PRIVACY POLICY

This privacy policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), as well as, to the extent that it does not conflict with the aforementioned regulations, Organic Law 15/1999 on the Protection of Personal Data (LOPD) and its implementing regulations, and/or any laws that may replace or update them in the future.

Our organization is committed to protecting the privacy of your personal data. The personal data you provide is necessary for us to provide our services and is processed in a lawful, fair, and transparent manner, ensuring adequate security of that data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage through the implementation of technical and organizational measures.

Through this document, we wish to provide you, in a transparent and fair manner, with all the necessary information regarding this organization’s processing of your personal data.

IDENTITY: SELLESMAR, S.L.
C.I.F. / N.I.F.: B03926433
ADDRESS: CTRA .LAS MARINAS, KM. 4, 03700 DENIA (ALICANTE)
PHONE: 965780458
E-MAIL: info@hotellosangelesdenia.com

1. The personal data provided will not be disclosed to any third party unless otherwise specified in the specific processing activities.
2. Optionally, when contracting cloud computing services and/or email, communication, and other related IT services
   , personal data may be:
   • • Transferred to IT service providers located within the European Economic Area (EEA)
     • In the event that any of our suppliers or service providers are located outside the European Economic Area (EEA), we guarantee that international data transfers will be carried out in accordance with applicable regulations. In particular, for suppliers located in the United States, such transfers may be covered by the EU-U.S. Data Privacy Framework (EU-U.S. Data Privacy Framework, https://www.dataprivacyframework.gov),
       , the adequacy of which was recognized by the European Commission on July 10, 2023, or
       , based on standard contractual clauses approved by the European Commission.
3. Optionally, to government agencies and other organizations when required to do so in
   compliance with legal obligations.

For each specific instance of personal data processing, we will inform you of the legal basis that legitimizes it
.

This is the right to obtain confirmation from the data controller as to whether or not personal data concerning the data subject are being processed and, if so, the right to access the personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the retention period or the criteria used to determine this period, the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of processing of personal data concerning the data subject, or to object to such processing, and the right to lodge a complaint
to the Spanish Data Protection Agency (AEPD), the existence, if any, of automated decisions, including profiling, when data is transferred to third countries; and the right to be informed of the appropriate safeguards applied.

You have the right to request the correction of your personal data if it is inaccurate, including the right to complete any data that is incomplete. Please note that by providing us with your personal data through any means, you guarantee that it is true and accurate and agree to notify us of any changes or modifications to it. Therefore, any damage caused by providing erroneous, inaccurate, or incomplete information on the website’s forms will be the sole responsibility of the data subject.

This is the right to request the erasure of your personal data when, among other circumstances, it is no longer necessary for the purpose for which it was collected, or is being processed for other purposes, or you withdraw your consent. Please note that erasure will not apply when the processing of personal data is necessary, among other cases, to comply with legal obligations or to establish, exercise, or defend legal claims.

This is the right to request that the processing of your personal data be restricted, which means that, in certain cases, you may ask us to temporarily suspend the processing of your personal data or to retain it beyond the necessary period when you may need it.

This is the right to withdraw the consent you provided by checking the box “I have read and accept the
privacy policy” at any time, as specified in the corresponding section “Exercising Your Rights” or in the specific terms regarding marketing communications or newsletters. Please note that this right will not take effect if, among other cases, the processing of personal data is necessary for compliance with a
legal obligation, the performance and maintenance of a contractual relationship, or for the establishment, exercise, or defense of legal claims. Furthermore, the withdrawal of consent will not have retroactive effect; that is, it will not affect the lawfulness of processing based on consent prior to its withdrawal.

This is the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, provided that: the processing is based on your consent and is carried out by automated or computeriz
means.

This is the right to object to the processing of your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

If you believe we are processing your personal data incorrectly, you can contact us, or you also have the right to file a complaint with the Spanish Data Protection Agency (AEPD): https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

You may exercise your rights by sending a letter to the mailing address listed above or by emailing info@hotellosangelesdenia.com; in both cases, please attach a copy of your NIF/NIE/passport or similar document.

The person in charge implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of the data.

The personal data requested for each specific processing activity is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed, thereby complying with the principle of data minimization.

The personal data requested for each specific processing activity is strictly necessary; refusal to provide it would mean that we would be unable to provide the requested service.

The disclosure of personal data provided for in each specific processing operation is, in some cases, necessary for the performance and maintenance of a contract and, in other cases, for compliance with a legal obligation applicable to the data controller.

RESERVATION FORM

Personal data will be processed to manage online reservations, process your payments, handle any complaints or claims regarding the services provided, identify you, and verify that you are of legal age to enter into a contract, as well as, where applicable, to file, pursue, or defend claims.

The legal basis for the processing of personal data is the user’s express consent, which is given by checking the box that says “I have read and accept the privacy policy.”

As a necessary contractual requirement, personal data will be disclosed to third-party companies for the purpose of providing consulting services to the data controller. In compliance with legal obligations, personal data will be transferred to law enforcement agencies and the tax authorities.
Additionally, in some cases, it may be transferred to online payment service providers.

Personal data will be retained until you withdraw your consent, unless it must be retained to maintain the relationship between the parties or for the number of years necessary to comply with legal obligations.

Commercial Communications or Newsletter Form
Your personal data will be processed to manage your subscription to our newsletter, including sending you personalized or non-personalized information about our products or services through various means such as telephone, email, SMS, mobile applications, and any similar method. Please note that this type of data processing may involve analyzing your user profile to determine your preferences and thus be able to send you relevant information.
information more suited to their interests.
You can request to stop receiving this type of treatment, depending on the method used, as follows:

•  Email: Through the link provided for this purpose in each electronic communication, or through a similar procedure specified in the commercial communication.
• WhatsApp (other apps): Unsubscribing.
• SMS: Requesting to unsubscribe.

The legal basis for the processing of personal data is the express consent provided: by checking the box “I have read and accept the privacy policy” on the website, via a physical document, or via email, depending on the specific case.

Please note that if WhatsApp is used as the communication channel, personal data will be
transferred to WhatsApp Ireland Limited, which is located within the EEA.

Personal data will be retained until you withdraw your consent in the manner described in this section of
.