Data protection

Purpose of processing, legal basis and recipients of information

 

The data are used to:

 

• Allow the functioning of the website
• Register and attend to requests made by users through the website forms
• The provision and administration of hotel services, the processing of bookings and payment collection
• Develop web analytics and statistics
• Include functions provided by third parties (Google Maps, etc.)

 

Web browsing and access to areas for registered users

 

• Purpose: data necessary for the provision of online services are processed, including the registration of IP addresses, pages visited and date of access, as well as information about the user’s terminal. The data are also processed for security purposes and to improve the website.
• Legal basis: data processing is necessary for the provision of online services; consent, expressed through the use of the website.
• Recipients and transfers: establishment, web hosting companies

 

Use of website forms

 

• Purpose: to attend to requests made through the web forms.
• Legal basis: consent expressed by using and submitting the form.
• Recipients and transfers: establishment and companies involved in providing the requested services

 

Provision of services

 

• Purpose: to provide services including management of hotel bookings and payment. To send information about the establishment’s services by electronic means. Quality surveys.
• Legal basis: execution of the contract or provision of the service.
• Recipients and transfers: establishment and companies involved in providing the requested services

 

Web Analytics

 

• Purpose: to know how the website is searched for, accessed and used by the public. This may involve the collection of personal data such as, for example, the IP address, connection location, information about the browsing software or hardware, etc.
• Legal basis: consent, expressed through the use of the website
• Recipients and transfers: establishment

 

Functions provided by third parties

 

• Purpose: to incorporate functions provided by third parties, such as maps, analytics, social buttons, Zendesk chat widget, etc.
• Legal basis: consent, expressed through the use of the website
• Recipients and transfers: Third-party functions establish a direct connection between the user’s browser and the third parties’ Internet domains, allowing the function to be downloaded and executed, including from pages outside the European Economic Area.

 

This website integrates functions from Google Inc., such as Google Analytics and Google Maps. By using this website, the user authorises the processing of their data by Google as established in its privacy policy: https://policies.google.com/privacy

 

Accuracy of data

 

The user must fill in the forms with true, accurate, complete and current data. The user shall not enter data corresponding to another person; it shall be presumed that the data has been provided by the holder of the same. The user will be solely responsible for any damage or harm, direct or indirect, that could be caused to any person due to filling in the form with data relating to another person.

 

Rights of access, rectification, erasure, objection and others

 

The data subject has at all times the right to access, rectify and erase data concerning them, as well as to object to the processing of their data, under the terms set out in data protection legislation. They also have the right to request: data portability, the revocation of consent given where applicable and the restriction of processing.

The data subject may exercise these rights by writing by post to the establishment.

The applicant must include this signed request communication indicating the action requested and a photocopy of their ID card or passport.

The data subject may also object to the receipt of commercial emails; to do so, it will be sufficient to request it by means of an email sent from the address they wish to unsubscribe and addressed to the establishment.

The data subject, if they consider that the processing of their data infringes data protection legislation, may lodge a complaint with the data protection supervisory authorities.

 

Minors

 

The use of web services is prohibited for persons under 18 years of age.

 

Data security

 

This website has one of the most secure technologies regarding the protection of your credit card data. It also complies with all international standards governing the matter. All sections where we request sensitive information use the SSL communication protocol. This means that the information that travels through the Internet from your computer to our server is encrypted, making it indecipherable to anyone else. This technology ensures and guarantees that your data cannot be intercepted, manipulated or impersonated in any way. Thus, payment via the Internet today is as safe as a direct purchase.

 

What does SSL mean?

 

SSL (Secure Socket Layer) is a standard Internet security technology. It applies an encryption (coding) system that provides the maximum confidentiality of the data transmitted to us. This prevents unlawful entry or interception in a system while data circulates on the Internet. For greater security, these data are stored on a secure server protected by a “firewall” under continuous surveillance.