Privacy Policy

PRIVACY POLICY

With this privacy policy we inform you of the processing we do of the personal data that you provide or will provide during your browsing, in the event that you continue browsing. Likewise, it includes our data protection policy, for cases in which an express reference is made to it.
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (GDPR) , as well as Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, we inform you of the following:

1. RESPONSIBLE FOR THE TREATMENT

The person responsible for the treatment and the entity that owns the domain https://www.victoriaplayahotel.com/ (hereinafter, the Website) is HOTELES DE ALMUÑECAR,S.L. (Hotel Victoria Playa) with address at AV. AMELIA SÁNCHEZ, S/N, CP:18690 ALMUÑECAR –GRANADA (SPAIN), with CIF number: B18488858 and registered in the Mercantile Registry of Granada Volume 827, Book 0, Folio 152, Section 8, Sheet GR 13761. REAT: H/ GR/01154 BEACH

Contact information:

• Telephone: (+34) 958 039 400
• Email: info@victoriaplayahotel.com
• Email data protection: info.lopd@victoriaplayahotel.com

2. PURPOSE OF THE TREATMENT AND LEGITIMATION

The processing of your data pursues the following purposes, with its corresponding legitimacy set out below.

(*) In those cases where to make a request it is necessary to fill out a form and "click" on the send button, completing the request will necessarily imply that you have been informed and have expressly given your consent and acceptance of the privacy policy. privacy.

All of our forms have checkboxes that must be checked to access the services offered.

What are we going to use your data for? The purpose of the data you provide us is:

a) Proceed to process your stay at the hotel, manage the reservations made and celebrate events.
The basis of legitimacy is the provision of our services/execution of the contract with the client.
b) Send you the requested information and resolve any queries you make through the contact section made available to you on the website.
The basis of legitimation is the consent given.
c) Respond to the queries you make to us regarding the exercise of the rights about which we inform you below.
The basis of legitimation is compliance with legal obligations on our part.
d) By sending us your resume you authorize us to analyze the data and documents contained therein. They will be kept for a maximum period of six months, unless you tell us otherwise.
The basis of legitimation is the consent given.
e) If you expressly authorize us, we may send you information related to our activity, through any electronic means, including sending newsletters. This information will be kept as long as you do not request its deletion or opposition.
The basis of legitimation is the consent given.
f) COMPLAINTS CHANNEL: If you use our complaints channel in an identified manner, the entity will process your personal data to process your complaint within the framework of the management of the Internal Information System, in compliance with Law 2/2023 on the Protection of Whistleblowers. Basis of legitimacy: it is the consent of the interested party when filing the complaint voluntarily, and compliance with a legal obligation.
g) In the event of the existence of services or applications, these will contain their particular conditions with specific provisions regarding the protection of personal data. It is essential to read and accept it prior to requesting the service in question.
h) Through this Website, the User can access, through links, third-party websites, such as VISA and MasterCard through the payment gateway, to make payments for the products/Services purchased. At no time will our staff have access to the banking details (for example, credit card number) that the User provides to said third parties. Check the booking conditions.
Additional information: You can request additional and detailed information on Data Protection of our Treatment Records by sending us an email to info.lopd@victoriaplayahotel.com

3. CONSERVATION PERIODS and TYPES OF DATA WE PROCESS.

For the purposes set out in the previous section, a set of personal data is processed that we can divide into the following sources:

• Data provided by the user directly:
At the time of sending through the different forms contemplated on the website or any other means available at your disposal.
The user guarantees that the data provided for the provision of the requested services truthfully responds to their real situation and that they will communicate any modification that affects them. Consequently, the user will be liable to the Provider for any damages or losses caused as a result of non-compliance with the obligations assumed in this clause.
• Data collected indirectly:
All those data that, if you have given your consent, The Provider collects from the typology of external sources.
• Data derived from the provision of the service itself.
All those collected during the provision of the service.
• Data derived from the Whistleblowing Channel
It is reported that they may be collected anonymously or identified, at the choice of the complainant, providing the required data. For more information you can read the operating regulations of our Whistleblowing Channel.

The data you provide us will be kept as long as there is a mutual interest to maintain the purpose of the processing. They will be blocked when they are no longer necessary for the purpose for which they were collected or when you have exercised your right to deletion, cancellation and/or limitation of processing. After this period, the data will be deleted in accordance with the provisions of data protection regulations, which implies blocking it. They will remain at the exclusive disposal of Judges and Courts, the Public Prosecutor's Office and the competent Administrations, in particular the Data Protection Administration, for the attention of responsibilities arising from the processing, during the statute of limitations thereof. Once the indicated period has passed, they will be destroyed with appropriate security measures to guarantee their pseudonymization or total destruction.

In addition to the general treatment of the previous point, the conservation period of four years will be observed (Art. 66 et seq. of the General Tax Law), and six for accounting books and invoices (Art. 30 of the Commercial Code).

Complaints Channel retention periods:

The data must be kept only for the time necessary to investigate the facts, unless it results in the adoption of certain measures against the accused, in which case it would be possible to keep the data for a longer period. However, in general, the data will be deleted after three months from the presentation of the complaint, unless the investigation period is extended for another 3 months, if the purpose is conservation to leave evidence of the operation of the complaints channel, or arising from it judicial processes or investigations by the competent authorities.

