PRIVACY POLICY

 

1- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

 

HOSTAL EMPÚRIES SL, a trading company with registered office in L’Escala (Girona), Platja del Portitxol s/n, 17130, with VAT number B-58836065 and registered in the Mercantile Register of Girona (hereinafter, the Hotel or the responsible for data processing) holds the sole and exclusive responsibility for processing information and it is the owner of the webpage https://hostalempuries.com.

THE HOTEL has taken the technical and organizational measures that are necessary to comply with the data protection regulations.

The contact information of THE HOTEL regarding privacy and personal information protection is the following:

 

 

 +34- 972.77.02.07
   

info@hostalempuries.com

 

 

2-  WHAT TYPE OF PERSONAL INFORMATION IS PROCESSED AND WITH WHAT PURPOSE?

1. Type of personal data we treat and process

We collect and process the following personal information:

    – Name, treatment, genre

– Your contact information, name and surname, address, telephone number, ID number and email address.

– In the event that you book a reservation or hire any of our services, all data provided by the user which are necessary to carry out the service, included, among others, your credit card information.

2. Communications:

We register all sorts of communications with THE HOTEL made by email or by any other means. When a customer contact us by phone, our costumer service might register the questions in our data base.

3. Information collected when using our website and other digital media.

When using our website, we may register your IP, browser type, operating system, the referring website, if any, and behavior while browsing the web.

4. Information related to social media.

Depending on your social media settings, we can receive information of your social media supplier. For example, when using a social media account to use our services, we can receive your social media profile, including contact information, interests and contacts. For further information regarding the personal data we receive from your social media supplier and how to modify the settings, we recommend you to visit the website and the privacy policy of your social media supplier.

6. Information that you choose to share with us.

You can choose to share information with us, for example, when adding a comment on Facebook or when completing a customer survey.

 

7. Your personal information will only be used for the following purposes:

  1. To register you in our data base if you book a reservation or hire any of our services.
  2. To carry out the necessary commercial and business formalities with the website users and our customers or potential customers.
  3. In THE HOTEL we process all the information provided in order to respond any enquiries, give you information about our services, manage both internally and externally your bookings and our services, but also to manage all the purchases we make to our suppliers or to comply with the legal obligations derived from such activities.
  4. To send commercial and marketing communications by email, social media or any other electronic or physical means, only if you have given your express consent to receive such commercial communications by electronic means. If you are registered in our customer database, we could send you commercial information related to our services without previous consent.
  5. To communicate with you and respond your enquiries or questions and process any complaint.
  6. To communicate with you to know your opinion about the quality of our services and the treatment received.
  7. Additionally, the information that could be collected while browsing will be processed only to give access to some online contents of the website, to respond any information requests of our users, to keep a statistical record of visits (IP addresses, browser information, country, referred site, etc.) so we can offer better services and products, optimize our offer and provide a more efficient customer service and improve the content of our website.
  8. Our customers and suppliers information will be processed, within the contractual relationship established with us, in accordance with the administrative, tax, accounting and working obligations that are necessary under the current legislation.
  9. Objection or withdrawal. You can object or withdraw your consent to receive marketing communications at any time by following the instructions regarding marketing communications or by contacting us via email at info@hostalempuries.com .
  10. If the user fills in any of the forms of our website, some personal information will be required. We will process such information for the only purpose it was given.

According to the LSSICE, we inform you that THE HOTEL does not carry any SPAM practices and therefore does not send commercial emails without prior and express consent. In any case, you can always withdraw your consent to receive our communications.

We will not process your personal data for any other purpose that is not included in this Policy, except for legal obligation or court injunction.

Your personal information will not be subject to decisions based on automatic processing operations that could have any effect on you.

3-  WHICH LEGAL BASIS LEGITIMIZE YOUR DATA PROCESSING?

The legal basis that legitimizes your personal data processing is your express content to carry out the purposes above mentioned and which will be required when you ask for information or when you tick the corresponding box when providing your data in the forms of personal data collection.

In the event of a commercial relationship between you, as a customer, supplier or worker, and THE HOTEL, the legal basis that will legitimize your personal data processing shall be the execution of the contractual relationship created as well as, when applicable, the compliance with the corresponding legal obligations.

If the user does not provide his/her personal information or if the user does not accept our privacy policy, THE HOTEL shall not process such personal information, but it may be impossible for us to send information or to provide our services.

Curriculums

In the event that the user sends his or her CV to THE HOTEL, by email or through the section «work with us» of our website, we inform you that the information provided will be processed only to include the user in the selection procedures. We will analyze the profile of the candidate to select the best candidate for the post in the Hotel. If there were a change in the information provided, we would kindly ask you to communicate such change in writing us as soon as possible so we can keep your information properly updated.

We inform you that your CV and the information included will be kept for a maximum period of one year. After that time, your information will be deleted with absolute respect to the confidentiality when processing it but also when deleting it. In this respect, after the before mentioned period of time and if you wish to continue taking part in the selection procedures of the Hotel, we kindly ask you to send us your CV again.

