1. User information
HOTEL ARABELUJ C.B. is responsible for processing the User’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and therefore provides you with the following information on the processing:
- Purpose of processing: to maintain a business relationship with the user regarding the products or services offered. In addition, the operations planned for processing are:
- To respond to the queries and suggestions that users may make.
- To process orders, requests or any type of request made by the user through any of the contact methods available to them.
- Manage your requests and/or reservations and their payment.
- Sending commercial advertising communications via email, mobile applications, social media, or any other electronic or physical means, present or future, that allows for commercial communications. These communications will be sent by the data controller and will relate to its products and services, or those of its partners or suppliers with whom it has reached a promotional agreement.
- If you send or leave us your CV, it may be used in our recruitment processes. CVs will be kept for a maximum of one year, after which they will be deleted, guaranteeing complete confidentiality both during processing and subsequent destruction. Therefore, if you wish to continue participating in our recruitment processes after this period, please resubmit your CV.
- Data retention criteria: data will be retained as long as there is a mutual interest in maintaining the purpose of the processing and when it is no longer necessary for that purpose, it will be deleted with appropriate security measures to ensure the pseudonymization of the data.
- Data sharing: Web developers and the company that hosts our servers will have access to your data. All of them have agreements with us regarding their access to this data, solely for the purpose described here. Your data will not be shared with any other third party for processing, except as required by law.
- Legitimation: It is based on the consent requested through the corresponding acceptance box.
- Rights that the User has:
- Right to withdraw consent at any time. Right to object and to data portability. Data subjects have the right to receive all personal data concerning them that they have provided to a controller, provided that the processing is based on consent or is necessary for the performance of a contract and is carried out by automated means.
- Right of access: The data subject shall have the right to request and obtain, free of charge, information about their personal data being processed, the origin of such data, as well as any communications made or planned to be made regarding said data. When the data subject submits the request electronically, and unless they request otherwise, the information shall be provided in a commonly used electronic format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
- Right to rectification and erasure: The data controller shall have the obligation to fulfill the data subject’s right to rectification or erasure within ten days. Personal data whose processing does not comply with the law shall be rectified or erased, as appropriate. In particular, when such data is inaccurate or incomplete, the data subject shall have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning him or her. The data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
- Right to restriction of processing: The data subject shall have the right to obtain from the controller restriction of processing of his or her personal data. Where processing of personal data has been restricted, such data may only be processed for storage with the data subject’s consent, for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person or for reasons of public interest. Any data subject who has obtained restriction of processing shall be informed by the controller before the restriction is lifted.
- Right to object: The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her (public interest and legitimate interest), including profiling based on those provisions. The controller shall cease processing the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
- Right to lodge a complaint with the Supervisory Authority if you have not obtained satisfaction in the exercise of your rights, in this case, with the Spanish Data Protection Agency http://www.agpd.es
- Contact information to exercise your rights:
– Postal address: Camino Nuevo del Cementerio, 46. 18009 Granada. España
– Email address: reservas@hotelarabeluj.com
2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
Users, by checking the corresponding boxes and entering data in the fields of the contact form or those presented in download forms, expressly and freely and unequivocally accept that their data is necessary to attend to their request by the provider, while the inclusion of data in the remaining fields is voluntary.
The User guarantees that the personal data provided to the controller is truthful and is responsible for communicating any changes to it.
The data controller expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that whenever any type of transfer of personal data is carried out, the express, informed and unequivocal consent of the Users will be requested beforehand.
All data requested through the website is mandatory, as it is necessary to provide the User with optimal service.
If all the data is not provided, it is not guaranteed that the information and services provided will be fully tailored to your needs.