A. Responsible for Processing
We inform you that the personal data you provide in the context of our contractual relationship will be processed by Gestora de Alojamientos Granada, S.L. Calle San Juan de Dios, 3, 18001 Granad, for the purposes described below.
You confirm and guarantee the truthfulness and accuracy of the data provided, and that they are in line with their current status. In this regard, you agree to communicate any changes that occur in them, in accordance with the procedure set out in Section E. Rights of the person concerned.
B. Purposes of processing
Next, you are informed that your data will be treated by Gestora de Alojamientos Granada, S.L. with the following purposes
i. Based on the contractual relationship:
a- To manage the reservation you make through any of the channels enabled for this purpose and to process your application for registration as a client, as well as the subsequent commercial relationship with you, as well as
b- Manage, maintain and control in an effective way the relationship derived from the contracting of the products or services.
c- Proceed to the collection of the corresponding amounts when the reservation is cancelled out of time, if applicable, authorized for this purpose.
d- Manage the stay of the guests, as well as the provision of services requested by them during their stay, which includes, among other things, the preparation of the stay and the attention to the requests related to it. For these purposes, we may request data such as the age of underage guests in order to prepare the room with a crib, if necessary, or those data on the health of the guests that are necessary to manage their stay properly. This purpose also includes the billing and collection of the services consumed.
ii. On the basis of a legal obligation:
a- To communicate information to public authorities, regulators or government bodies in those cases where it is necessary to do so by law, local regulations or in compliance with regulatory obligations.
iii. Based on the legitimate interest of the company:
a- To carry out commercial and/or advertising actions or communications, by any means, including electronic communications or equivalent, related to products or services similar to those contracted by the guest.
b- To carry out profiling based on the personal data available to the company in order to find out which products and services can best fit your profile, so that you can maximize their performance and thus offer the best offers on products and services that may be of interest to you.
c- To carry out satisfaction surveys related to the products and/or services you have contracted, with the aim of evaluating your satisfaction with them, in order to improve the hosting processes and services.
d- Manage, process and respond to any complaints and claims made by you.
e- Record your voice and/or image and keep the telephone and/or video conversation, when expressly indicated. The company's legitimate interests are to maintain the quality of the service and to use the recordings if necessary to protect its legal position in the face of any potential conflict.
iv. Based on the explicit consent given by you:
a- If you authorise it, the company may offer you its own products and services other than those contracted by you by any means, including electronic means, as well as products from third parties in which you may be interested, even after the termination of this contractual relationship.
b- If you authorise it, the company may carry out a profile on your consumption habits through internal and external information, coming, for example, from sources accessible to the public (promotional census, lists of people belonging to professional groups or open social networks, among others), with the aim of offering you special offers on products or services adjusted to your needs, even after the termination of this contractual relationship.
In the terms described in section B. Purposes of processing, the company may communicate your personal data to the following entities:
- Public authorities, regulators or governmental or jurisdictional bodies in those cases where it is necessary to do so by law, local regulations or in the fulfilment of regulatory obligations.
- Third parties for the purposes described in point iii) f) Legitimate Interest and points b) and c) of point iv) Consent and set out in section B. Purposes of processing
Apart from the above data communications, the company has the collaboration of some third party service providers who have access to your personal data and who process such data on behalf of and for the company as a result of providing services.
The company follows strict criteria for the selection of service providers in order to comply with its data protection obligations and undertakes to enter into a corresponding data processing contract with them, imposing, among others, the following obligations: to implement appropriate technical and organisational measures; to process the personal data for the agreed purposes and only in accordance with the company's documented instructions; and to delete or return the data once the provision of the services has been completed.
In particular, the company will contract the provision of services by third party providers who carry out their activity, by way of example and not limitation, in the following sectors: logistics services, legal advice, supplier approval, professional services companies, maintenance-related companies, technology service providers, IT service providers, physical security companies, instant messaging service providers and call centre service companies.
D. Origin of data
Regardless of the personal data provided by you, the company may process personal data from common files, sectorial files and/or public bodies in accordance with the purposes and legitimate bases described in section "B. Purposes of processing" above.
In accordance with the above, the company will process personal data provided by the above-mentioned third parties corresponding to the following categories:
- Identification data.
- Postal or electronic addresses.
No specially protected personal data are obtained from third parties.
E. Rights of the interested party
The consents given in the cases provided for in this act may be revoked by you at any time, at your simple request. We inform you that in accordance with current legislation you have the right to exercise your rights of access, rectification, cancellation and opposition, as well as the right to delete, limit the processing and the right to the portability of your data, by proving your identity (by means of a copy of your ID card or equivalent) at the following address: Gestora de Alojamientos Granada, S.L., Calle San Juan de Dios 3, 18001, Granada, or to the following email firstname.lastname@example.org
If you consider that the company has not respected any of the rights mentioned above, you will have the right to file a complaint with the Spanish Data Protection Agency.
Your personal data will be kept for the entire duration of the contractual relationship between you and the company.
Once the contractual relationship has ended, your personal data will be deleted as soon as all the necessary actions have been taken to manage and conclude any remaining obligations between the parties. During this period, all the necessary administrative steps will be taken, except in those cases where the sending of commercial communications is applicable.
Without prejudice to the above, your data will be kept duly blocked, while responsibilities may arise from the execution of our contractual relationship, as well as for the fulfillment of other legal obligations by the company.
In this respect, the company guarantees that it will not process the data unless it is necessary for the formulation, exercise or defence of claims or when it is required to provide the same to the Public Administration, Judges and Courts during the period of limitation of its legal rights or obligations.