4. YOUR DATA PROTECTION RIGHTS

Data protection regulations give you the following rights in relation to the processing of personal data:

• Right of access: You have the right to access your personal data to know which data is being processed and the processing operations carried out with them.
•Right to rectification: To be able to request the modification of your data because it is inaccurate or not truthful.
• Right to portability: Being able to obtain a copy in an interoperable format of the data being processed.
• Right to limitation of processing: In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
• Right to deletion: Request the deletion of your data when the processing is no longer necessary.
• Right to object: Request the cessation of sending communications in the indicated terms.
• Right to revoke the consent given.
To exercise these rights, you must send an express request, along with a copy of your DNI/NIF (only in case we cannot identify you) or equivalent and valid accreditation document, through the following means:

• EMAIL addressed to the address info.lopd@victoriaplayahotel.com with subjectData Protection. This submission must be made from the email address you included in the form/s. Otherwise, they will not be shown to you, as your identity is not considered sufficiently proven.

• BY POSTAL MAIL: Addressed to the address AV. AMELIA SANCHEZ S/N CP:18690 ALMUÑECAR –GRANADA (SPAIN)

If you do not receive a response in a timely manner from the Provider to your request, or you do not find it satisfactory, you are informed that the competent control authority is the Spanish Data Protection Agency (www.aepd.es). On its website you can find a series of models that will help you exercise your rights.

5. NO TRANSFER OF DATA

Users are expressly informed that their personal data will not be transferred in any case to third parties, except under legal obligation. Any exception to this rule will require your prior express, informed and unequivocal consent.

In compliance with our obligations, we may communicate your data to the State Security Forces and Corps, Public Administrations and courts, whenever such information is required in accordance with established legal processes.

If you contact our team through any of the profiles on social networks that HOTELES DE ALMUÑECAR SL (Hotel Victoria Playa) makes available to users, in addition to transferring the data you provide to us, you will also be transferring it to the entities responsible for that own social network. To know the use and treatment that these entities make of your data, we advise you to carefully read the privacy policies of the social networks that you have active.

Canal Denuncias: El acceso a los datos personales contenidos en el Canal de denuncias quedará limitado, dentro del ámbito de sus competencias y funciones, exclusivamente a:

a) The person responsible for the complaints channel and whoever manages it directly.
b) The person responsible for human resources or the duly designated competent body, only when disciplinary measures could be adopted against a worker.
c) The person responsible for the legal services of the entity, if the adoption of legal measures is appropriate in relation to the facts reported in the communication.
d) Those in charge of the treatment that may eventually be designated.
e) The data protection delegate.
f) Courts and Tribunals, Prosecutor's Office, when the facts could be indicatively constitutive of a crime
Likewise, you are informed that the entity has suppliers for the provision of its services with whom the corresponding processing commission contracts have been signed that regulate the processing of personal data by them, with the limitations established by law.

6. SECURITY MEASURES

In accordance with the provisions of current regulations on the protection of personal data, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, the Provider complies with all the provisions of the RGPD and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in article 5 of the RGPD, by which they are treated lawful, loyal and transparent manner in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The Website uses HTTPS (secure connection). It is a security protocol that ensures that your data travels completely and safely, that is, the transmission of data between a server and a web user, and in feedback, is completely encrypted or encrypted.

We guarantee that we have implemented appropriate technical and organizational policies to apply the security measures established by the RGPD and the LOPDGDD in order to protect your rights and freedoms, providing you with all the necessary information so that you can exercise the rights that assist you. We have installed all the means and technical measures at our disposal to prevent the loss, misuse, alteration, unauthorized access and theft of the personal data you provide us. However, you should be aware that Internet security measures are not impregnable.

7. MINORS

Minors (14 years old) may not use the services available through the Website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the Website by minors. at their expense, including completing the forms with the personal data of said minors and marking, where appropriate, the boxes that accompany them. At HOTELES DE ALMUÑECAR SL (Hotel Victoria Playa) we are not responsible for the veracity and accuracy of the data you provide.

The processing of personal data of a minor may only be based on their consent when they are over fourteen years of age.

Exceptions are cases in which the law requires the assistance of the holders of parental authority or guardianship for the celebration of the legal act or business in the context of which consent for the treatment is obtained.

The processing of data of minors under fourteen years of age, based on consent, will only be lawful if the consent of the holder of parental authority or guardianship is established, with the scope determined by the holders of parental authority or guardianship.

8. DURATION AND MODIFICATION OF THE PRIVACY POLICY

The Provider reserves the right to modify this Privacy Policy, in whole or in part, by publishing the changes on the Website. Likewise, the content and services provided, as well as the way in which they are presented, may be changed, deleted or added, without prior notice. Consequently, the Policies that are published at the time you access will be understood as current, so you must read them periodically.

Regardless of the provisions, access to the contents of the Website may be terminated, suspended or interrupted at any time without prior notice, without the User being able to demand any compensation.