Privacy Policy
1. Information for users
Actividades Hoteleras Sta. Teresa S.L. is the controller of the User’s personal data and informs the User that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR), on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. The following information about this processing is therefore provided:
Purpose of processing: to maintain a commercial relationship with the user in connection with the products or services offered. The intended processing operations also include:
- Responding to enquiries and suggestions submitted by users.
- Processing orders, requests or any other type of enquiry made by the user through any of the contact methods made available to them.
- Managing your requests and/or bookings and collecting payment for them.
- Sending advertising and commercial communications by email, mobile applications, social networks or any other present or future electronic or physical means that enables commercial communications. These communications will be sent by the controller and will relate to its products and services, or those of partners or suppliers with which it has entered into a promotional agreement.
- If you send or leave us a CV, it may be used in recruitment processes. CVs will be kept for a maximum of one year, after which they will be deleted, with full confidentiality guaranteed both during processing and subsequent destruction. Once that period has elapsed, if you wish to continue participating in recruitment processes, please send us your CV again.
Data retention criteria: data will be retained for as long as there is a mutual interest in maintaining the purpose of the processing. When it is no longer necessary for that purpose, it will be deleted using appropriate security measures to guarantee data pseudonymisation.
Data disclosure: web developers and the company that hosts our website on its servers will have access to the data. Their access has been formally regulated with us exclusively for the purpose described here. Data will not be provided to any other third party for processing, except where legally required.
Legal basis: processing is based on the consent requested through the corresponding acceptance box.
User rights
- Right to withdraw consent at any time. The right to object and to data portability. The data subject has the right to receive all personal data concerning them that they have provided to a controller, provided that processing is based on consent or is necessary for the performance of a contract and is carried out by automated means.
- Right of access: the data subject has the right to request and obtain, free of charge, information about their personal data being processed, the source of that data and the disclosures made or planned. When the data subject submits the request electronically, and unless they request otherwise, the information will be provided in a commonly used electronic format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
- Right to rectification and erasure: the controller is required to give effect to the data subject’s right to rectification or erasure within ten days. Personal data whose processing does not comply with the law, particularly inaccurate or incomplete data, will be rectified or erased as appropriate. The data subject has the right to obtain the rectification of inaccurate personal data concerning them without undue delay. They also have the right to have incomplete personal data completed, including by providing a supplementary statement.
- Right to restriction of processing: the data subject has the right to obtain restriction of processing from the controller. Where the processing of personal data has been restricted, it may only be processed for storage, with the data subject’s consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of public interest. Any data subject who has obtained restriction of processing will be informed by the controller before that restriction is lifted.
- Right to object: the data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them on the basis of public or legitimate interest, including profiling based on those provisions. The controller will stop processing the personal data unless it demonstrates compelling legitimate grounds for the processing which override the data subject’s interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
- Right to lodge a complaint with the supervisory authority: if you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the Spanish Data Protection Agency: http://www.agpd.es
Contact details for exercising your rights
- Postal address: C/ Jesús del Gran Poder, 130 41002 Sevilla (Spain).
- Email address: alameda@nuahotels.com
2. Mandatory or optional nature of the information provided by the user
By ticking the corresponding boxes and entering data in the contact-form fields or forms presented for download, Users expressly, freely and unequivocally accept that their data is necessary for the provider to respond to their request. Entering data in the remaining fields is optional.
The User guarantees that the personal data supplied to the controller is accurate and is responsible for communicating any changes to it.
The controller expressly informs and guarantees users that their personal data will under no circumstances be transferred to third parties, and that if any type of personal-data transfer is made, the Users’ express, informed and unequivocal consent will be requested in advance.
All data requested through the website is mandatory, as it is necessary to provide the User with an optimal service.
If all the data is not supplied, there is no guarantee that the information and services provided will fully meet the User’s needs.