1. PRIVACY AND DATA PROTECTION POLICY

• Respecting the provisions of current legislation, Hotel Labella María (hereinafter, also Website) undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected.

Laws incorporated in this privacy policy

• This privacy policy is adapted to the Spanish and European regulations in force regarding the protection of personal data on the internet. Specifically, it respects the following rules:
  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR).
  • Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007, of 21 December.
  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
  
  

Identity of the person responsible for the processing of personal data

• The person responsible for the processing of personal data collected in Hotel Labella María is: Hotel Labella María S.L., with Tax ID: B-18281725 and registered in: Registro Mercantil de Granada, whose representative is: [Name] (hereinafter, Data Controller). Their contact details are as follows:
• Address: Ctra. Sierra Nevada km 8,2 18191 Pinos Genil (Granada)
• Contact telephone: 958 48 87 46
• Contact email: info@hotellabellamaria.com

Personal Data Registry

• In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by Hotel Labella María, through the forms extended on its pages will be incorporated and will be treated in our file in order to be able to facilitate, expedite and fulfill the commitments established between Hotel Labella María and the User or the maintenance of the relationship established in the forms that the latter fills in, or to attend a request or query from the same.

Principles applicable to the processing of personal data

• The processing of the User’s personal data will be subject to the following principles collected in article 5 of the GDPR:
  • Principle of lawfulness, fairness and transparency.
  • Principle of purpose limitation.
  • Principle of data minimisation.
  • Principle of accuracy.
  • Principle of storage limitation.
  • Principle of integrity and confidentiality.
  • Principle of proactive responsibility.
  
  

Legal basis for the processing of personal data

• The legal basis for the processing of personal data is consent. Hotel Labella María undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.

Purposes of the processing to which the personal data are destined

• Personal data are collected and managed by Hotel Labella María for the purpose of being able to facilitate, expedite and fulfill the commitments established between the Website and the User or the maintenance of the relationship established in the forms that the latter fills in or to attend a request or query.

Personal data retention periods

• Personal data will only be retained for the minimum time necessary for the purposes of their processing and, in any case, only during the following period: 24 months, or until the User requests their deletion.

Recipients of personal data

• The User’s personal data will not be shared with third parties.

Personal data of minors

• Respecting the provisions of articles 8 of the GDPR and 7 of the Organic Law 3/2018, only those over 14 years of age may give their consent for the processing of their personal data lawfully by Hotel Labella María. If it is a minor under 14 years of age, the consent of the parents or guardians will be necessary for the processing, and this will only be considered lawful to the extent that they have authorised it.

Secrecy and security of personal data

• Hotel Labella María undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected, so as to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or the unauthorised communication or access to said data.
• The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially.

Rights derived from the processing of personal data

• The User has over Hotel Labella María and may, therefore, exercise against the Data Controller the following rights recognised in the GDPR and the Organic Law 3/2018:
  • Right of access.
  • Right to rectification.
  • Right to erasure («the right to be forgotten»).
  • Right to limitation of processing.
  • Right to data portability.
  • Right to opposition.
  • Right not to be subject to a decision based solely on automated processing, including profiling.
  
  


• Thus, the User may exercise their rights by written communication addressed to the Data Controller with the reference “RGPD-https://www.hotellabellamaria.com/”, specifying:
  • Name, surname of the User and copy of the DNI (ID Card).
  
  
  • Petition with the specific reasons for the request or information to which access is desired.
  
  
  • Address for notification purposes.
  
  
  • Date and signature of the applicant.
  
  
  • Any document that accredits the petition formulated.
  
  
  
  


• This application and any other attached document may be sent to the following address and/or email:


• Postal address: Ctra. Sierra Nevada km 8,2 18191 Pinos Genil (Granada)


• Email: info@hotellabellamaria.com

Claims before the supervisory authority

• In the event that the User considers that there is a problem or infringement of current regulations in the way in which their personal data are being processed, they shall have the right to effective judicial protection and to file a claim before a supervisory authority, in particular, in the State in which they have their habitual residence, place of work or place of the alleged infringement. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

1. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

• It is necessary that the User has read and is in agreement with the conditions on the protection of personal data contained in this Privacy Policy, as well as that they accept the processing of their personal data so that the Data Controller can proceed to the same in the form, during the periods and for the purposes indicated. The use of the Website implies the acceptance of the Privacy Policy thereof.
• Hotel Labella María reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency.