PRIVACY POLICY
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you about the processing of the personal data that you provide to us through our website.
DATA CONTROLLER
The entity responsible for processing your data is BS PATRIMONIAL 2020 SL /BS HOTELES: HOTEL CAPITULACIONES- HOTEL PRÍNCIPE FELIPE (hereinafter BS HOTELES) with Tax Identification Number B02951614, registered office at C/ Jacobo Camarero 32, 18220, Albolote, Granada, telephone 958523360, contact email info@bshoteles.es
PURPOSE FOR WHICH WE WILL PROCESS YOUR DATA
Depending on how you interact with us through the Web and the relationship that is established, we will process your personal data for the following purposes.
Contact form: The data provided by submitting this form will be used to respond to your inquiry and to contact you.
Booking form: The data you provide when making your online booking will be processed for the purpose of reserving the rooms you have chosen on the selected dates, providing you with the accommodation services contracted at our hotel, billing and/or collection of the same (in the case of rates that require online payment or in the event of cancellations outside the free cancellation period or in the event of no-show), administrative, tax and accounting management and maintaining communication with you in relation to your booking.
Newsletter subscription/acceptance of receiving information about services, offers and industry news: We will use this data to send you, by any means, including electronic means, information about our services, offers from our establishments and industry news, if you tick the corresponding box on the form or subscribe to the Newsletter.
LEGAL BASIS FOR PROCESSING YOUR DATA
Contact form: The legal basis for processing your data is the execution of pre-contractual measures at the request of the interested party (responding to queries and providing information to users who are not yet clients) and the execution of a contract (responding to queries and providing information to clients) (Article 6.1 b GDPR)
Booking form: The legal basis for processing your data is the performance of a contract (online booking made by you) (Article 6.1 b GDPR) and compliance with legal obligations for the controller: tax/accounting regulations (LGT, Commercial Code), (Article 6.1 c GDPR), regulations relating to the registration of travelers (Royal Decree 933/2021)
Subscription to our Newsletter/acceptance of receiving information about services, offers and industry news: The legal basis for processing in the indicated cases is the consent of the data subject, who voluntarily subscribes to the Newsletter or accepts the sending of promotional information (Article 6.1 a GDPR). You may subsequently revoke the consent given.
DATA RETENTION PERIOD
Contact: Data will be retained in the case of customer inquiries, for the duration of the contractual relationship, and in the case of individuals who are not yet customers, until the requested information has been fulfilled. Subsequently, data will be retained for the periods during which liabilities may arise from its processing, in accordance with applicable regulations.
Reservations. The data provided for making reservations will be kept for the duration of the established contractual/commercial relationship and subsequently for the legally established periods and for the resolution of any potential liabilities arising therefrom. Data relating to payments and invoicing will be kept for the periods established in the corresponding economic/accounting and tax regulations. Registration data and check-in forms for hotel establishments will be kept for 3 years, in accordance with their regulations.
DATA COMMUNICATIONS
Billing/tax information will be shared with the Tax Authorities to comply with legal tax obligations, and traveler registration data will be shared with the State Security Forces and Corps as required by law, as well as in all other cases stipulated by law. To fulfill the established relationship and the stated purposes, your data may be shared with certain companies, such as technical services providers, booking engines, etc., acting as service providers, with whom the corresponding data processing agreements have been formalized.
INTERNATIONAL DATA TRANSFERS
No international data transfers are foreseen
SOCIAL NETWORKS
This website contains links to the social media profiles where BS HOTELES has a presence. If you choose to follow us on any social network where we have a profile or page, please be advised that we will manage communications through those platforms in accordance with the terms and conditions of each social network and that we will process your data to manage the list of people interested in BS HOTELES' activities and news shared through each social network. You will always receive this information through the social network in question and only while you are a follower of BS HOTELES on that platform. Each of these social networks has its own terms and conditions and is a separate entity from us.
RIGHTS OF ACCESS, RECTIFICATION, ERASURE, RESTRICTION, OPPOSITION AND PORTABILITY
You may exercise your rights of access, rectification, erasure, restriction of processing, and objection by sending an email to info@bshoteles.es with the subject line “EXERCISE OF RIGHTS”. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
You may file a complaint with the competent Data Protection Supervisory Authority, especially if you have not obtained satisfaction in the exercise of your rights, by writing to the Spanish Data Protection Agency, C/Jorge Juan nº 6, 28001 Madrid or by accessing its electronic headquarters through the website www.aepd.es INFORMATION ON EXERCISING RIGHTS
RIGHTS OF INTERESTED PARTIES
BS HOTELES will facilitate the exercise of their rights, as established in Articles 15 et seq. of the GDPR, for those interested who request it.
The exercise of rights is strictly personal, so it must be requested by the interested party, and in the case of minors or incapacitated persons, by their legal representative.
They may also be requested through voluntary representation, provided that the identity of the represented person and the representation granted are duly accredited.
MODELS FOR REQUESTING THE EXERCISE OF RIGHTS
Below, we provide you with the different form templates prepared by the Spanish Data Protection Agency for requesting the exercise of rights and the instructions for completing them.