However, if you are finally selected for the post, we will keep your CV along with your employment file during the contractual relationship with the Hotel.

 

Commercial information  

Any communication sent will be included in the information systems of THE HOTEL.

If you provide your email address and accept this Privacy Policy, we inform you that THE HOTEL could carry out the following activities and/or actions, unless you indicate otherwise:

–   The sending of any kind of information, including commercial information about news or latest updates, but also information related to the activities or services booked by our customers. The legal basis that legitimizes this processing is our legal interest within the commercial relationship with you.

4- TIME OF CONSERVATION. How long will we keep your data?

All personal information will be kept for the period of time we need to process your information request, or to manage your reservations or to execute the agreement between THE HOTEL and third parties. In the event that we have your identification details in our database to send you commercial information, such details will be kept while the legal basis that legitimizes their conservation and use lasts. If you do not want to receive more commercial information, you can withdraw your consent at any time.

Once the personal information has met the needs for which it was collected, we will delete it permanently. However, we will keep your information for longer if it’s necessary to comply with legal obligations. Additionally, we may need to keep such information for the time necessary for the prescription of the legal responsibilities generated.

All information provided to start a selection procedure in THE HOTEL will be kept for a maximum period of one year. After that, if the candidate has not joined THE HOTEL and is not in a selection procedure, such information will be deleted and we will not keep a copy.

All personal data of our employees will be kept for the duration of their employment relationship with THE HOTEL and, after that, for the legally established periods of time.

All personal details of the candidates who have been preselected by a temping agency and which have been provided during a selection procedure will only be kept during such procedure and, if THE HOTEL selects the candidate, for a longer period. Otherwise, all personal details will be returned to the temping agency, as the agency requires, and we will not keep a copy of them, unless we would want to keep them for a future selection procedure. 

5- TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Your personal data will be processed by duly authorized personnel and, if it were necessary or practical to fulfill the purposes before mentioned, they may be processed by third parties.

The categories of recipients to whom your personal data may be communicated are the following:

  1. Third parties in charge of data processing, such as IT providers, consultants and advisors and other companies which provide auxiliary services.
  2. Public entities and authorities, including the Police, for the exclusive purpose of complying with the corresponding legal obligations.
  3. Other suppliers to whom, when appropriate, your personal information may be transferred to, such as financial institutions, fraud detection services, etc.
  4. Social media suppliers.

In any case, all the aforementioned third parties shall have previously signed the corresponding confidential commitment following our instructions in accordance with the current regulations on data protection. Such third parties shall be subject to the duty of professional secrecy or shall act in compliance with a legal obligation.

All the information that you provide us with through this website will be hosted in THE HOTEL’s servers.

6.- WHAT ARE YOUR RIGHTS WHEN PROVIDING PERSONAL INFORMATION?

 

If you wish to exercise the rights that data protection regulations grant you, please send us an email to the following address info@hostalempuries.com , write in the «subject» section the right you wish to exercise and attach a copy of your ID or passport.

The Rights that the current regulations recognize and, when appropriate, may be exercised are: 

Right of access to personal details:

You have the right to be informed by THE HOTEL whether your personal details are being processed or not and, if the processing is confirmed, you shall be provided with the following information:

-The purposes of such processing.

-The categories of the personal details processed.

-Criteria and time of conservation of such information.

 

Right of rectification of personal details:

You will have the right to request THE HOTEL to correct your information when inaccurate or incomplete by means of an additional rectifying statement.

 

Right of deletion of personal details:

The interested party shall have the right to request THE HOTEL the deletion of personal details when:

-The processing is illegal.

-The interested party has withdrawn its consent.

-They are not longer necessary in relation with the purposes for which they were collected or processed.

-The interested party has exercised the right of opposition and other legitimate reasons for the processing do not prevail.

-Personal details must be deleted in compliance with a legal obligation of THE HOTEL.

 

The interested party shall not have the right to request THE HOTEL the deletion of personal details when their processing is necessary:

-To exercise the right to freedom of expression and information.

-To fulfill a legal obligation of THE HOTEL.

-For the preparation, exercise or defense of claims.

-For public interest based on the current regulations for public health reasons or historical, statistical or scientific research purposes.

 

Right to personal information portability:

You have the right to request THE HOTEL to transfer your personal information to other data controller or to the interested party through a structural format of usual use and mechanical reading, when the processing is carried out by automated means and is based on:

-The consent of the interested party for specific purposes.

-The execution of an agreement or pre-agreement with the interested party.

 

The right to personal information portability will not be applied when:

-The transmission is technically impossible.

-It may negatively affect the rights and freedoms of third parties.

-The processing has a public interest mission based on current regulations.

 

Right to restriction of processing:

The interested party shall have right to object to the processing of its personal data by THE HOTEL for reasons related to its particular situation when the processing is based on:

-Direct marketing.

-Profiling.

-Lawful interest of the responsible or third parties, provided that the interests or the rights and freedoms of the interested party, especially if he or she is a child, do not prevail.

