1. Identification of the Data Controller
HOSTEL ENTERPRISES VALENCIA, S.L. is the RESPONSIBLE for the processing of the USER’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of April 5. December (LOPDGDD).
You can contact the Controller through the email address reservas@hotelmalcomandbarret.com / info@stayingvalencia.com.
The address for claims purposes will correspond to that indicated as the address of the Owner.
2. Purposes of the treatments
a) Respond to the questions that the interested party sends to the Controller.
Conservation period: The data will be kept until the issue raised by the interested party is resolved. Subsequently, if necessary, the information will be kept blocked during the legally established periods.
Legal basis: Legitimate Interest of the Controller and Consent of the Interested Party.
b) Manage the subscription of the interested party to their Client or User account, as well as access to the services and functionalities of our Clients / Users.
Conservation period: The data will be kept as long as the interested party does not revoke the consent granted. Subsequently, if necessary, the information will be kept blocked during the legally established periods.
Legal basis: Consent of the interested party.
c) Process accommodation reservations made by the user.
Conservation period: The data will be processed as long as there is an interest on the part of the interested party, based on the contractual relationship existing when contracting the hosting service. Subsequently, if necessary, the information will be kept blocked during the legally established periods.
Legal basis: Contractual relationship.
d) Send the interested party commercial communications about our services that may be of interest (newsletter).
Conservation period: The data will be kept as long as the interested party does not revoke the consent granted. Subsequently, if necessary, the information will be kept blocked during the legally established periods.
Legitimizing basis: Express consent of the interested party.
e) Manage the publication of content or opinions of users, about their degree of satisfaction with their experience using our services or the facilities that we provide.
Conservation period: The data will be kept as long as the interested party does not revoke the consent granted. Subsequently, if necessary, the information will be kept blocked during the legally established periods.
Legitimizing basis: Express consent of the interested party.
3. Recipients of your data
The Controller contracts with third parties in charge of processing in order to provide their services. With the exception of these entities, your data will not be communicated to other third parties. If for any reason it is necessary to communicate said data to third parties, you will be informed in advance and, where appropriate, your consent will be requested and the purposes of the communication and the identity of the third party to whom it will be communicated will be specified.
All of this, with the exception of cases in which a legal requirement requires communicating said data to a third party.
4. Rights
People who provide us with their data enjoy the following rights in relation to them:
to. Right of access
b. Right to rectification or deletion
c. Right to limitation of treatment
d. Right to portability
and. Right to object
F. Right to revoke consent
to. Right of access: Any person has the right to obtain from the Controller confirmation of whether or not personal data that concerns them is being processed and, in such case, the right of access to personal data.
b. Right to rectification: It is the right to obtain rectification of the personal data that is in our possession and that concerns you.
c. Right to deletion: It is the right to obtain the deletion of your personal data.
d. Right to limitation of processing: This is the right for your data to no longer be subject to the corresponding processing operations when any of the following conditions are met:
When you have exercised your rights of rectification or opposition and the Controller is in the process of determining whether the request is appropriate.
If the data processing is illegal, which implies the deletion of the data, but you do not want your data to be deleted by the Controller.
When the data is no longer necessary for the processing, it implies the deletion of the data, but you want the Controller to limit the processing of the data and to retain it to be able to formulate, exercise or defend against claims.
and. Right to portability: It is the right to obtain from the Controller, in the case of automated processing of your data, a copy of the data in a structured, commonly used and machine-readable format or for said copy to be transmitted directly to the Controller that you indicate. . Please note that this right will not apply to:
The data of third parties that you have provided to the Controller.
The data that concerns you, but that has been provided to the Controller by third parties.
F. Right to object: This is the right to object to your personal data being processed. As far as the processing carried out by the Controller is concerned, you may oppose the sending of commercial communications, both your own and those of third parties.
If you want to obtain more information about your rights, we suggest that you visit the website of the Spanish Data Protection Agency, as well as the European Data Protection Regulation.
The exercise of these rights can be done by sending an email to reserva@hotelmalcomandbarret.com, clearly indicating which right you wish to exercise and providing a copy of your identity document to prove your identification. They can also be sent by postal mail to the registered office of the Controller listed in point 1 of this Privacy Policy.
Additionally, we inform you about the possibility of filing a claim with the competent Control Authority, in this case, the Spanish Data Protection Agency, especially in the event that you have not obtained satisfaction in the exercise of your rights. You can contact the Spanish Data Protection Agency through their telephone numbers 901 100 099 and 912 663 517 or by visiting them at their address C/ Jorge Juan, 6. 28001 – Madrid.
5. Security measures
The Controller guarantees the user that the processing carried out complies with all the provisions of the aforementioned data protection regulations, GDPR and LOPDGDD, and that the data is processed in a lawful, loyal and transparent manner in relation to the interested party. and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Likewise, the Controller guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS and has communicated to them the appropriate information so that they can exercise them.
6. Origin and Veracity of the data
All data collected comes from the interested party. The User, by accepting this Privacy Policy, declares and undertakes to guarantee the veracity and accuracy of the data provided, as well as being the legitimate owner thereof.
Likewise, the User undertakes to keep their data updated at all times, and to communicate without delay to the Controller any significant modification, such as the change of ownership of their bank account, or the modification of their email account provided through the relevant forms hosted on the web.
In this sense, the User will be solely responsible for non-compliance with the above provisions, exonerating the Data Controller from all responsibility with respect to those data that the User has not previously communicated to him or her.
