Hotel Peninsular is aware of the importance of the privacy of personal data and has therefore implemented a data processing policy aimed at providing the highest level of security in the use and collection of such data, ensuring compliance with current regulations in this area and establishing this policy as one of the fundamental pillars in the entity's actions.
During the navigation through the website www.hotelpeninsulargirona.com, it is possible that personal data may be requested through different forms provided for this purpose. These data will be part of the relevant processing activities based on the specific and determined purpose that motivates their collection.
Below is a list of data processing activities that may be carried out through the website:
I. Identification of the data controller.
All data processing activities are carried out on behalf of Novara Hotels S.L., whose identifying information is as follows:
| Information about the data controller | ||
| Data Controller | Novara Hotels S.L., | |
| Address | Avda. Sant Francesc, 6, 17001 GIRONA. | |
| peninsular@novarahotels.com | ||
| Phone | (+34) 972 98 19 20 | |
| Data Protection Contact | peninsular@novarahotels.com | |
| Information about the exercise of rights | You may access, rectify, and delete your data, as well as revoke your consent for the processing of the data, exercise your rights to restriction and data portability, and object to automated decision-making by sending a written request to the postal address provided in this table, or to the email address: peninsular@novarahotels.com. | |
II. Information about data processing carried out through www.hotelpeninsulargirona.com
Summary: The entity will process your data to send a response to your inquiry or comments.
I. Purpose and legal basis for data processing
A. Data subject to processing: We will process the data you have provided to us in the website contact form or, if applicable, through electronic means such as email or instant messaging.
B. Purpose of the processing: Our website has contact forms in different areas. The purpose of the data processing is to manage communications that may be established with users of the website who send us messages through these forms. The data will not be used for any other purpose.
C. Automated decisions: No profiling or automated decisions are made.
D. How long will we keep your data?
a. The data will be processed for the time necessary to handle your request or comment.
b. Afterwards, the data will be deleted if no further conversation or interaction occurs between the parties within one year.
E. Legal basis for processing: The legal basis for processing your data is the explicit consent you provide by accepting the privacy policy.
F. Obligation to provide data and consequences of not providing it: The requested data is mandatory, as otherwise we will not be able to contact you in order to handle your request or comment.
G. Data source: The data subject themselves.
II. To whom will your data be disclosed?
a. No data transfers will be made.
b. No international data transfers will be made.
Summary: The entity will process your data to manage your participation in personnel selection processes.
I. Purpose and legal basis for data processing
A. Data subject to processing: We will process the data you have provided to us in the website contact form or, if applicable, through electronic means such as email or instant messaging.
B. Purpose of the processing: Our website has contact forms in different areas. The purpose of the data processing is to manage communications that may be established with users of the website who send us messages through these forms. The data will not be used for any other purpose.
C. Automated decisions: No profiling or automated decisions are made.
D. How long will we keep your data?
a. The data will be processed for the time necessary to handle your request or comment.
b. Afterwards, the data will be deleted if no further conversation or interaction occurs between the parties within one year.
E. Legal basis for processing: The legal basis for processing your data is the explicit consent you provide by accepting the privacy policy.
F. Obligation to provide data and consequences of not providing it: The requested data is mandatory, as otherwise we will not be able to contact you in order to handle your request or comment.
G. Data source: The data subject themselves.
II. To whom will your data be disclosed?
a. No data transfers will be made.
b. No international data transfers will be made.
Summary: The entity will process your data to manage your subscription to the entity's newsletter.
I. Purpose and legal basis for data processing
A. Data subject to processing:
a. We will process the data you have provided to us in the registration form.
b. Additionally, at Hotel Peninsular, we use cookies and similar devices in our email newsletters, which allow us to personalize the content of our advertising emails to adapt them to the products and services with which you interact preferentially.
B. Purpose of the processing: The data you provide will be processed for the purpose of managing your subscription to the electronic newsletter of Hotel Peninsular, through which you will receive information about news and products and services related to the hotel and restaurant sectors.
C. Automated decisions: No profiling or automated decisions are made.
D. How long will we keep your data?
a. The data will be processed until you revoke your authorization for the processing of your data.
