Hotel Bonavida's privacy policy

In accordance with the provisions of Law 29/2021, of October 28, 2016, on personal data (LQPD) and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (RGPD), all our customers are informed that the personal data collected will be incorporated and treated in the files owned by Hotel Bonavida. with the sole purpose of managing and carrying out accommodation, catering and/or activities services, and sending information about our products and services...

Our customers and their data are very important to Hotel Bonavida, so we are committed to:

• Do not collect any personal data without your consent

• We collect your data according to the principle of data minimization, that is, only the necessary, essential and not excessive for our purposes

• We collect and process your data only for the purposes described in our policy and we will inform your recipients

• We only collect and process the data necessary for the correct processing of your request or personalization of the services you request from us

• We are committed to taking appropriate measures to ensure the confidentiality of your data and prevent its disclosure to unauthorized third parties

• In situations of data transfers to authorized third parties, we take all appropriate measures to ensure the security of this transfer.

• Inform about your rights of access, rectification and opposition in accordance with Law 29/2011, October 28, 2021

RESPONSIBLE FOR THE TREATMENT

The person responsible for processing customer data is Hotel Bonavida

N.R.T.: F-030572-F

Registered Office: Pie de la Calle – AD100, Canillo

Phone: 00 376 751 300

Email: info@hotelbonavida.com

Data Protection Officer: dpd@hotelbonavida.com

TYPE OF DATA

Hotel Bonavida, may collect and process personal information provided directly and voluntarily by you, such as your name, address, email, telephone, date of birth, identity document number, computer IP.

We do not ask for or process sensitive data such as those related to race, ethnicity, political opinions, religious or philosophical beliefs or sexual orientation.

PURPOSE OF TREATMENT AND BASIS OF LEGITIMATION

Your data is collected when:

• Contact us by phone or email in our reservations department

• Complete your data at our receptions (check in)

• Make a reservation on our WEB

• Send us an email

• Share a page or an offer through an email or through a social network

• Send us an email

• Subscribe to our Newsletter

To indicate any personal data through the different forms and email addresses of this website implies accepting and consenting to its treatment in the terms indicated in this privacy policy.

In this way, the consent or other bases of legitimation such as the execution of the contract, our legitimate interest and compliance with legal obligations, reach the following purposes, with their respective bases of legitimation, without your data being applied or used for any other purpose for which they were collected:

The personal data provided by the interested parties will be used exclusively for the following purposes:

• Reservation, registration and contracting of products: Manage and execute the provision of the services and / or products contracted or requested by the interested parties, as well as the necessary steps to carry out the contractual relationship with the interested party, which includes informing, processing, managing, modifying and any other operation that is necessary for the management of your reservation or purchase, as well as the subsequent billing and collection.

• Usage analyses can be carried out based on the purchase and reservation history of the same interested party, without in any case taking automated decisions that entail legal effects.

• Record book of entries of travelers in hospitality establishments: Collect, manage and send the information established by current legal regulations regarding the record book of entries of travelers in hotel establishments.

• Queries: Attend, respond and follow the queries and requests made by the interested parties and / or provide information requested by the user.

• Access to the private area "my reservation": Manage the registration and allow access to the information contained on the website regarding the status of your reservation, as well as the general administration of the account, which allows you to modify the data of the same, its maintenance, control, management or cancellation, in the event that you have registered as a user.

• Advertising of own products and services: Send commercial advertising communications (newsletters) related to our products and services by any means (email, postal mail or telephone), with promotions and discounts, invitations to events organized by the company, etc. in the event that the interested party has accepted and consented to the sending of commercial communications by registering and subscribing to the Newsletter.

• Completion of unfinished reservations: Contact by any means (email or telephone) with the user in the event that the reservation has not been completed in order to know the reason why it has not been completed.

• Communicate changes in the privacy policy: Notify or communicate relevant changes in the data protection and privacy policy, legal notice or cookies or cookies policy.

• Statistics: Carry out market studies and statistics of our products and services, without in any case decisions being made in an automated manner.

