WEBSITE PRIVACY POLICY

hostalpacomarbella.com

I. PRIVACY AND DATA PROTECTION POLICY

Respecting the provisions of current legislation, Azude Hospitality SL (hereinafter also referred to as the Website) is committed to adopting the necessary technical and organizational measures, according to the appropriate level of security depending on the risk of the data collected.

Laws incorporated in this privacy policy

This privacy policy is adapted to the current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR).

  • Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).

  • Royal Decree 1720/2007, of 21 December, approving the Regulation implementing Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).

  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The data controller of the personal data collected on Azude Hospitality SL is: Partners & Dealers, S.L., with Tax ID (NIF): B75386722 (hereinafter, Data Controller). Their contact details are:

  • Address and fiscal domicile: CAMINO DE CAMOJAN (ED CAMOJAN), 7 - OFICINA 7, Marbella

  • Contact phone: (+34) 952 77 12 00

  • Contact email: recepcion@hostalpacomarbella.com

Personal Data Registry

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by Azude Hospitality SL through forms on its pages will be incorporated and processed in our files in order to facilitate, expedite, and fulfill the commitments established between Azude Hospitality SL and the User, or maintain the relationship established through the forms completed by the User, or to attend to any request or inquiry made by the User. Likewise, in accordance with the GDPR and LOPD-GDD, except where the exception in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying the processing activities carried out and other circumstances established by the GDPR.

Principles applicable to personal data processing

The processing of the User’s personal data shall be subject to the following principles set forth in Article 5 of the GDPR and Article 4 and subsequent articles of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights:

  • Principle of lawfulness, fairness, and transparency: User consent will always be required following completely transparent information about the purposes for which the personal data is collected.

  • Principle of purpose limitation: personal data will be collected for specific, explicit, and legitimate purposes.

  • Principle of data minimization: only personal data strictly necessary for the purposes for which they are processed will be collected.

  • Principle of accuracy: personal data must be accurate and kept up to date.

  • Principle of storage limitation: personal data will only be kept in a manner that allows the User’s identification for the time necessary for the purposes of processing.

  • Principle of integrity and confidentiality: personal data will be processed to ensure their security and confidentiality.

  • Principle of accountability: The Data Controller is responsible for ensuring compliance with the above principles.

Categories of personal data

The categories of data processed by Azude Hospitality SL are only identifying data. Special categories of personal data as per Article 9 of the GDPR are not processed.

Legal basis for the processing of personal data

The legal basis for processing personal data is consent. Azude Hospitality SL commits to obtaining the User’s explicit and verifiable consent for the processing of their personal data for one or several specific purposes.

The User has the right to withdraw their consent at any time. It will be as easy to withdraw consent as to give it. Generally, withdrawal of consent will not affect the use of the Website.

When the User must or may provide data through forms to make inquiries, request information, or for reasons related to the Website content, they will be informed if completing any of these forms is mandatory because it is essential for the correct development of the operation performed.

Purposes for which personal data are processed

Personal data are collected and managed by Azude Hospitality SL to facilitate, expedite, and fulfill the commitments between the Website and the User or to maintain the relationship established through the forms the User completes or to respond to a request or inquiry.

Data may also be used for commercial purposes related to personalization, operational and statistical activities, and activities inherent to Azude Hospitality SL’s corporate purpose, including data extraction, storage, and marketing studies to adapt the content offered to the User and improve the Website’s quality, functionality, and navigation.

When personal data is obtained, the User will be informed of the specific purposes of the processing, i.e., the use or uses given to the collected information.

Retention periods of personal data

Personal data will only be retained for the minimum time necessary for the purposes of processing and, in any case, only for the following period: while the commercial relationship is maintained or until the User requests deletion and for the period during which legal responsibilities may arise from the services provided, or until the User requests deletion.

When personal data is obtained, the User will be informed about the retention period or, when not possible, the criteria used to determine that period.

Recipients of personal data

The User’s personal data will not be shared with third parties.

In any case, when personal data is obtained, the User will be informed about the recipients or categories of recipients of the personal data.

Personal data of minors

Respecting Articles 8 of the GDPR and 7 of Organic Law 3/2018, only those over 14 years old may legally give consent for the processing of their personal data by Azude Hospitality SL. For minors under 14 years, parental or guardian consent is required, and the processing will only be lawful to the extent such consent has been given.

Confidentiality and security of personal data

Azude Hospitality SL commits to adopting the necessary technical and organizational measures according to the risk level to guarantee the security of personal data and to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed.

The Website has an SSL (Secure Socket Layer) certificate ensuring that personal data are transmitted securely and confidentially, with encryption between the server and the User.

However, as Azude Hospitality SL cannot guarantee absolute internet security or the absence of hackers or fraudulent access, the Data Controller commits to notifying the User without undue delay if a data security breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons, as defined in Article 4 of the GDPR.

Personal data will be treated as confidential by the Data Controller, who will ensure through legal or contractual obligations that confidentiality is respected by employees, associates, and any other persons given access to the information.

Rights arising from the processing of personal data

The User has the following rights with respect to Azude Hospitality SL under the GDPR and Organic Law 3/2018:

  • Right of access: to confirm whether Azude Hospitality SL is processing their personal data and obtain detailed information about it.

  • Right to rectification: to have inaccurate or incomplete personal data corrected.

  • Right to erasure ("right to be forgotten"): to have personal data deleted under certain conditions.

  • Right to restriction of processing: to limit the processing of their personal data under specific circumstances.

  • Right to data portability: to receive their personal data in a structured, commonly used format and transfer it to another controller.

  • Right to object: to object to the processing of their personal data.

  • Right not to be subject to automated decision-making: including profiling, unless otherwise provided by law.

The User may exercise these rights by sending a written request to the Data Controller referencing "GDPR-azudehospitalitysl.es", including:

  • Full name and a copy of their ID. If representation is allowed, identification of the representative and documentation accrediting representation is required.

  • Request detailing the specific reasons or information sought.

  • Address for notifications.

  • Date and signature of the requester.

  • Any supporting documents.

Requests can be sent to:

  • Postal address: CAMINO DE CAMOJAN (ED CAMOJAN), 7 - OFICINA 7, Marbella

  • Email: recepcion@hostalpacomarbella.com

Links to third-party websites

The Website may contain hyperlinks to third-party websites not operated by Azude Hospitality SL, who are responsible for their own data protection policies and practices.

Complaints to the supervisory authority

If the User believes their data rights are infringed, they may seek judicial protection and file a complaint with the relevant supervisory authority in their habitual residence, workplace, or where the alleged infringement occurred. In Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary that the User has read and agrees with the personal data protection conditions contained in this Privacy Policy and consents to the processing of their personal data so the Data Controller can proceed as specified.

Use of the Website implies acceptance of this Privacy Policy.

Azude Hospitality SL reserves the right to modify this Privacy Policy at its discretion or due to legislative, judicial, or doctrinal changes. Updates will not be explicitly notified to Users, who are advised to review this page periodically.