E. Legal basis for processing:
a. The legal basis for processing your data is the explicit consent you provide by accepting the privacy policy in the newsletter subscription form.
F. Obligation to provide data and consequences of not providing it: The requested data is mandatory, as otherwise we will not be able to facilitate your participation in the entity's personnel selection processes.
G. Data source: The data subject themselves.
II. To whom will your data be disclosed?
a. No data transfers will be made.
b. No international data transfers will be made.
Summary: When you contact us through an electronic medium, such as email, you will notice that the email signature includes initial information about the purpose of the data processing. In this clause, we inform you about the remaining points required by data protection legislation.
I. Purpose and legal basis for data processing
A. Data subject to processing: We will process the data you have provided to us in the communications you have with www.hotelpeninsulargirona.com through electronic means, such as email messages.
B. Purpose of the processing: The purpose of the processing is to manage the communications established between the parties.
C. Automated decisions: No profiling or automated decisions are made.
D. How long will we keep your data? The data will be processed for the period of time during which potential liabilities may arise between the parties, with a minimum of 5 years.
E. Legal basis for processing: The legal basis for the processing is based on consent.
F. Obligation to provide data and consequences of not providing it: The requested data is voluntary, as it is the information that the parties voluntarily provide in the exchange of communications.
G. Data source: The data subject themselves.
II. To whom will your data be disclosed?
a. No data transfers will be made.
b. No international data transfers will be made.
Summary: The entity will process your data to manage your reservation at the establishment.
I. Purpose and legal basis for data processing
A. Data subject to processing: We will process the data you have provided to us in the registration form.
B. Purpose of the processing: If you make a reservation at our establishment through the booking engine, your data will be processed to facilitate the reservation process.
C. Automated decisions: No profiling or automated decisions are made.
D. How long will we keep your data?
a. The data will be processed for the period of time during which potential liabilities may arise between the parties, with a minimum of 5 years.
E. Legal basis for processing:
a. The legal basis for processing the reservation is the execution of a contract between the parties.
F. Obligation to provide data and consequences of not providing it: The requested data is mandatory, as otherwise the reservation process cannot be completed.
G. Data source: The data subject themselves.
II. To whom will your data be disclosed?
a. No data transfers will be made.
b. No international data transfers will be made.
Summary: The entity will process your data to handle the requested quotation.
I. Purpose and legal basis for data processing
H. Data subject to processing: We will process the data you have provided to us in the registration form.
I. Purpose of the processing: If you reserve a spot at our establishment through the booking engine, your data will be processed to facilitate the aforementioned reservation process.
J. Automated decisions: No profiling or automated decisions are made.
K. How long will we keep your data?
a. The data will be processed for the period of time during which potential liabilities may arise between the parties, with a minimum of 5 years.
L. Legal basis for processing:
a. The legal basis for processing the reservation is the execution of a contract between the parties.
M. Obligation to provide data and consequences of not providing it: The requested data is mandatory, as otherwise the reservation process cannot be completed.
N. Data source: The data subject themselves.
II. To whom will your data be disclosed?
a. No data transfers will be made.
b. No international data transfers will be made.
III. Exercise of rights:
You have the right to obtain confirmation as to whether or not we are processing personal data concerning you. As a data subject, you have the right to access your personal data, as well as request the rectification of inaccurate data or, where applicable, the erasure of such data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, you may request the restriction of the processing of your data, in which case we will only retain it for the exercise or defense of legal claims. Under certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. We will cease processing the data, except for compelling legitimate grounds or the exercise or defense of possible legal claims.
In cases where the processing of your data is based on your consent, you may revoke it at any time.
In cases where it is legally applicable, you have the right to data portability, which means that you have the right to receive the personal data concerning you, which we are processing, and store it on your own device. This right also allows you to request that we transmit your data to another data controller.
Furthermore, if you believe that there is a problem or an incident regarding the data processing, you can contact the entity through the contact address indicated in this document, and in any case, you have the right to lodge a complaint with the supervisory authority for personal data protection, which in the case of Spain is the Spanish Data Protection Agency.
To exercise your rights, you must send us a request to the email address peninsular@novarahotels.com, attaching a copy of your ID card or another legally identifying document.