-Historical, statistical or scientific research, unless the processing is necessary for public interest reasons.

 

Although the interested party objects to the processing of its personal data, THE HOTEL may continue processing them if its legitimate interest overrides the interests, rights and freedoms of the interested party in a legal procedure.

THE HOTEL shall clearly and explicitly inform the interested party about the right to object to the processing of its personal data and shall present such information separated from any other information at the time of the first communication.

 

Right of opposition:

 It is the right of the interested party to not carry out the processing of its personal data or to cease such processing when its consent is not necessary, given the existence of a legitimate and justified cause based on its specific personal situation provided that a law does not stipulate otherwise.

 

Right not to be subject to profiling:

 The interested party shall have the right not to be subject to profiling whose sole purpose is to adopt individual decisions based on automated data processing and aimed to assess, analyze or predict the following personal aspects:

-Professional performance.

-Economic situation.

-Health.

-Personal preferences or interests.

-Reliability.

-Behavior.

-Location or movement of the person.

 

When profiling is based solely on automated processing:

-The interested party shall have the right to be informed if the decision that could be taken may have legal effects that might significantly affect him or her.

-The interest party shall have the right to obtain human intervention from THE HOTEL to express their point of view and to challenge the decision, if the processing has been authorized by:

-The explicit consent of the interested party.

-A contract between THE HOTEL and the interested party. 

 

This right shall not apply if the decision that could be taken consequently is authorized by:

o se aplicará al derecho a no ser objeto de una elaboración de perfiles cuando la decisión que pueda ser tomada a consecuencia de esta esté autorizada mediante:

-The explicit consent of the interested party.

-A contract between THE HOTEL and the interested party.

-A processing based on current regulations.

7-CLAIMS TO THE CONTROL AUTHORITY:

 

If you firmly believe THE HOTEL has violated any of your rights protected by the personal data protection regulations or that it has violated any other obligation regarding the protection of your Personal Data, you have the right to submit a claim to the competent control authority which in Spain is the Spanish Agency for Data Protection, located at Calle Jorge Juan, 6. 28001 – Madrid.

Tel. 901 100 099 – 912 663 517

You can also submit an electronic claim through the electronic address that is available on their website https://www.aepd.es. 

8-GOVERNING LAW AND JURISDICTION

 

This privacy policy is governed in each and every one of its aspects by the Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, related to the protection of natural people in regard to the processing of personal data and the free circulation of these data.

It is also governed by Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights. Likewise, our website is governed by Law 34/2002, of July 11, on Information Society and Electronic Commerce Services.

Users of this webpage are subject to the Spanish governing law and jurisdiction to which the parties expressly submit, being competent for the resolution of all disputes arising from its use the Courts and Tribunals of GIRONA.

9-ADDITIONAL INFORMATION

 

-SOCIAL MEDIA (PRIVACY POLICY) 

We inform you that THE HOTEL may be present in social networks. The processing of the data that is carried out of followers (and/or carry out any link or connection action through social networks) of THE HOTEL official pages will be governed by this section, as well as those terms of use, privacy polices and access regulations that belong to the social network that is appropriate in each case and previously accepted by the user.

THE HOTEL will process your data to correctly manage your presence in the social network, to inform you about the provider’s activities, products or services, as well as to any other purpose that regulations of Social Networks allow.

The following content publications are prohibited:

-Publications allegedly illegal by national, European or International regulations or which carry out activities that are allegedly illegal or contravene the principles of good faith.

-Publications that violate the fundamental rights of people, lack of courtesy in the network, annoy or may generate negative opinions in our users or in third parties and, in general, all content that THE HOTEL may deem inappropriate.

-And, in general, publications that contravene the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of private life, consumer protection and intelectual and industrial property rights.

Additionally, THE HOTEL reserves the right to withdraw, without prior notice from the website or the corporate social network, all contents considered inappropriate.

All communications sent through social networks will be included in a file owned by THE HOTEL, so we may send you information of your interest.

You may find more information, as well as find the companies that are part of our group, in this privacy policy.

In any case, if you send personal information through the social network, THE HOTEL will be exempt from liability in relation to the security measures applicable to this platform. If the user wants to know them, he or she shall consult the corresponding conditions of the network in question.

SECURITY MEASURES

All personal information provided by users will be processed confidentially. THE HOTEL has adopted all technical and organizational measures and all necessary levels of protection to guarantee the security in the treatment of such information and avoid its alteration, loss, theft, unauthorized processing or access, in accordance with the state of technology and nature of the stored data. We also guarantee that the processing and registration in files, programs, systems or equipments and centers comply with the requirements and conditions of integrity and security established in current regulations.

LANGUAGE 

The language applicable to this Privacy Policy is Spanish. Therefore, if there were any contradiction in any of the versions we provide in other languages, the Spanish version will prevail.

10. UPDATE

This Privacy Police was last updated in June 2021, but it may be updated at any time. We recommend users to check it every time they access our page as it might change.