin Apartments across hundreds of sites, all in one place
Look out for a deal with free cancellation or excellent ratings
Compare rooms and prices
We compare 100s of sites to get you the best deal

Fast facts
Check in from: | 16:30 |
|---|---|
Check out before: | 11:00 |
Pets | Pets not allowed |
Children | Children are welcome at this hotel |
Amenities
More about WinTuWin Apartments
WinTuWin Apartments
WinTuWin Apartments offers accommodation in Rialp. Port Ainé Ski is 15 km away. There is a seating and/or dining area in some units. There is also a kitchen, fitted with a dishwasher and a Nespresso coffee machine in each apartment.
Comment: 5 Mar 2025
Stayed in: Feb 2025
Perfect for a few days skiing in Port Ainé
Comment: 8 Jul 2026
Stayed in: Jul 2026
THE POLICE HAD TO COME.
To make it clear from the beginning, I booked 1 night with payment at the accommodation.
The thing is, two days before, I receive a message through booking saying that I need to check in online to save time and pay for the stay to complete the reservation. Since I had booked payment at the accommodation, I ignored it, but they sent me another message, which I ignored again.
The next day, they contacted me via WhatsApp and repeated the same thing. It is at this moment that I decide to speak to them.
Regarding the check-in, I tell them that I am not going to upload any photo of my ID front and back, as that is illegal according to the AEPD, and that I can provide the information they are required to ask for, but not the others (a small note, in the text boxes, they also request the issuance number, which is also illegal), they tell me that it is not possible, that I have to check in and pay them now.
After discussing it for a while through WhatsApp, they tell me to upload a photo of the wall to complete the registration. I say that’s fine and we leave the topic there.
The next step was to pay for the stay, which I did not do, I repeat: I booked payment at the accommodation.
At this moment, a dreadful argument arises again. In the end, in my last audio message, I tell them that this is it, that I am not going to continue discussing the matter, that if they want, we can cancel the stay and go our separate ways (I already told them this 3 times during the argument).
In the end, since I was with my pregnant wife and did not want any surprises, I decided to call booking customer service to explain what happened. I tell them that I am willing to cancel the apartment in order to forget about this situation, to which they respond that they will communicate with them to clarify everything. After a while, they tell me that they have spoken with her and that, as I have booked, she will come to the apartment so that I can pay her, as she did not want to cancel the stay under any circumstances.
AND THE REAL SHOW, IN CASE THIS WAS NOT ENOUGH, BEGINS WHEN WE ARRIVE.
To avoid any conflicts, we enter with a smile and greet as if nothing had happened, as if it were the first interaction we have had. Everything seemed to be going well, we paid her, we gave her the tip to return just one bill... and then everything goes wrong again, as once we have paid her, she tells us to wait 5-10 minutes, which is how long it takes for the system to generate the entry code to the apartment.
And the bomb drops, she comes back, again, with the issue of data protection and payment at the accommodation, to end up saying THAT NOW SHE DOES NOT FEEL COMFORTABLE AND THAT SHE WILL NOT RENT IT TO US, THAT WE SHOULD RETURN THE CHANGE AND LEAVE. Just as it sounds, insane.
It is at this moment that I can no longer take it and decide to call the police.
Once they arrive, she goes to open the door for them and takes the opportunity to lecture them for about 10 minutes, while we wait inside. When they enter, I explain the whole story to them, the discussion on WhatsApp, the calls with booking... certainly, the police cannot believe it, and urge the woman to give us the code at once and stop the nonsense, as they cannot be here wasting time indefinitely, which makes no sense. The police officer tells her to charge us for the accommodation at once and for each to go their own way, to which we respond that we have already paid, that we were simply waiting for her to give us the access code. The expression on the police officers' faces was a poem.
I could continue explaining more things, like this woman's attitude or the nonsense she said to try to justify herself to the police, but I believe that with this, everything is already quite clear.
One note, I am a computer engineer, and as such, although it is not my field, I have some knowledge about data protection, and besides the fact that it is clear they do not comply with any of the obligations of the GDPR, the person in charge told me and showed me that she verified the data by looking at the photos of the ID that were uploaded to the platform. THIS IS TOTALLY ILLEGAL.
According to the AEPD:
"The collection of data under Royal Decree 933/2021 does not authorize the request for a copy of the identity document, as it would violate the principle of data minimization and would be excessive processing." It also indicates that the ID contains additional unnecessary data, such as a photograph, expiration date, CAN, or names of parents, and that providing a copy increases the risk of identity theft."
https://www.aepd.es/prensa-y-comunicacion/notas-de-prensa/aepd-informa-de-que-no-esta-permitido-solicitar-copia-dni-o-pasaporte-en-hospedajes
That said, the AEPD could allow an OCR reading without image retention (Optical Character Recognition, it is a technology that converts images of text into digital text, so the document is transformed into data. Then, with a platform that complied with all security standards, it would be possible to automate the extraction of only the data requested by Royal Decree 933/2021 from the ID as long as:
GDPR, Article 13.
[…] they must inform you of the identity and contact details of the responsible party, contact of the DPO if it exists, purposes, legal basis, recipients or categories of recipients, possible international transfers, and retention period. This is what justifies asking them: responsible party, platform provider, purpose, image retention, recipients, and transfers.
GDPR, Article 25.
[…] only the personal data necessary for each purpose should be processed, including the amount of data, extent of processing, retention period, and accessibility.
An OCR should be designed not to retain images, not to process extra data, and to limit access.
GDPR, Article 28.
[…] provide sufficient guarantees and that the processing must be governed by a contract or other legal act that establishes the object, duration, nature, purpose, type of data, obligations, confidentiality, security measures, subcontractors, and deletion/return of data upon completion of the service…
GDPR, Article 32.
[…] a platform that processes ID images should be able to justify adequate security measures and a process for evaluating/verifying those measures.
THEREFORE, AS STATED by the BOE in Royal Decree 933/2021, the accommodation can only request the following:
a) Name.
b) First surname.
c) Second surname.
d) Gender.
e) Identity document number.
f) Document support number.
g) Type of document (ID, passport, TIE).
h) Nationality.
i) Date of birth.
j) Place of usual residence.
– Complete address.
– Locality.
– Country.
k) Landline phone.
l) Mobile phone.
m) Email address.
n) Number of travelers.
o) Relationship of kinship among the travelers (in case any are minors).
Comment: 7 Jan 2026
Stayed in: Jan 2026
Good with things to improve.
Comment: 7 Aug 2024
Stayed in: Aug 2024
My stay in wintuwin.
Comment: 2 Feb 2020
Stayed in: Jan 2020
Simplemente genial!
Location
Carrer la Vall, 1, Rialp, 25594, Spain|0.01 km from city centre
Check in and check out
Check in from:
16:30
Check out before:
11:00
Good to know
Children are welcome at this hotel
All ages
R 562 (EUR30) per person per night
2 years old and under
Free
Pets not allowed
Cash