The company informs you that it will not process your personal data for any other purpose except those included in this section, except in cases where there is a legal obligation or judicial requirement.

Your personal data will not be subject to decisions based on automated processing that have legal effects for the interested party.

Regarding the processing of your data for promotional or advertising purposes, the interested party will be provided, together with the corresponding data collection form, the possibility of accepting or rejecting this treatment, so that you can freely give your consent for this purpose. The consent granted can be revoked at any time and at no cost to the interested party.

Legitimation for the processing of your data

The legal basis for the processing of your personal data responds to the free and legitimate acceptance of the legal relationship by the user at the time of acceptance of this Personal Data Protection and Privacy Policy.

Likewise, the legitimacy for the processing of your data for each of the purposes of the processing of personal data that have been identified above is detailed below:

• Reservation, registration and contracting of products: The legal basis for the processing of your personal data is the contractual and, where appropriate, pre-contractual relationship established between the parties for the execution of the provision of the services and / or products contracted or requested by the interested parties, and in particular, for the execution of the reservation of the services and products of our establishment that has been made, according to the terms and conditions contained in the Terms and Conditions of Contract section as well as compliance with the corresponding commercial, fiscal and accounting obligations. All this based on the provisions of article 6.1 sections a) and b) of the LQPD and RGPD. The refusal to provide the personal data requested for the reservation will therefore make it impossible to carry out the contract or reservation requested. For more information on the contracting of our products and services, consult the section Conditions and Terms of Contract. After booking, you will receive a confirmation email with your booking details.

• Record book of entries of travelers in hospitality establishments: The legal basis for the processing of your personal data is the legal obligation established in respect of the collection, management and referral to the competent security forces established in the Regulation of the Register of Occupation of Tourist Accommodation (ROAT). This is based on the provisions of article 6.1 section c) of the LQPD and the RGPD. The refusal to provide the requested personal data will therefore make it impossible to stay at the establishment.

• Queries: The legal basis for the processing of your personal data is the possibility of responding to queries freely raised by the interested parties. This treatment is carried out based on the provisions of article 6.1 paragraphs a) and b) of the LQPD and the RGPD.

• Access to the private area "my reservation": In the event that the interested party has registered as a user to access, consult, modify or cancel from the web the status of "my reservations", the legal basis for the processing of their data is the contractual or pre-contractual relationship existing between the parties and allow access to the information contained on the website regarding the status of your reservation, as well as modify the data of the same or cancel it, in the event that you have registered as a user, as well as your acceptance and free and express consent to process your data. This treatment is lawful based on the provisions of article 6.1 paragraphs a) and b) of the LQPD and the RGPD. Refusal to provide the requested personal data will make it impossible to access this information from the website.

• Advertising of own products and services: In the event that the interested party has checked the box corresponding to accepting to receive commercial advertising communications (newsletters), the legal basis for sending advertising about products and services is the free and express consent of the interested party, which can be withdrawn at any time, without the withdrawal of consent for this purpose conditioning the execution of the room reservation contract, where applicable. This processing of personal data is based on the provisions of article 6.1 paragraph a) of the LQPD and the RGPD. The refusal to provide the requested personal data will therefore make it impossible to subscribe to the newsletter or receive commercial communications with information about our products or services. We inform you that you have the right to withdraw your consent to this treatment at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal. In case you wish to withdraw your consent, please refer to the section "Right of data subjects".

• Termination of unfinished reservations: The legitimacy to treat the data in this case is the acceptance and express consent by the interested party of this treatment so that the company can contact the interested party in the event that a technical incident has occurred at the time of making the reservation or contracting. This processing of personal data is based on the provisions of article 6.1 paragraph a) of the LQPD and the RGPD. The refusal to provide the personal data requested for the reservation will therefore make it impossible to carry out and conclude the requested contract or reservation.

• Job bank: In the event that the interested party has registered in the form to work with our company and / or has provided us with his curriculum vitae, the legal basis for the processing of his data is his free acceptance and consent to process his personal data and the evaluation and management of his job application, all this based on the provisions of article 6.1 sections a) and b) of the LQPD and the RGPD. Refusal to provide the requested personal data will make it impossible for your job application to be managed and processed.

