PRIVACY POLICY – DETAILED INFORMATION

PRIVACY POLICY – DETAILED INFORMATION

LAST MODIFICATION: 01/19/2023

The Privacy Policy is part of the General Conditions that govern the website www.hiddenawayhotels.com along with the Cookie Policy and the Legal Notice.

HIDDEN AWAY HOTELS S.L reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the website. In the event that a user has registered on the website and accesses their account or profile, they will be informed in case there have been substantial modifications regarding the processing of their personal data.

Who is responsible for processing your data?

The data collected or voluntarily provided by you through the Website, whether through browsing, as well as any information provided in contact forms, via email, or by phone, will be collected and processed by the Data Controller, whose details are provided below:

HIDDEN AWAY HOTELS S.L  CIF: B57676108

C/ Echegaray, 8, 28014, Madrid.

HOTEL POSADA TERRA SANTA,  C/De la Posada Terra Santa, 5, 07001, Palma de Mallorca, Illes Balears.

SUITE SAMARITANA, C/ Pes de Sa Farina, 2, 07001, Palma de Mallorca, Illes Balears.

Registered in the Mercantile Register of Palma de Mallorca, Volume 2433, Folio 106, Page 66229, insc. 1 dated 4 July 2013.

DANDA PATRIMONIO E INVERSIONES SL CIF: B57900029

C/ Echegaray, 8, 28014, Madrid

GRAN HOTEL INGLÉS,  C/ Echegaray, 8, 28014, Madrid.

Inscribed in the Commercial Registry of Palma de Mallorca, Volume 2433, Folio 106, Sheet 66229, Entry 1, dated July 4, 2013.

URIBEN SERVICES SL  CIF: B95817318

C/ Gravina 51, 41001, Sevilla.

HOTEL GRAVINA 51 C/ Gravina, 51, 41001, Sevilla.

Inscribed in the Commercial Registry of Seville, Volume 5566, Folio 199, Sheet BI-66816.

WANA INVERSIONES S.A CIF: A83057174

C/ Echegaray, 8,28014, Madrid.

SEDA CLUB HOTEL

Plza. De la Trinidad, 1801, Granada.

Inscribed in the Commercial Registry of Madrid, Volume 16743, Folio 43, Sheet M-285986.

Contact at HIDDEN AWAY HOTELS S.L for the protection of your personal data

Phone: 971 21 47 42

Contact Data Protection Officer: [email protected]

If, for any reason, you want to contact us regarding any issue related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

What data do we collect through the website?

Simply by browsing the Website, HIDDEN AWAY HOTELS S.L will collect information regarding:

– IP address.

– Browser version.

– Operating system.

– Duration of the visit or browsing of the website.

Such information is stored through Google Analytics, so we refer to the Google Privacy Policy, as it collects and processes such information: http://www.google.com/intl/en/policies/privacy/

Similarly, the Website provides the utility of Google Maps, which may have access to your location, if you allow it, in order to provide you with greater specificity about the distance and/or routes to our locations. In this regard, we refer to the Privacy Policy used by Google Maps to understand the use and processing of such data: http://www.google.com/intl/en/policies/privacy/

The information we handle will not be related to a specific user and will be stored in our databases for the purpose of conducting statistical analysis, improving the Website, our products and/or services, and helping us enhance our business strategy. The data will not be communicated to third parties.

User registration on the website / Submission of forms

To access certain services, such as booking, it is necessary for the user to complete a form. In the registration form, a series of personal data is requested. The data is necessary and mandatory to carry out such registration. If these fields are not provided, the registration will not be completed.

In this case, navigation data will be associated with the user’s registration data, identifying the specific user browsing the Website. This way, we can personalize the offer of products and/or services that, in our opinion, best suits the user.

The registration data of each user will be incorporated into the databases of HIDDEN AWAY HOTELS S.L, along with the history of operations carried out by the user, and will be stored in them until the registered user’s account is deleted. Once such an account is deleted, this information will be removed from our databases, keeping apart for 10 years those data related to the transactions carried out, without access or alteration, in order to comply with legally established deadlines. Data not linked to transactions will be kept unless consent is withdrawn, in which case they will be deleted immediately (always considering legal deadlines).

The legal basis for the processing of your personal data is the execution of a contract between the parties.

Regarding the sending of electronic communications and promotions and responding to requests for information, the legitimacy of the processing is the user’s consent.

The purposes of the processing will be as follows:

a) Manage your access to the Website.

b) Manage the purchase of services available to you through the Website.

c) Keep you informed about the processing and status of your requests, purchases, and/or reservations.

d) Respond to your information request.

e) Manage all the utilities and/or services offered by the platform to the user

Thus, we inform you that you may receive communications via email and/or on your phone to inform you of possible incidents, errors, problems, and/or the status of your requests.

