PERSONAL DATA PROTECTION AND PRIVACY

While browsing through our website it is possible that personal data may be requested through different forms or means provided for this purpose. The personal data requested will be processed and incorporated into a file owned by THE OWNER for the specific purpose that motivates your request.

Basic information and summary on personal data protection

Responsible: CARRIS HOTELES, S.L

Purposes: Management of the contact and the consultation made, and where appropriate, if there is a subsequent order, the management of the same, including the administrative, accounting and tax management of the order, as well as the filing of the file.

Legitimacy: Consent of the interested party, interest of the applicant and the applicant’s own, as well as, if a subsequent assignment is made, the relationship that is established.

Transfers: The data will not be transferred to third parties, except with your express consent or the exceptions provided for in the regulations in force.

Rights: Access, rectification, deletion and right to be forgotten, limitation of processing, portability, opposition, complaint to the AEPD and not to be subject to profiling. Right to revoke the consent given.

Responsible

Identity: CARRIS HOTELES, S.L.

CIF: B-27.350.859

Registered office: Rúa do Gozo, 18, 15820, San Marcos, Santiago de Compostela, A Coruña

Email: info@carrishoteles.com

Purpose and duration

We will process your data in order to manage the contact you have made or the enquiry you have sent us. If you send us a request or order, the legitimate purpose of the processing is the management of this request or order, administrative, accounting and fiscal, as well as the archiving of the history.

The personal data provided will be kept for as long as it is needed to manage the contact, enquiry or order you have made and in compliance with the applicable regulations on data retention.

Legitimation

The legitimacy of the processing of your data is the consent you give by sending the contact form or consultation.

If an order or request is made, the legitimacy of the processing will be the relationship derived from the same, generally contractual that is established and the fulfilment of the professional and legal obligations derived from the same. In some cases, there will also be the interest of the entity or the user himself.

Data transfer

The data sent through the forms on this website will not be communicated to third parties, except with your express consent or with the legal obligation to do so.

User’s rights

You have the right to obtain confirmation as to whether we are processing your personal data, therefore, you have the right to access your personal data, to update it, to rectify inaccurate data or to request its deletion when the data is no longer necessary at any time.

In certain circumstances, you may request that we restrict the processing of your data, in which case we will only keep it for the exercise or defence of claims, or you may, on grounds relating to your particular situation, object to the processing of your data. You have the right to object to profiling.  Under certain conditions, you also have the right to request the portability of your data.

You also have the right to withdraw your consent at any time.

As a consequence of the application of the right to erasure or objection to the processing of personal data in the online environment, data subjects have the right to be forgotten.

To exercise your rights, you can write to the address indicated in the first section of this information or send an e-mail to the e-mail address indicated in the first section of this information.

If you consider that your rights have not been duly addressed, you have the right to file a complaint with the Spanish Data Protection Agency, with contact details:

Postal address: C/Jorge Juan, 6, 28.001-Madrid

Website: www.agpd.es

Telephone: 901 100 099

Electronic site: https://sedeagpd.gob.es/sede-electronica-web/

Categories and collection of personal data

The data controller will process the data supplied, which, given the scope of the consultations or orders, may be data of the following categories

Data of an identifying nature

• First name
• Surname
• Address
• Telephone
• E-mail address
• Browser Version
• Operating System Version
• IP Address
• User Interface
• Browser Language

Data collected by the web server

• Browser Version
• Operating System Version
• IP Address
• User Interface
• Browser Language

For the collection of data, different means will be used depending on the medium and the purpose of the data collected.

Contact forms

The personal data collected will be automatically processed and incorporated into the corresponding personal data files.

The personal data collected by the web server will be automatically processed and incorporated into the corresponding files.

Traditional means of communication

You may also provide us with your data by telephone, e-mail and other means of communication indicated in the contact section.

The purpose of the processing of this data will be solely to provide you with the information or services you request.

Certain services provided through the website may contain special conditions with specific provisions on the protection of personal data. It is essential to read and accept them prior to requesting the service in question.

Social networks

We have a profile on the main social networks on the Internet, recognising that in all cases we are responsible for the processing of the data of our followers, fans, subscribers, commentators and other user profiles (hereinafter, followers). The processing that the entity will carry out with said data will be, at most, that which the social network allows for corporate profiles. Thus, we will be able to inform followers by any means that the social network allows about our activities.

Under no circumstances will we extract data from the social networks, unless the user’s consent to do so is specifically and specifically obtained. Where, due to the very nature of social networks, the effective exercise of the follower’s rights is subject to the modification of the follower’s personal profile, we undertake to assist and advise the follower to this end to the best of our ability.

User-contributed content

Users can make comments on social networks, forms, blogs and similar instruments.

All information and comments received will be considered to be provided free of charge. Users should not send information that cannot be processed in this way.

It is also not recommended to send public information about oneself, let alone third parties, and it is expressly forbidden to include sensitive data or data that violate any kind of personal rights.

The owner of the website reserves the right to publish the comments that are sent and to remove all comments and contributions that are not related to the content of the entry in which the comment is made, violate intellectual property, respect for the dignity of the person, the right to honour, image or privacy, the right to the protection of personal data, that are discriminatory, xenophobic, racist, pornographic, that threaten youth or childhood, public order or safety or that, in his opinion, are illegal or simply not suitable for publication. In any case, the owner of the website is not responsible for the opinions expressed by users through the participation tools, nor for the contents.

Those comments or contents not published or removed will be destroyed.

Whoever sends a comment is responsible for providing lawful content and is responsible for the possible liabilities that, for whatever reason, may arise, including possible compensation. By way of example but not limited to not using them to: engage in activities that are illicit or contrary to good faith and public order, disseminate content or propaganda of a racist, xenophobic, pornographic, terrorist or human rights nature; that may cause damage to the physical and logical systems of the entity, its suppliers or third parties, introduce or disseminate computer viruses or any other physical or logical systems that may cause the aforementioned damage; attempt to access and modify or manipulate the messages of other users; infringement of the right to data protection.

If the user includes personal data, he/she must comply with data protection regulations. With regard to your personal data, you may exercise the rights set out in the previous section.

Secrecy and Confidentiality Obligation

The staff and collaborators of the owner of this website who have any kind of intervention in the actions provided to users are committed to not disclosing or making use of the information to which they have had access by reason of their position. The information provided by the user will, in any case, be considered confidential, and may not be used for purposes other than those related to the owner of the website.

We undertake to comply with the obligation of secrecy of personal data and the duty to keep them confidential and we will adopt the necessary measures to prevent their alteration, loss, processing or unauthorised access, taking into account the state of technology at all times.