Privacy Policy
USER INFORMATION
Privacy policy: Sociedad de Autogestión de Hoteles Rurales, S.L., is responsible for the processing of User’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data, therefore the following treatment information is provided:
PURPOSE OF THE TREATMENT
To maintain a commercial relationship with the user in relation to the products or services offered. In addition, the operations planned to carry out the treatment are:
To respond to inquiries and suggestions that users may make.
To process orders, requests, or any type of request made by the user through any of the contact forms made available.
To manage your requests and/or reservations and their payment.
Sending commercial advertising communications by email, mobile applications, social communities, or any other electronic or physical means, present or future, that enable commercial communications to be made. These communications will be made by the responsible party and will be related to their products and services, or those of their collaborators or suppliers with whom they have reached some promotion agreement.
If you send us your resume, it may be used in personnel selection processes. The resumes will be kept for a maximum period of one year, after which they will be deleted, guaranteeing total respect for confidentiality both in their treatment and in their subsequent destruction. In this sense, after said period, and if you wish to continue participating in the selection processes, we ask you to send us your resume again.
DATA RETENTION CRITERIA
They will be kept as long as there is a mutual interest in maintaining the purpose of the treatment, and when it is no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure the pseudonymization of the data.
DATA COMMUNICATION
Web developers and the company that hosts us on their servers will have access. All of them have regularized access to this data with us for the exclusively described purpose. They will not be allocated to any other third party for processing, except for legal obligations.
LEGITIMATION
It is based on the consent requested through the corresponding acceptance box.
USER RIGHTS
Right to withdraw consent at any time. Right to object and to data portability.
The interested party is entitled to receive all personal data concerning them that they have provided to a controller, in a structured, commonly used, and machine-readable format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
RIGHT OF ACCESS
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning them is being processed, information on the processing of their personal data, and access to their personal data. When the data subject submits the request electronically, unless they request otherwise, the information shall be provided in a common electronic format. The right to receive a copy shall not adversely affect the rights and freedoms of others.
RIGHT TO RECTIFICATION AND ERASURE
The controller shall be obligated to rectify or erase the personal data of the data subject without undue delay. The interested party has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
RIGHT TO RESTRICTION OF PROCESSING
The data subject has the right to obtain from the controller the restriction of processing. Any data undergoing processing will be restricted and can only be processed with the consent of the data subject, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of public interest. Any data subject who has obtained the restriction of processing shall be informed by the controller before the restriction is lifted.
RIGHT TO OBJECT
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them (public interest and legitimate interest), including profiling based on these provisions. The controller shall stop processing the personal data unless they demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
If you are not satisfied with the exercise of your rights, you may lodge a complaint with the Spanish Data Protection Agency http://www.agpd.es
CONTACT DETAILS TO EXERCISE YOUR RIGHTS
Postal address: Bajada de los Desamparados, 2, 45003 Toledo
Email address: correo@hotelmedina.com
OBLIGATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
Users, by ticking the corresponding boxes and entering data in the fields of the contact form or presented in download forms, expressly and freely accept that their data is necessary to meet their request, on the part of the service provider, with the inclusion of data in the remaining fields being voluntary.
The User guarantees that the personal data provided to the controller is true and is responsible for communicating any changes to it.
The controller expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that whenever any type of personal data transfer is made, the express, informed, and unequivocal consent of the Users will be requested beforehand.
All data requested through the website is mandatory, as it is necessary for the provision of an optimal service to the User.
If all the data is not provided, it is not guaranteed that the information and services provided will be fully tailored to their needs.
