HOTEL REIMAR, S.A. is committed to protecting the privacy of users who access this website and/or any of its services. Use of the website and/or any of the services offered by HOTEL REIMAR, S.A. implies the user’s acceptance of the provisions contained in this Privacy Policy and of the processing of their personal data as set out herein. Please note that although our website may contain links to other websites, this Privacy Policy does not apply to websites belonging to other companies or organisations to which our website may redirect users. HOTEL REIMAR, S.A. does not control the content of third-party websites and accepts no responsibility for the content or privacy policies of such websites.
Information on data processing (Regulation (EU) 2016/679 and Organic Law 3/2018)
| Data Controller | HOTEL REIMAR, S.A.Tax ID (NIF): A17079856Av. Pau Casals 2, 17251 CalongeEmail: reimar@hotelreimar.com |
|---|---|
| Purpose of processing | To provide and manage our hotel and tourist accommodation services. |
| Legal basis | – Consent obtained from the data subject when they request information from us.– Performance of the service contract when they contract our services. |
| Recipients | Data will not be disclosed to third parties unless required by law or necessary to fulfil the purpose of the processing. |
| Data subjects’ rights | Data subjects have the right to exercise their rights of access, rectification, restriction of processing, erasure, portability and objection by sending their request to our address. |
| Data retention period | For as long as the business relationship is maintained or for the number of years necessary to comply with legal obligations. |
| Complaints | Data subjects may contact the Spanish Data Protection Agency (AEPD) to lodge any complaint they deem appropriate. |
| Additional information | Further detailed information can be found below under “Privacy matters”. |
Privacy matters
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we provide you with the following information regarding the processing of your personal data:
Who is responsible for processing your data?
Company name: HOTEL REIMAR, S.A.
Tax ID (NIF): A17079856
Address: Av. Pau Casals 2, 17251 Calonge
Tel.: 972652211
Email: reimar@hotelreimar.com
For what purposes do we process your personal data?
- We process the information provided to us in order to manage our hotel and tourist accommodation services.
- If you contact us through the contact form on our website, we will process your data in order to handle your enquiry.
- We may also use your data to inform you about our activities, products or services when you are already a customer or, if you are not, when you have given us your consent to do so.
- When entering our premises, your image may be recorded by video surveillance cameras for security monitoring purposes.
- If you send us your CV, we will process the data for the purpose of managing our CV database for staff recruitment.
How long will we retain your data?
- The personal data provided will be retained for as long as you are a user of our services or wish to receive information. You may object to the processing of your data for promotional purposes when providing it to us or at any later time by contacting us at reimar@hotelreimar.com. Thereafter, the data will be retained for the periods established to comply with our legal obligations. In the case of accounting and tax documentation for commercial purposes, this period will be 6 years in accordance with Article 30 of the Spanish Commercial Code, and for tax purposes it will be 4 years in accordance with Articles 66 to 70 of the Spanish General Tax Law.
- Images captured by the video surveillance system will be retained for one month.
- In the case of CVs, the data will be retained for one year.
What is the legal basis for processing your data?
For the management of the contractual relationship with the data subject, we base the processing of data on the performance of the contract or within the framework of the pre-contractual relationship.
For the sending of commercial information, processing will be based on your consent. However, if you are already a customer, we may send you information about our products and services, always providing a simple and free means of opting out, in accordance with Article 21.2 of Law 34/2002 of 11 July on information society services and electronic commerce.
With regard to information submitted by children under the age of 14, it is essential that it be provided with the consent of the child’s parent, guardian or legal representative in order for the personal data to be processed. Otherwise, the child’s legal representative must notify us as soon as they become aware of the situation.
With regard to images captured by the video surveillance system, the legal basis is our legitimate interest in preserving the safety and security of people and property.
To whom will your data be disclosed?
Data will not be disclosed to third parties unless required by law or necessary to fulfil the purpose of the processing.
What are your rights when you provide us with your data?
- Everyone has the right to obtain confirmation as to whether or not we are processing their personal data.
- Data subjects have the right to access their personal data and to request the rectification of inaccurate data or, where appropriate, its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the establishment, exercise or defence of legal claims.
- Likewise, in certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. In such cases, we will cease processing the data unless there are compelling legitimate grounds or it is necessary for the establishment, exercise or defence of potential legal claims.
- Data subjects also have the right to data portability.
- Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
- Finally, data subjects have the right to lodge a complaint with the competent Supervisory Authority.
How can you exercise your rights?
By sending us a written request, together with a copy of a document identifying you, to our postal or email address.
How did we obtain your data?
The personal data we process is obtained directly from the data subject, who guarantees that the personal data provided is accurate and is responsible for notifying us of any changes. Data marked with an asterisk is mandatory in order for us to provide the requested service.
What data do we process?
The categories of data we may process are:
- Identification data
- Postal or email addresses
In the case of the video surveillance system:
- Images
In the case of CVs, also:
- Personal characteristics
- Academic and professional information
The data processed is limited, as we only process the data necessary to provide our services and manage our business activities.
Do we use cookies?
We use cookies while you browse our website with the user’s consent.
Users may configure their browser to notify them about the use of cookies and to prevent their use. Please refer to our Cookie Policy.
What security measures do we apply?
We apply the security measures established in Article 32 of the GDPR. We have therefore adopted the necessary security measures to ensure a level of security appropriate to the risk involved in the data processing we carry out, with mechanisms that enable us to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services.
Some of these measures include:
- Informing staff about data processing policies.
- Carrying out regular backups.
- Controlling access to data.
- Regular verification, assessment and evaluation processes.