Privacy policy

https://alcazarhotelsoller.com is an internet domain owned by:

ALCÁZAR EXPLOTACIONES, S.L.U. B56705726
C/ROMAGUERA Nº25, 07100 SÓLLER

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and with Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights, we set out our Privacy Policy below.

We reserve the right to amend this Privacy Policy in order to adapt it to legislative developments, case law or interpretations issued by the Spanish Data Protection Agency. In that case, such changes will be announced, clearly indicating the amendments made with due notice and, where necessary, requesting acceptance of those changes.

The User undertakes that all the data they provide is true and correct.

WHAT KIND OF DATA DO WE USE?

Categories of personal data:

• Identification data: first name, surname, email address and telephone number.

• Financial and payment data: data required to manage payments, including, where applicable, information relating to credit cards or other means of payment.

• Image data: images or, where applicable, video recordings obtained through CCTV systems installed on the premises, as well as any that may be captured and used for promotional purposes or for communication on social media, always in accordance with the applicable regulations and, where necessary, with the data subject’s prior consent.

• Data required by the competent public authorities. In addition to identification data, where it is necessary to manage authorisations to access traffic-restricted zones, data such as the driving licence and vehicle registration number may be processed, together with any data strictly necessary and required by the authority.

FOR WHAT PURPOSES DO WE USE THE USER’S DATA?

• Provision of services and management of the contractual relationship: managing the contracting, provision and maintenance of the services and/or products requested, as well as registration as a registered user.

• To process and manage your registration as a registered User on the website in order to provide the services you request in connection with our activity.

• Administrative, tax and accounting management: complying with the legal obligations arising from the contractual relationship, including tax, accounting and administrative management.

• Management of recruitment processes: managing the User’s participation in staff recruitment processes when they send us their CV.

• If you have a vehicle, we will process your data in order to manage authorisations to access traffic-restricted Low Emission Zones, in accordance with the applicable regulations or the requirements of the competent public authorities.

• Chatbot with artificial intelligence: managing the enquiries made, offering automated assistance in response to users’ requests. Where applicable, the data may be processed to improve the quality of the automated service, without decisions with legal effects being taken without human intervention.

WHAT ARE THE LEGAL BASES FOR PROCESSING?

We may process the User’s personal data where this is necessary for the performance of the contractual relationship or the provision of the services requested.

We may also process the User’s personal data in compliance with the legal obligations applicable to the owning company.

We may likewise process the User’s personal data on the basis of our legitimate interest, in particular for the management of the service and the sending of commercial communications, by both ordinary and electronic means, provided that this interest does not override the rights and freedoms of the data subject.

Where the legal basis for processing is the User’s consent, this will be requested expressly and unambiguously, and may be withdrawn at any time by a request sent to info@alcazarhotelsoller.com, without this affecting the lawfulness of the processing carried out prior to its withdrawal.

HOW LONG DO WE KEEP THE USER’S DATA?

We will keep the User’s personal data in our information systems for as long as it is necessary, for as long as the relationship as a customer continues, and in order to comply with legal obligations.

WHO MAY WE DISCLOSE THE USER’S DATA TO?

The User’s personal data will not be disclosed to third parties, except where there is a legal obligation, where the User has given their express consent, or where such disclosure is necessary for the proper development and performance of the contractual relationship and the provision of the services requested.

For the proper management of the services and/or products offered, the Data Controller may disclose personal data to entities within the same business group and/or to third-party service providers acting as Data Processors, with whom data processing agreements have been formalised, for the sole purpose of supporting administrative management, information storage, the provision of technological services or the facilitation of the communications required to perform the service.

No international transfers of data outside the European Economic Area are envisaged, except where strictly necessary for the provision of the service requested or where the User has given their express consent after having been duly informed of the applicable safeguards.

In particular, this website uses certain technology providers acting as data processors. Among them is the website’s booking engine, provided by the company "Simple booking", which is responsible for managing the bookings made through the website.

In addition, users are offered the possibility of reselling non-refundable rates through our partner company "Trip Resale". That entity acts independently, and we have entered into a data protection compliance agreement with it in accordance with the GDPR and the LOPDGDD. This functionality is managed directly through the Trip Resale platform, accessible via a link from our website.

Likewise, where such processing is necessary to comply with a legal obligation or a requirement from public authorities, the data may be disclosed to those competent authorities.

HOW CAN THE USER EXERCISE THEIR RIGHTS?

The User may exercise their rights of access, rectification, objection and erasure of their data, as well as request its restriction and portability, at the following email address: info@alcazarhotelsoller.com

In the following cases:

• To rectify inaccurate data or, where applicable, to request its erasure (the right to be forgotten) when, for example, consent has been withdrawn. In that case, we will keep it only for the exercise or defence of claims and/or to comply with a legal obligation.

• To request the restriction of the processing of the data when, for example, the data is no longer necessary for the purposes for which it was collected.

• In addition, a complaint may be lodged with the Supervisory Authority (the Spanish Data Protection Agency, www.agpd.es).

WHICH DATA IS OPTIONAL?

Where certain data is mandatory, this will be indicated in the forms on the website by means of an asterisk (*) and/or a notice. Failure to provide such data may prevent us from providing all services linked to that data, releasing us from any liability for the non-provision or incomplete provision of those services.