Privacy Policy

This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free circulation of these data (RGPD), to Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights (LOPDGDD), as well as in what is not contrary to the indicated regulations, to Organic Law 15/1999, Protection of Personal Data (LOPD) and its implementing regulations, and/or those that could replace or update them in the future.

Our organization is committed to the privacy of your personal data. The personal data provided is necessary to provide our services and is treated in a lawful, loyal and transparent manner, guaranteeing adequate security of the same, including protection against unauthorized or illegal treatment and against its loss, destruction or accidental damage through the application of technical and organizational measures.

Through this document we want to offer you in a transparent and fair way all the necessary information regarding the processing of your personal data carried out by this organization.


I. RESPONSIBLE FOR THE TREATMENT


II. RECIPIENTS OF PERSONAL DATA

  1. The personal data provided will not be subject to any transfer unless so provided in the specific treatments.
  2. Optionally, for the contracting of cloud computing services and/or services for sending e-mails, communication, as well as other related computer services, the personal data may be:
    • Assigned to IT service companies located within the European Economic Area (EEA) or,
    • Transferred to IT service companies located outside the EEA covered by the Privacy Shield protection shield, therefore they have adequate protection measures in place to guarantee the security of personal data. You can get more information by visiting this link: https://www.privacyshield.gov/welcome
  3. Optionally, to administrations and other bodies when required in compliance with legal obligations


III. LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA

In each specific treatment of personal data we will inform you of the legal basis that legitimizes it.


IV. RIGHTS

Right of Access

It is the right to obtain from the data controller confirmation of whether or not they are processing personal data concerning the interested part and, in such a case, the right of access to the personal data and the following information: the purposes of the processing, the categories of personal data in question, the recipients or the categories of recipients to whom the personal data was communicated or will be communicated, the retention period or the criteria used to determine this period, the existence of the right to request the rectification or deletion of personal data or the limitation of the processing of personal data relating to the interested part or to oppose such processing, the right to file a claim with the Spanish Agency for Data Protection (AEPD), the existence, where appropriate, of automated decisions, including profiling, when data is transferred to third countries, the right to be informed of the appropriate guarantees applied.

Right of Rectification

It is the right to request the rectification of your personal data if they are inaccurate, including the right to complete data that appears incomplete. It must be taken into account that by providing us with personal data by any means, you guarantee that they are true and exact and undertake to notify us of any change or modification thereof. Therefore, any damage caused by the communication of erroneous, inaccurate or incomplete information in the web forms will be the sole responsibility of the interested part.

Right of Suppression

It is the right to request the deletion of your personal data when, among other cases, they are no longer necessary for the purpose for which they were collected, or they are being processed in another way, or you withdraw your consent. It must be taken into account that the deletion will not proceed when the processing of personal data is necessary, among other cases, for compliance with legal obligations or for the formulation, exercise or defense of claims

Right to Limitation

It is the right to request the limitation of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data or to keep it beyond the necessary time when you may need it.

Right to Withdraw Consent

Is it the right to withdraw the consent you have provided by checking ?Have I read and accept the privacy policy? at any time and as specified in the corresponding section ?Exercise of rights? or in the specific treatment of commercial communications or Newsletter. It must be taken into account that this right will not take effect if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise or the defense of claims. Likewise, the withdrawal of consent will not have retroactive effects, that is, it will not affect the legality of the treatment based on the consent prior to its withdrawal.

Right to Portability

It is the right to receive the personal data that concerns you and that you have provided us, in a structured format, of common use and mechanical reading, and to transmit them to another person in charge, as long as: the treatment is based on your consent and is carried out by automated or computerized means.

Right of Opposition

It is the right to oppose the processing of your personal data based on our legitimate interest. We will not continue to process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or for the formulation, exercise or defense of claims.

Right to File a Claim before a Control Authority.

If you believe that we treat your personal data incorrectly, you can contact us or you also have the right to file a claim with the Spanish Agency for Data Protection (AEPD): https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

Exercise of Rights

You can exercise your rights by writing to the postal address indicated above or by e-mail info@hotelcasajulia.com, attaching in both cases a copy of your NIF/NIE/Passport or similar document.


V. PROCESSING OF PERSONAL DATA

Generic provisions.

The personal data requested in each of the specific treatments are adequate, pertinent and limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of minimization of data.

The personal data requested in each of the specific treatments are strictly necessary, refusal to provide them would imply not being able to provide the requested service.

The communications of personal data provided for in each of the specific treatments in some cases are necessary for the execution and maintenance of a contract and in other cases for compliance with a legal obligation applicable to the controller.

Contact form

Personal data will be processed to channel requests for information, suggestions and complaints from users or clients.

The legal basis that legitimizes the processing of personal data is the express consent by marking ?Have I read and accept the privacy policy?.

Personal data will be kept for a period of two years from the moment they stop being processed, without prejudice to the exercise of the rights that assist you as an interested part.

Electronic commerce (e-commerce) form

Personal data will be processed to manage your online purchases by processing your orders and returns through our online services, sending you notifications about the delivery status or in case of problems with the shipment of the items, managing your payments, manage any complaint or question about the guarantee of products or services, identify you and validate your legal age to contract, as well as for and where appropriate, the formulation, exercise or defense of claims.

The legal basis that legitimizes the processing of personal data is the express consent by marking ?Have I read and accept the purchase conditions?.

Personal data will be transferred to the transport company to be able to deliver the order to your home as well as to payment service providers.

Personal data will be kept as long as consent is not withdrawn, unless they must be kept to maintain the relationship between the parties or for the years necessary to comply with legal obligations.

Commercial information form (Newsletter)

In the event that you give us your explicit consent by signing up for our Newsletter, we will use your personal data to send you commercial information of interest to you.

The processing of personal data for this purpose is based on consent when accepting the sending of commercial information.

You You have the right to withdraw consent at any time through the procedure indicated above or through the link? Unsubscribe? that will appear in the footer of all the emails we send you.

Personal data will be kept as long as consent is not withdrawn or for the years necessary to comply with legal obligations.

Budget form

We will use your personal data to manage budget requests.

The legal basis of the treatment is the execution of a contract and the application of pre-contractual measures.

Personal data will be kept as long as the relationship between the parties is maintained or during the years necessary to comply with legal obligations.