Privacy policy of Papi Hotels

This website does not collect personal data from users without their knowledge, nor does it transfer it to third parties.

To learn about our cookie policy, used to collect information from users, we would appreciate it if you read the Cookie Policy section of our website.

Basic information on data protection

Below we inform you about the Data Protection Policy of CASAJUANA HOTEL PAPI SL.

Who is the Data Controller?

The personal data that may be collected directly from the interested party will be treated confidentially and will be incorporated into the corresponding processing activity owned by CASAJUANA HOTEL PAPI SL.

How do we obtain your personal data?

We collect your personal data on different occasions:

• Every time you contact us directly, for example through the contact section or any other section in which you fill out a questionnaire on the website or through the customer service telephone lines to request information about our products and services.

• When you purchase or contract a product or service directly with us.

• When you participate in our direct marketing campaigns, for example by accepting to receive our Newsletter or participating in a promotion through our websites that requires you to complete an online form with your personal data. The products and services of CASAJUANA HOTEL PAPI SL, as well as its promotional campaigns, are directed and designed mainly for adults. In this regard, we will only collect and process your personal data if you are at least 16 years old. * We reserve the right to verify the age of the persons who provide us with personal data. Any data of a minor under 16 years of age will be deleted.

We would appreciate it if you could help us keep your personal data up to date by informing us of any changes to your contact details or preferences.

What information can we obtain about you?

Through the various services and contact channels described in this Privacy Policy, the following types of data may be collected about you, depending on your relationship with the Data Controller:

Customers and users : Identification and contact details: name, address, telephone numbers, email. Financial details: bank account number / credit card number.

Employees : Identification and contact details: name, address, telephone numbers, email. Financial details: bank account number. Academic and professional details. Studies completed and qualifications. Employment and Social Security details. Characteristics

personal: marital status, date and place of birth, age, sex, nationality and percentage of disability.

For what purposes do we process your personal data?

As a user of the website, we will process the personal data you provide us with in order to respond to your query and provide you with commercial information about the company's products and services.

As a subscriber to our Newsletter, we will process the personal data you provide us with in order to send you our commercial communications on a timely basis. As a customer, we will process your data to provide you with the requested service and the administrative and commercial management of our client portfolio.

What is the legitimacy for the processing of your data?

User and subscriber : GDPR Article 6.1.a) consent of the interested party for the processing of their personal data for one or more specific purposes.

Client : GDPR Article 6.1. b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. GDPR Article 6.1.a) consent of the data subject to the processing of his or her personal data for one or more specific purposes

For other processing activities that may not appear in this privacy policy, please contact the Data Controller for further information.

How long will we keep your data?

The personal data provided will be kept for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from the purpose, in addition to the periods established in the regulations on files and documentation.

To whom will we communicate your data?

In general, personal data will not be communicated to third parties, except under legal obligation, which may include communications to organizations directly related to the controller (Tax, Labor and Accounting Consultancy; Financial Institutions; State Tax Administration Agency; State security forces and bodies; judicial bodies; Public Prosecutor's Office).

Although absolute protection against intrusion is not possible when data is transmitted over the Internet or from a website, we do our best to maintain the necessary physical, electronic and procedural protection measures to ensure the protection of your information in accordance with applicable data protection requirements. All your data is stored on secure servers (or secure physical copies) owned by us or our data processors and our security criteria and policies (or equivalent ones from our data processors) apply to access and use of your data.

Do we carry out international data transfers?

CASAJUANA HOTEL PAPI SL does not plan on international data transfers.

How do we keep your data protected?

To ensure the protection and maintain the security, integrity and availability of your data, we use various security measures.

Although it is not possible to guarantee absolute protection against intrusions when data is transmitted over the Internet or from a website, both we and our data processors make every effort to maintain physical, electronic and procedural protection measures to ensure the protection of your data in accordance with the legal requirements applicable to this matter.

The measures we use include:

Limit access to your data only to those people who need to know it in light of the tasks they perform.

As a general rule, transfer the collected data in encrypted format.

Store the most sensitive data (such as banking data) only in encrypted format;

Install perimeter protection systems for IT infrastructures (firewalls) to prevent unauthorized access, for example hackers.

Regularly monitor access to computer systems to detect and stop any misuse of personal data.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our websites or any other portal, application or service under our control, you are responsible for keeping this password confidential and for complying with any other security procedures we notify you of. You may not share your password with anyone.

What rights can interested parties exercise?

Any person has the right to obtain confirmation regarding the processing of their data carried out by CASAJUANA HOTEL PAPI SL.

You may exercise your rights of access, rectification, erasure and portability of your data, of limitation and opposition to their processing, as well as not to be subject to decisions based solely on the automated processing of your data and to withdraw the consent given to CASAJUANA HOTEL PAPI SL. B63055768. Avda. Barcelona / Països Catalans - 08380 - MALGRAT DE MAR - BARCELONA. Or send an email to direccio@hotelpapi.com, indicating in the subject: "Data protection".

In addition, the interested party may contact the competent Data Protection Control Authority to obtain additional information or file a complaint.