Privacy Policy

This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (RGPD), to Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), as well as, as far as it is not contrary to the aforementioned regulations, to Organic Law 15/1999, on the Protection of Personal Data (LOPD) and its implementing regulations, and/or those that may replace or update them in the future.
Our organization is committed to the privacy of your personal data. The personal data provided are necessary to provide our services and are processed in a lawful, fair and transparent manner, ensuring adequate security of the data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage through the implementation of technical and organizational measures.
By means of this document we would like to provide you with all the necessary information regarding the processing of your personal data by this organization in a transparent and fair manner.

I.- PERSON IN CHARGE OF THE TREATMENT.
IDENTITY: JOSÉ CRUZ MARTÍ GRAMAJE
C.I.F. / N.I.F.: 19977722Z
ADDRESS: C/ PINTOR LLORENS, 3, 03700 DENIA (ALICANTE)
TELEPHONE: 965780336
E-MAIL: comercial@mrhotelsdenia.com
II.- RECIPIENTS OF PERSONAL DATA.
1.- The personal data provided will not be subject to any transfer except as provided for in the specific treatments.
Optionally, for the contracting of cloud computing services and/or services for sending e-mails, communication, as well as other related computer services, the personal data may be:

-Ordered from IT service companies located within the European Economic Area (EEA) or,

-Transferred to IT service companies located outside the EEA and covered by the Privacy Shield so that they have adequate protection measures in place to ensure the security of personal data. You can obtain more information by visiting this link: https://www.privacyshield.gov/welcome

3.- Optionally, to administrations and other organizations when required in compliance with legal obligations.
III.- LEGAL BASIS THAT LEGITIMIZES THE PROCESSING OF PERSONAL DATA.
For each specific processing of personal data, we will inform you of the legal basis that legitimizes it.
IV.- RIGHTS.
4.1.- RIGHT OF ACCESS.
This is the right to obtain from the controller confirmation as to whether or not personal data relating to the data subject are being processed and, if so, the right of access to the personal data and to the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data were or will be disclosed, the storage period or the criteria used to determine this period, the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint
before the Spanish Data Protection Agency (AEPD), the existence, if any, of automated decisions, including profiling, when data is transferred to third countries the right to be informed of the appropriate safeguards applied.
4.2.- RIGHT OF RECTIFICATION.
It is the right to request the rectification of your personal data if it is inaccurate, including the right to complete incomplete data. Please note that by providing us with your personal information by any means, you warrant that it is true and accurate and you agree to notify us of any changes or modifications to it. Therefore any damage caused by reason of the communication of erroneous, inaccurate or incomplete information in the web forms, will be the sole responsibility of the interested party.
4.3.- RIGHT OF SUPPRESSION.
It is the right to request the deletion of your personal data when, among other assumptions, they are no longer necessary for the purpose for which they were collected, or they are being otherwise processed or you withdraw your consent. It should be noted that the deletion will not proceed when the processing of personal data is necessary, among other cases, for the fulfillment of legal obligations or for the formulation, exercise or defense of claims.
4.4.- RIGHT TO LIMITATION.
It is the right to request the limitation of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data or to keep it longer than necessary when you may need it.
4.5.- RIGHT TO WITHDRAW CONSENT.
It is the right to withdraw the consent you have provided by signing in handwritten or digital form at any time and as specified in the corresponding section “Exercise of rights” or in the specific treatment of commercial communications or Newsletter. It should be noted that this right will not be effective if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise or defense of claims. Likewise, the withdrawal of consent shall not have
retroactive effects, i.e. it will not affect the lawfulness of the processing based on consent prior to its withdrawal.
4.6.- RIGHT TO PORTABILITY.
This is the right to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format and to transmit it to another data controller, provided that: the processing is based on your consent and is carried out by automated or computerized means.
4.7.- RIGHT OF OPPOSITION.
It is the right to object to the processing of your personal data on the basis of our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the formulation, exercise or defense of claims.
4.8.- RIGHT TO SUBMIT A COMPLAINT TO A SUPERVISORY AUTHORITY.
If you believe that we are processing your personal data in an incorrect manner, you may contact us or you also have the right to file a complaint with the Spanish Data Protection Agency (AEPD):
https://www.agpd.es/portalwebAGPD/index-ides-idphp.php
4.9.- EXERCISE OF RIGHTS.
You may exercise your rights by sending a letter to the postal address above or by e-mail to comercial@mrhotelsdenia.com, enclosing in both cases a copy of your NIF/NIE/Passport or similar document.
V.- PROCESSING OF PERSONAL DATA.
5.1.- GENERIC PROVISIONS.
The personal data requested in each of the specific processing operations are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of data minimization.
The personal data requested in each of the specific treatments are strictly necessary, the refusal to provide them would imply not being able to provide the requested service.
The communications of personal data provided for in each of the specific processing operations are in some cases necessary for the performance and maintenance of a contract and in other cases for the fulfillment of a legal obligation applicable to the data controller.
5.2.- BASIC TREATMENTS.
Billing.
Personal data will be processed for the issuance of the corresponding invoice for services rendered.
The legal basis that legitimizes the processing of personal data is the fulfillment of a legal obligation applicable to the data controller.
In compliance with legal obligations applicable to the responsible, personal data will be transferred to the Tax Administration and other necessary official bodies, and as a necessary contractual requirement, to third party companies for the provision of services to the responsible for consulting / management, as well as and where appropriate, for the claim of guarantees regarding the products and / or services contracted.
Personal data will be kept for as long as the relationship between the parties is maintained or for the years necessary to comply with legal obligations.
E-mail.
Personal data will be processed to channel requests for information, suggestions and complaints from customers or users for management and resolution.
The legal basis that legitimizes the processing of personal data is the legitimate interest of the data controller.
Personal data will be kept for a period of two years from the time they cease to be processed, without prejudice to the exercise of your rights as a data subject.
Registration entry
Personal data will be processed to manage the service indicated in the document itself.
The legal basis that legitimizes the processing of personal data is the express consent given by signing the authorization for the processing of personal data.
As a necessary contractual requirement, personal data will be disclosed to external partners and to agencies, public officials, public registries, other third parties in general for the proper performance of the assignment, as well as to third party companies for the provision of services to the person responsible for consulting/administration.
Personal data will be kept as long as you do not withdraw your consent, unless they must be kept for the maintenance of the relationship between the parties or for the years necessary to comply with legal obligations.
Reservations.
Personal data will be processed to manage the reservations made, as well as for any other legitimate and necessary purpose based on the relationship between the parties.
The legal basis that legitimizes the processing of personal data is the express consent given by signing the corresponding authorization for the processing of personal data.
As a necessary contractual requirement, personal data will be transferred to third party companies for the provision of consulting services to the responsible party. In compliance with legal obligations, personal data will be transferred to the State Security Forces and Corps and the Tax Administration.
Personal data will be kept as long as you do not withdraw your consent, unless they must be kept for the maintenance of the relationship between the parties or for the years necessary to comply with legal obligations.