Privacy Policy This legal text provides details on how we collect and process your personal data through the use of our website http://www.hotelvinuela.com, including any information you may provide to us through the site when you register for our newsletter, contract a service, or provide your data through the form enabled for such purpose. By providing us with your data, we inform you that our services are not available to those whom regulations prevent from giving consent; therefore, when you submit the forms to us, you guarantee that you have sufficient capacity to provide consent. Below, we inform you about the data protection policy of: Empresa de Turismo de la Axarquía, S.L (a subsidiary of Grupo B Bou, as you can consult in Annex I of the Legal Notice), hereinafter Grupo B Bou. 1. Data Controller. Contact details of the controller: Grupo B Bou, with address at: Ctra. Vélez-Alhama, s/n, 29712 Viñuela, Málaga and telephone: 952519193. Email: privacidad@bbouhotels.com Grupo B Bou is the controller of your data. (Hereinafter "we" or "our"). 2. What data do we collect? The General Data Protection Regulation defines personal data as any information relating to an identified or identifiable natural person, that is, any information capable of identifying a person. This does not include anonymous or percentage data. Personal data that may be collected directly from the interested party will be treated confidentially and will be incorporated into the corresponding processing activities owned by Grupo B Bou. On our Website, we may process certain types of personal data, which may include: Identity data: name, surname, and DNI (ID number). Personal characteristic data: date of birth and curriculum vitae. Contact data: email, telephone, and address. Profile data: password. Marketing and communications data: preferences for receiving marketing communications from us and preferred means of communication. We do not collect any data relative to special categories of personal data (those that reveal your ethnic or racial origin, political opinions, religious or philosophical convictions, trade union membership, and information about your health, genetic or biometric data). In the event that you are requested to provide personal data by law or according to the terms of the contract between us and you refuse to provide them, we may not be able to perform said contract or provide the service, and you must notify us in advance. 3. How do we collect your personal data? The means we use to collect personal data are: Through the form on our website, through our contact email, by telephone, or postal mail, when: You request information about our products or services. You contract the provision of our services. You subscribe to any of our services or publications. You leave comments. To ensure the quality of our portal, we reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we believe it does not meet these requirements or any other law or regulation. If this occurs, we will attempt to explain the reasons for our decision, but we cannot commit to doing so in all cases. Through technology or automated interactions: on our site, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. This data is collected through cookies or similar technologies. If you want more information, you can consult our cookie policy here (link). Through third parties: Google: analytical data or search data. Outside the European Union. 4. Purpose and legitimacy for the use of your data. The most common uses of your personal data are: For the formalization of a contract between Grupo B Bou and you. When you give your consent to the processing of your data. When we need them to comply with a legal or regulatory obligation. When it is necessary for our legitimate interest or that of a third party. The User may revoke the consent given at any time by sending an email to info@hotelcortijobravo.com or by consulting the section on exercising rights below. Below, we attach a table where you can consult the ways in which we will use your personal data and the legitimacy for their use, in addition to knowing what type of personal data we will process. We may process some personal data for an additional legal reason, so if you need details in this regard, you can send an email to info@hotelcortijobravo.com. | Form | Purpose | Type of data | Legitimacy for processing | | :--- | :--- | :--- | :--- | | Contact | Managing contacts and information requests received via the web | Name, Email, Phone | Consent of the interested party (art. 6.1.a GDPR); Pre-contractual measures (art. 6.1.b GDPR); Processing is necessary for the satisfaction of legitimate interests pursued by the data controller (art. 6.1.f GDPR) | | Newsletter | Managing data provided to send information about our services and promotions | Email | Consent of the interested party (art. 6.1.a GDPR); Pre-contractual measures (art. 6.1.b GDPR); Processing is necessary for the satisfaction of legitimate interests pursued by the data controller (art. 6.1.f GDPR) | | Work with us | Personnel selection and provision of jobs | Name, Surname, Email, Phone, Curriculum vitae, Address | Processing necessary for the execution of a contract to which the interested party is a party or for the application of pre-contractual measures at their request (art. 6.1.b GDPR); Processing necessary for compliance with a legal obligation applicable to the controller (art. 6.1.c GDPR) - Royal Legislative Decree 2/2015, of October 23, approving the revised text of the Workers' Statute Law | | My Bookings | Managing bookings | Email | Consent of the interested party (art. 6.1.a GDPR); Processing necessary for compliance with a legal obligation applicable to the controller (art. 6.1.c GDPR); Processing necessary for the execution of a contract to which the interested party is a party or for the application of pre-contractual measures at their request (art. 6.1.b GDPR); Processing is necessary for the satisfaction of legitimate interests pursued by the data controller (art. 6.1.f GDPR) | | Reserve your table | Managing data provided to reserve a table | Name, Surname, Phone, Email | Consent of the interested party (art. 6.1.a GDPR); Pre-contractual measures (art. 6.1.b GDPR); Processing is necessary for the satisfaction of legitimate interests pursued by the data controller (art. 6.1.f GDPR) | | Reserve and register | Managing bookings | Name, Surname, DNI, Email, Phone, Password, Address | Consent of the interested party (art. 6.1.a GDPR); Processing necessary for compliance with a legal obligation applicable to the controller (art. 6.1.c GDPR); Processing necessary for the execution of a contract to which the interested party is