• Communicate changes in the privacy policy: The legitimacy to process personal data in this case is based on the convenience of communicating to the interested parties the changes that may occur in the privacy policy of the company, as well as in their free acceptance and consent for this treatment, based on the provisions of article 6.1 sections a) and b) of the LQPD and the RGPD.

• Statistics: The legitimacy to process data to carry out market research and statistics of our products and services, without in any case decisions being made in an automated manner with legal effects for the interested party, is the free acceptance and consent of the interested party for this treatment, based on the provisions of article 6.1 paragraphs a) of the RGPD. We inform you that you have the right to withdraw your consent to this treatment at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal. In case you wish to withdraw your consent, please refer to the section "Right of data subjects".

DATA RETENTION

The personal data provided will be kept by Hotel Bonavida as long as there is a contractual and/or commercial relationship and as long as you do not exercise the right of deletion, opposition and/or limitation of the processing of personal data or, in our case, during the maximum legal period allowed by data protection legislation, including the limitation periods of legal actions for the attention of possible liability that may arise from the relationship. contractual.

In the latter case, Hotel Bonavida will keep the data duly blocked, without giving it any use, as long as it may be necessary for the exercise or defense of claims or any type of judicial, legal or contractual responsibility may arise from its treatment, which must be attended and for which its recovery is necessary.

ADD HERE

INFORMATION PROCESSED. WHAT CATEGORIES OF PERSONAL DATA DO WE PROCESS?

We ensure that the information we request is the minimum and necessary for the management of the purposes contained in this Data Protection and Privacy Policy.

Our company may process the following categories of personal data:

• Identification data: name and surname, identification number, country, etc.

• Postal or electronic addresses and telephone number.

• Economic and financial information: for the management of the reservation and subsequent billing and collection of the requested service.

• Data relating to the products and services contracted (hotels booked, frequency, length of stay, hotels previously booked, etc.).

• Identification codes or keys: in the event that you have registered as a user in the section of the website "My reservations" or in the "Club".

• Academic data and employment information: in the event that you have decided to register for a job offer or send us your curriculum vitae.

• Navigation data on the website: For more information, see the section on Cookies or computer cookies.

• No specially protected data or special categories of data are processed.

• The categories of interested parties of whom we treat your personal data: a priori they are the people interested in the products and services of our company, as well as in the contracting or reservations of the same. People who register in the job exchange or send their curriculum vitae will also be considered interested.

• The interested party guarantees: that the personal data provided are truthful and is responsible for communicating to the company any modification or error in them, therefore responding to the veracity and accuracy of the data provided at all times.

In the event that the interested party intends to communicate personal data of third parties, he must have previously informed and obtained their consent, in accordance with our Data Protection and Privacy Policy. That is why, in the event that the user has entered personal data of a third party, he declares and guarantees that he has the consent of the third party for the communication of his data and subsequent treatment thereof by our company, as well as that he has previously informed the third party whose data he provides of the content of this Data Protection and Privacy Policy.

PERSONAL DATA WE COLLECT AUTOMATICALLY

When the data subject visits our websites, we collect certain information automatically, even if no reservation or contract is made at the end. This information may include the IP address, the date and time our services were accessed, information about the hardware, software or internet browser you use, the language selected, among others.

This information allows us to improve the services and user experience on the website, and identify possible fraudulent uses and possible attacks on the security of the website, as well as to compile statistics on the use and effectiveness of the website. Unless fraudulent or security use of the website is detected, this data will not be kept. In no case will automated decisions be made with legal effects for the user based on this information.

For more information, see the section on Cookies or computer cookies.

SENDING COMMUNICATIONS

Whenever the interested party makes a reservation or contracts a service or product, an email will be sent in which the reservation or contracting confirmation will be communicated, with information about it. Likewise, we may contact the interested party to inform him of any modification or novelty related to it.

On the other hand, the company may send commercial communications related to the products or services it offers provided that it has expressly and specifically consented to it by validating the box enabled for this purpose or by any manifestation of express consent in this regard.