For the sending of commercial communications, express consent from the user will be requested when registering. In this regard, the user may revoke the consent given by contacting HIDDEN AWAY HOTELS S.L, using the means indicated above. In any case, in each commercial communication, the option to unsubscribe will be provided, either through a link and/or email address.

Newsletter Subscription

On the Website, there is an option to subscribe to the Newsletter of HIDDEN AWAY HOTELS S.L. To do this, you need to provide an email address to which it will be sent.

This information will be stored in a database of HIDDEN AWAY HOTELS S.L, where it will be recorded until the interested party requests to unsubscribe or, if applicable, it is stopped by HIDDEN AWAY HOTELS S.L from sending it.

The legal basis for the processing of this personal data is the express consent provided by all those interested who subscribe to this service by checking the box provided for this purpose.

The email data will only be processed and stored for the purpose of managing the sending of the Newsletter by users who request it.

For the sending of the Newsletter, the express consent of the user will be requested when registering for it by checking the box provided for this purpose. In this regard, the user may revoke the consent given by contacting HIDDEN AWAY HOTELS S.L, using the means indicated above. In any case, in each communication, you will be given the option to unsubscribe from receiving them, either through a link and/or email address.

If you belong to any of the following groups, check the dropdown information:

+ WEB OR EMAIL CONTACTS

For what purposes will we process your personal data?

• To respond to your inquiries, requests, or petitions.
• To manage the requested service, respond to your request, or process your petition.
• Electronic information related to your request.
• Commercial or event information by electronic means, provided there is express authorization.

What is the legal basis for processing your data?

The acceptance and consent of the data subject: In those cases where completing a form and clicking the ‘send’ button is necessary to make a request, doing so will necessarily imply that the individual has been informed and has expressly given their consent to the content of the clause attached to that form or acceptance of the privacy policy.

All our forms have a check box with the following formula to be able to submit the information: “□ I have read and accept the Privacy Policy”.

+ CUSTOMERS

What purposes will we process your personal data for?

• Drafting the budget and monitoring it through communications between both parties.
• Electronic information related to your request.
• Commercial or event information via electronic means, provided there is explicit authorization.
• Management of administrative, communication, and logistics services provided by the Data Controller.
• Carry out the corresponding transactions.
• Invoicing and declaration of the relevant taxes.
• Control and recovery procedures.

What is the legal basis for processing your personal data?

The legal basis is your consent and the execution of a contract.

+ SUPPLIERS.

What purposes will we process your personal data for?

• Information by electronic means related to your request.
• Commercial or event information by electronic means, provided there is explicit authorization.
• Manage administrative, communication, and logistics services provided by the Controller.
• Invoicing.
• Performing relevant transactions.
• Invoicing and declaration of relevant taxes.
• Control and collection management.

What is the legal basis for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or alternatively, your consent when contacting us or offering your products through any means.

+ CONTACTS SOCIAL NETWORKS

For what purposes will we process your personal data?

• Answer your queries, requests, or petitions.
• Manage the requested service, answer your inquiry, or process your request.
• Interact with you and create a community of followers.

What is the legal basis for processing your data?

The acceptance of a contractual relationship within the corresponding social network’s environment, and in accordance with its Privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

Twitter http://twitter.com/privacy

Linkedin http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Whatsapp: https://www.whatsapp.com/legal/#privacy-policy

How long will we keep the personal data?

We can only access or delete your data in a limited way because we have a specific profile. We will process them for as long as you allow us to follow you, be friends, or click “like,” “follow,” or similar buttons.

Any correction of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.

+ VIDEO SURVEILLANCE

For what purposes are we going to process your personal data?

• Surveillance of our facilities.
• Employee monitoring.
• In some cases, they may be transferred to courts and tribunals for the exercise of legitimate actions.

What is the legal basis for processing your data?

Unambiguous consent from the interested party upon entering our premises after viewing the information sign in the monitored area.

+ JOB SEEKERS

What purposes will we process your personal data for?

• To organize selection processes for hiring employees.
• To schedule job interviews and evaluate your application.
• If you have given your consent, we may share it with collaborating or related entities, solely to assist you in finding employment.

What is the legal basis for processing your data?

The legal basis is your unequivocal consent when you provide us with your CV and receive and sign information regarding the processing we will carry out.

How long will personal data be retained?

The curriculum vitae will be stored for a period of one year, after which, if we have not contacted you, it will be deleted.

+ HR

What purposes will your personal data be processed for?

