PRIVACY POLICY

PRIVACY – EXTENDED INFORMATION

The Privacy Policy is part of the General Conditions that govern this Web.

Who is responsible for processing your data?

LOJMAN INVESTMENT, S.L.

CIF: B76248236

Address: AVDA.TTOO NECKERMAN, S/N, 35100, MASPALOMAS SAN BARTOLOME DE TIRAJANA.

Phone: 928767540

Data Protection Officer contact details: dpo@hotelesvistaflor.com

You can contact us in any way you wish.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend you to review it, and if you have registered and access your account or profile, you will be informed of the modifications.

If you belong to any of the following groups, please refer to the drop-down information:

+ GUESTS

For what purposes will we process your personal data?

We inform you that your data will be processed for the purpose of managing your reservation, your stay at the hotel and ensure the payment of expenses arising from such stay.

Your data will be communicated to the Security Forces and Corps in compliance with the provisions of the legislation in force, as well as to the travel agencies or operators involved.

The data will be kept for at least 6 years in compliance with tax, commercial, consumer and traveler’s logbook regulations.

 

What is the legitimacy for the processing of your data?

The legal basis is your consent.

 

+ CONTACTS FROM THE WEB OR E-MAIL

What data do we collect through the Web?

We may treat your IP address, what operating system or browser you use, and even the duration of your visit, anonymously.

If you provide us with data in the contact form, you will be identified so that we can contact you if necessary.

 

For what purposes will we process your personal data?

  • Respond to your inquiries, requests or petitions.
  • Manage the requested service, answer your request, or process your request.
  • Information by electronic means, related to your request.
  • Commercial or event information by electronic means, provided there is express authorization.
  • Perform analysis and improvements on the Web, about our products and services. Improve our commercial strategy.

 

What is the legitimacy for the processing of your data?

The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill out a form and click on the send button, the completion of the same will necessarily imply that he/she has been informed and has expressly given his/her consent to the content of the clause attached to the form or acceptance of the privacy policy.

All our forms have the * symbol in the required fields. If you do not provide these fields, or do not check the checkbox to accept the privacy policy, the information will not be allowed to be sent. It usually has the following formula: “□ I have read and accept the Privacy Policy.”

 

+ NEWSLETTER CONTACTS

What data do we collect through the newsletter?

On the website, it is possible to subscribe to the Newsletter, if you provide us with an e-mail address, to which the Newsletter will be sent.

We will store only your email address in our database, and we will proceed to send you periodic emails, until you request unsubscription, or we stop sending emails.

You will always have the option to unsubscribe, in any communication.

For what purposes will we process your personal data?

  • Manage the requested service.
  • Information by electronic means, related to your request.
  • Commercial or event information by electronic means, provided there is express authorization.
  • Perform analysis and improvements in mailing, to improve our commercial strategy.

 

What is the legitimacy for the processing of your data?

Acceptance and consent of the interested party: In those cases where you subscribe it will be necessary to accept a checkbox and click on the send button. This will necessarily imply that you have been informed and have expressly given your consent to receive the newsletter.

If you do not check the checkbox to accept the privacy policy, the information will not be allowed to be sent. It usually has the following formula: “□ I have read and accept the Privacy Policy.”

 

+ CUSTOMERS

For what purposes will we process your personal data?

  • Preparation of the budget and follow-up of the same through communications between both parties.
  • Information by electronic means, related to your request.
  • Commercial or event information by electronic means, provided there is express authorization.
  • Manage the administrative, communications and logistics services performed by the Responsible.
  • Invoicing and declaration of the appropriate taxes.
  • Carry out the corresponding transactions.
  • During the card payment process, the following personal data will be collected by the bank that owns the Virtual POS: type of connection, date and time, IP address, device information, email address, cell phone, navigation data, transaction data and data required by 3D Secure security protocols, for the sole purpose of detecting and preventing unauthorized payment transactions.
  • Control and recovery management.

+ QUALITY SURVEYS

For what purposes will we process your personal data?

  • To assess the degree of quality in the service provided.
  • Improve the services offered, by virtue of ISO compliance.

 

What is the legitimacy for the processing of your data?

The legal basis is the express consent of the respondent.

 

 

+ SUPPLIERS

For what purposes will we process your personal data?

  • Information by electronic means, related to your request.
  • Commercial or event information by electronic means, provided there is express authorization.
  • Manage the administrative, communications and logistics services performed by the Responsible.
  • Invoicing.
  • Carry out the corresponding transactions.
  • Invoicing and declaration of the appropriate taxes.
  • Control and recovery management.