a party or for the application of pre-contractual measures at their request (art. 6.1.b GDPR); Processing is necessary for the satisfaction of legitimate interests pursued by the data controller (art. 6.1.f GDPR) | | I am already part of the club | Managing contact data provided to access the club | Name, Surname, NIF, Address, Email, Password, Date of birth | Consent of the interested party (art. 6.1.a GDPR); Processing necessary for compliance with a legal obligation applicable to the controller (art. 6.1.c GDPR); Processing necessary for the execution of a contract to which the interested party is a party or for the application of pre-contractual measures at their request (art. 6.1.b GDPR); Processing is necessary for the satisfaction of legitimate interests pursued by the data controller (art. 6.1.f GDPR) | | Comments | Managing contact data to make a comment on the web | Name, Surname, Email, Phone | Consent of the interested party (art. 6.1.a GDPR) | Commercial communications: you will only receive communications if: You requested information from us or made a contract with us for a product or service. If you provided us with your data, accepting the checkbox enabled for this purpose in our form. As long as you have not expressed your wish to stop receiving such communications. We obtain your express consent before sending you any communication, and you can request at any time that we stop sending you communications at the email info@hotelcortijobravo.com. When you choose to stop receiving our communications, your personal data will continue to be stored as a result of the hiring made by you to comply with legal requirements. Purpose: we will only use your data for the purposes for which we collect them, unless we reasonably consider that we must use them for another reason, notifying you previously so that you are informed of the legal reason for their processing and as long as the purpose is compatible with the original purpose. 5. How long will we keep your data? They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that could arise from said purpose and the processing of the data. The provisions of the different regulations regarding the retention period will apply, insofar as they are applicable to this processing. Data of subscribers by email or form: From the moment the user subscribes until they unsubscribe. 6. Minors. Grupo B Bou does not authorize minors under 14 years of age to provide their personal data through the means enabled on this website (filling out web forms for service requests, contact, or by sending emails). Therefore, people who provide personal data using said means formally declare to be over 14 years of age, with Grupo B Bou being exempt from any liability for failure to comply with this requirement. If your child, under the established age limit, has provided personal information to Grupo B Bou, please contact us to be able to request the exercise of your applicable rights. In those cases in which the services offered by Grupo B Bou are intended for minors under 14 years of age, the means will be enabled to collect the authorization of the parents or legal guardians of the minor. 7. Exercise of Data Protection Rights: How to exercise these rights? Users may send a communication to the registered office of Grupo B Bou or to the email address info@hotelcortijobravo.com, including in both cases a photocopy of their D.N.I. or another similar identification document, to request the exercise of the following rights: Access to your personal data: you can ask Grupo B Bou if it is using your personal data. To request its rectification, if it is not correct, or to exercise the right to be forgotten with respect to it. To request the limitation of processing, in which case they will only be kept by Grupo B Bou for the exercise or defense of claims. To object to its processing: Grupo B Bou will stop processing the data in the way you indicate, unless for legitimate reasons or for the exercise or defense of possible claims, they must continue to be processed. To data portability: in case you want your data to be processed by another firm, Grupo B Bou will facilitate the portability of your data to the new controller. You can use the models made available to you by the Spanish Data Protection Agency to exercise your previous rights: Here. File a complaint with the AEPD: if you consider that there is a problem with the way Grupo B Bou is processing your data, you can direct your complaints to the corresponding supervisory authority, which in Spain is: Spanish Data Protection Agency. We will request specific information from you to help us confirm your identity and guarantee your right to access your personal data (or exercise any of the other rights mentioned above). This is a security measure to ensure that personal data is not disclosed to any person who does not have the right to receive it. We will resolve all requests within the indicated legal period of one month. However, it may take us more than a month if your request is particularly complex. In this case, we will notify you and keep you updated. 8. Communication of data: provision of services. It is possible that, in the performance of our work, we may need the help of third parties, who will only process the data to provide the contracted service, and with whom we have the corresponding measures to guarantee your rights: Service providers who provide system administration and information technology services. Professional advisors including lawyers, auditors, and insurers who provide banking, legal, insurance, and accounting consulting services. All data processors to whom we transfer your data will respect the security of your personal data and will treat them in accordance with the GDPR. We only allow such processors to process your data for determined purposes and in accordance with our instructions. However, you can request from us, in compliance with transparency, a list of who these companies are that provide us with services; you can do so at the email: info@hotelcortijobravo.com. 9. Data Security. We have implemented the appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized manner, modified, or disclosed. In addition, we limit access to your personal data to those employees, contractor agents, and other third parties who have a business need to know said data. They will only process your personal data according to our instructions and will be subject to a duty of confidentiality. We have implemented procedures to deal with any suspected violation of your personal data and will notify you and the Supervisory Authority in case it occurs, as regulated in the GDPR in its articles 33 and 34, a security breach.