The interested party may withdraw their consent to receive any type of commercial communication at any time by sending a communication in the terms set out in the section "Right of interested persons". Likewise, this possibility will be offered to the interested party also in each commercial communication received via email or sms.

LINKS TO THIRD PARTY WEBSITES

Our website may contain links to websites of third-party companies and entities. Since we cannot be held responsible for the way in which these companies treat the protection of the privacy and personal data of their users, we advise you to carefully read the privacy policy statements of these websites that are not owned by the company regarding the use, processing and protection of personal data.

SOCIAL MEDIA

Our company uses social networks to publicize its services and products and share information and experiences with its users and followers.

Given that we cannot be held responsible for the way in which these companies treat the protection of privacy and personal data, and that each of them has its own policy on the matter, we advise you to carefully read the privacy policy statements of each social network regarding the treatment they carry out with the personal data of their users, Before using

MINORS

The website of Hotel Bonavida is not aimed at minors. In any case, we will not collect any personal data from children under 16 years of age without the consent of their legal representative. The data collected from children under 16 years of age will be at the time of registration in our hotels, by legal obligation, and only the data necessary to this obligation.

RECIPIENTS

At the end of our website or in our hotel, you expressly authorize the transfer of your data to Hotel Bonavida so that it can carry out the purposes set forth in this privacy policy. In the event that you provide Hotel Bonavida with personal data of third parties, you declare that these data are true and that you have informed and requested the consent of these third parties, whose data you provide us, that your personal data will be treated by Hotel Bonavida in the same terms that the client has been informed and given his consent in this privacy policy.

COMMUNICATION OF DATA TO THIRD PARTIES

We do not sell, rent or share your personal information with third parties, data will only be transferred in the following cases: (a) when necessary to fulfill a request you have made, such as sending newsletters; (b) when required by law or court order; (c) where necessary to protect our rights or property; or (d) where you have expressly consented to the sharing of your information.

EXERCISES OF DATA PROTECTION RIGHTS

SECURITY MEASURES AND LEVELS

Hotel Bonavida has adopted the necessary measures to maintain the required level of security, according to the nature of the personal data processed and the circumstances of the treatment, in order to avoid, as far as possible and always according to the state of the art, its alteration, loss, treatment or unauthorized access.

Likewise, Hotel Bonavida guarantees that it has implemented mechanisms to:

1. Ensure the permanent confidentiality, integrity and resilience of treatment systems and services.

2. Assessed the availability and access to personal data quickly, in case of physical or technical incident.

3. Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the security of the treatment.

4. Pseudonymize and encrypt personal data, if applicable.

INTERNATIONAL TRANSFERS

Hotel Bonavida does not transfer international data.

COOKIES

Access to our website may involve the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server remembers certain information that it can later use. This information allows you to be identified as a specific user and allows you to save your personal preferences, as well as technical information such as visits or specific pages you visit.

Those users who do not wish to receive cookies or want to be informed before they are stored on their computer, can configure their browser for this purpose.

For more information, visit our Cookies Policy.

CUSTOMER CONSENT

As a user and client, you declare that you have read and expressly accepted this Privacy Policy when registering at Hotel Bonavida, granting your unequivocal and express consent to Hotel Bonavida, to the processing of data in accordance with the purposes and services reflected herein.

CONFIDENTIALITY AND PROFESSIONAL SECRECY

The data we collect in all private communications between Hotel Bonavida and customers will be treated with absolute confidentiality, by which we commit ourselves to the obligation of secrecy of personal data, to the duty to keep them and adopt all necessary measures to avoid their alteration, loss and treatment or unauthorized access, in accordance with the provisions of the applicable data protection regulations.

In addition, information of any kind that the parties exchange with each other, that which they agree has such a nature, or that which simply deals with the content of said information, will also have the status of confidential.

MODIFICATIONS

Hotel Bonavida reserves the right to modify its security and data protection policy in order to adapt it to new legislation or jurisprudence, as well as those that may arise from existing codes of conduct in the matter, or by strategic corporate decisions, with effect from the date of publication of this modification on our website.