 

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or otherwise your consent to contact us or offer us your products by any means.

 


+ CONTACTS SOCIAL NETWORKS

For what purposes will we process your personal data?

  • Respond to your inquiries, requests or petitions.
  • Manage the requested service, answer your request, or process your request.
  • Engage with you and build a community of followers.

 

What is the legitimacy for the processing of your data?

Acceptance of a contractual relationship in the relevant social network environment, and in accordance with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

Youtube http://www.google.com/intl/es/policies/privacy/

How long will we keep personal data?

We can only consult or unsubscribe your data in a restricted way by having a specific profile. We will treat them as long as you allow us to do so by following, friending or liking, following or similar buttons.

Any rectification of your data or restriction of information or publications must be made through the configuration of your profile or user in the social network itself.

 

+ JOB SEEKERS

For what purposes will we process your personal data?

  • Organization of selection processes for the hiring of employees.
  • Call you for job interviews and evaluate your candidacy.
  • If you have given us your consent, we may pass it on to partner or related companies for the sole purpose of helping you find employment.

 

How long will we keep personal data?

We also inform you that one year after receipt of your curriculum vitae, we will proceed to its secure destruction.

What is the legitimacy for the processing of your data?

The legal basis is your unequivocal consent by sending us your curriculum vitae.

 

Do we include personal data of third parties?

No, as a general rule we only process the data provided by the owners. If you provide us with data of third parties, you must, in advance, inform and request their consent to such persons, or else we are exempt from any liability for failure to comply with this requirement.

 

What about data of minors?

We do not process data of children under 14 years of age without the consent of a parent or legal guardian. Therefore, please refrain from providing them if you are not of that age or, where appropriate, to provide data of third parties who do not have the aforementioned age. LOJMAN INVESTMENT, S.L. disclaims any liability for breach of this provision.

 

Will we communicate by electronic means?

They will only be used to process your request, if it is one of the means of contact you have provided us with.

If we send commercial communications, they will have been previously and expressly authorized by you.

 

What security measures do we apply?

You can rest assured: We have adopted an optimal level of protection of the Personal Data we handle, and we have installed all the technical means and measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorized access and theft of Personal Data.

 

To which recipients will your data be communicated?

Your data will not be disclosed to third parties, unless required by law. In particular, they will be communicated to the State Agency of Tax Administration and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the persons in charge of the processing necessary for the execution of the agreement.

In case of purchase or payment, if you choose any application, web, platform, bank card, or any other online service, your data will be transferred to that platform or will be treated in their environment, always with maximum security. During the card payment process, data will be collected by the bank that owns the Virtual POS.

When we order it, the web development and maintenance company, or the hosting company, will have access to our website. They will have signed a service contract that obligates them to maintain the same level of privacy as we do.

International data transfers may be made when using American applications, however, such transfers will be made to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements set forth in the current regulations on data protection, such as the European Regulation, or when there is a legal authorization to make the international transfer.

 

What rights do you have?

  • To know if we are processing your data or not.
  • To access your personal data.
  • To request the rectification of your data if it is inaccurate.
  • To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
  • To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with the regulations in force.
  • To carry your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new person in charge that you designate. It is only valid in certain cases.
  • To file a complaint with the Spanish Data Protection Agency or competent supervisory authority, if you believe that we have not served you correctly.
  • To revoke consent to any processing for which you have consented, at any time.

If you change any information, please let us know so that we can keep them updated.

 

Do you want a form to exercise your rights?

We have forms for the exercise of your rights, ask us for them by email, or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be electronically signed or be accompanied by a photocopy of the ID card. If you are represented by someone, you must attach a copy of your ID, or also signed with your electronic signature.

The forms can be submitted in person, sent by letter or by mail to the address of the person in charge at the beginning of this text.

 

How long does it take to reply to the Rights Exercise?

It depends on the law, but at the most in one month from your request, and two months if the issue is very complex. We will notify you if more time is required.

 

Do we process cookies?

If we use other types of cookies that are not necessary, you can consult the cookie policy in the corresponding link at the top of our website.

 

How long will we keep your personal data?Personal data will be kept for as long as you remain connected with us. Once unlinked, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal actions.

The data processed will be kept until the expiration of the aforementioned legal terms, if there is a legal obligation to maintain them, or if there is no such legal term, until the interested party requests their deletion or revokes the consent given.

We will maintain all information and communications relating to your purchase or the provision of our service, for the duration of product or service warranties, to address potential claims.