• Management of the employment relationship and employee record.
• Carrying out all necessary administrative, tax, and accounting procedures to
• comply with our contractual commitments, obligations in labor law, social security, occupational risk prevention, fiscal, and accounting regulations.
• Management of salary payments through a financial institution.
• Time control through the access control system using fingerprint/card (if applicable).
• Management of collective insurance/pension plan of the entity.
• Carrying out training actions, both subsidized and non-subsidized training.

What is the legal basis for the processing of your data?

The legal basis for the processing of your data is the execution of your employment contract. Compliance with relevant legal obligations. The consent of the data subject.

– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – –

Do we include personal data from third parties?

No, as a general rule, we only process data provided by the data subjects. If you provide us with data of third parties, you must, as a prior requirement, inform and request their consent from these individuals; otherwise, you exempt us from any responsibility for non-compliance with this requirement.

And what about data from minors?

We do not process data from individuals under 14 years old; therefore, refrain from providing such data if you are not of that age.

Will we communicate electronically?

• Communications will only be made to manage your request if it is one of the contact methods you have provided.
• If we send commercial communications, they will have been previously and expressly authorized by you.

What security measures do we apply?

You can rest assured: we have adopted an optimal level of protection for the personal data we handle, and we have implemented all the technical means and measures at our disposal, according to the state of the technology, to prevent loss, misuse, alteration, unauthorized access, and theft of personal data.

To what extent will decision-making be automated?

HIDDEN AWAY HOTELS S.L does not use fully automated decision-making processes to establish, develop, or terminate a contractual relationship with the user. In the event that we use such processes in a particular case, we will keep you informed and communicate your rights in this regard if required by law.

Will profiling take place?

In order to offer you products and/or services according to your interests and improve your user experience, we may create a “commercial profile” based on the information provided. However, no automated decisions will be made based on this profile.

Who will your data be communicated to?

Your data will not be transferred to third parties, except for legal obligations. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial entities for the collection of the provided service or purchased product, as well as to data processors necessary for the execution of the agreement.

In the case of a purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with the utmost security.

In the event that you have given us your consent for the processing of your name and images, and other information related to the activities of HIDDEN AWAY HOTELS S.L, they will be disclosed on different social networks and the website of HIDDEN AWAY HOTELS S.L.

International transfers.

If it is necessary to carry out international data transfers by HIDDEN AWAY HOTELS S.L, it will ensure that such transfers are possible in accordance with the General Data Protection Regulation or any other requirement established by applicable regulations. For this purpose, the company will adopt the agreements necessary to ensure a level of data protection equivalent to that provided for in European regulations.

In the case of working in a system of shared folders in applications such as Dropbox, Google Drive, Microsoft OneDrive, Amazon, Apple, HubSpot, etc., an international transfer to the United States will be carried out under the authorization of Article 49.c) of the General Data Protection Regulation or any other mechanism that ensures a level of data protection equivalent to that provided for in European regulations.

What rights do you have?

• Namely, if we are processing your data or not.
• To access your personal data.
• To request the rectification of your data if they are inaccurate.
• To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent granted.
• To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with current regulations.
• To port your data, which will be provided to you in a structured, common, or machine-readable format. If you prefer, we can send them to the new controller you designate. This is only valid in certain cases.
• To file a complaint with the Spanish Data Protection Agency if you believe that we have not treated you correctly.
• To revoke consent for any treatment for which you have consented, at any time.

If you modify any data, we appreciate it if you let us know to keep them updated.

Do you want a form to exercise your rights?

• We have forms for exercising your rights, ask us for them by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
• These forms must be signed electronically or accompanied by a photocopy of your ID.
• If someone represents you, you must attach a copy of their ID, or they must sign it with their electronic signature.
• The forms can be submitted in person, sent by mail, or by email to the address of the Data Controller at the beginning of this text.

You have the right to file a complaint with the Spanish Data Protection Agency if you believe that your rights request has not been properly addressed.

The maximum period for resolving by HIDDEN AWAY HOTELS S.L is one month, counting from the effective receipt of your request by us.

You have the right to revoke the consent for any of the treatments for which you have given it at any time.

Do we process cookies?

If we use other types of cookies that are not necessary, you can consult the cookie policy at the corresponding link from the beginning of our website.

How long will we keep your personal data?

• Personal data will be kept as long as you remain linked to us.
• Once you unlink, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a judge or court may request them based on the statute of limitations for legal actions.
• The processed data will be kept until the aforementioned legal deadlines expire, if there is a legal obligation to retain it, or, in the absence of that legal deadline, until the data subject requests its deletion or revokes the consent given.
• We will keep all information and communications related to your purchase or the provision of our service for the duration of the product or service warranties to address possible claims.
• For each treatment or type of data, we provide you with a specific period, which you can consult in the following table: