The personal data linked to this website comply with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, and other current legislation on data protection.
Who is the Data Controller?
ULMARIA HOTELES S.L.
VAT number: B87819546.
Address: Calle Zambrana, 4, 28022, Madrid (Madrid) Spain.
Phone: 917480090.
Email: info@compostelasuites.com
What is the purpose and legitimacy with which we process your personal data and how long do we keep them?
According to the different sections of our website, we process your data for the following purposes:
- Data of people who make a reservation. We process your data for the following purposes:
1.1. Reservation management and subsequent contracting. We may process your data for this purpose because there is a pre-contractual relationship and, if the reservation is formalized, because there is a contractual relationship.
1.2. Accounting management. We process your data for this purpose because there is a legal obligation established in the Royal Decree of August 22, 1885, which publishes the Commercial Code.
1.3. Tax management. We process your data for this purpose because there is a legal obligation established in Law 58/2003, of December 17, General Taxation, and other applicable legislation.
Your data will be kept for the time necessary to achieve each of the purposes and, duly blocked, for the longest prescription period in accordance with applicable law.
- Data of people who contact through the contact section. We process your data for the purpose of managing and attending to your requests for information, doubts, queries, suggestions, or complaints. We may process your data for this purpose because we have a legitimate interest in attending to the necessary communications to carry out our activity. Your data will be kept for the time necessary to assist you and/or until you request its deletion.
Is it mandatory to provide us with your data?
You are not obligated to provide your data, but the communication of it is a prerequisite without which we will not be able to provide the services indicated in the previous section.
To whom will your data be communicated?
- The data of people making a reservation will be communicated to:
a) The Tax Administration, with the necessary data, in order to comply with the legal obligations with said Administration.
b) Payment gateways and banking entities, with the necessary data for the management of the collection of pre-contracted/contracted products or services.
c) Insurance and reinsurance companies, insurance and reinsurance brokerages, lawyers, solicitors, Courts and Tribunals, with the necessary data for the collection/payment of compensations or for the attention, exercise, or defense of claims.
d) Our data processors when necessary for the correct provision of the contracted services to them.
- The data of people who contact through the contact section will be communicated to our data processors when necessary for the correct provision of the contracted services to them.
Will your data be transferred to third countries?
No international data transfers will be made.
What are your rights when you provide us with your personal data?
- Access: right to obtain confirmation of whether we are processing your personal data or not, to know, among other things, what they are used for, how long they will be stored, their origin, and if they have been or will be communicated to a third party.
- Rectification: right to request the rectification of inaccurate data and to have incomplete personal data completed.
- Erasure: right to request the erasure of personal data when it is inadequate, excessive, or no longer necessary for the purposes for which it was collected, including the right to be forgotten.
- Objection: right to object, in certain circumstances, to the processing of your personal data or to request that the processing be ceased.
- Restriction of Processing: right to request, in legally established circumstances, that your data not be processed beyond mere conservation.
- Portability: right to receive personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, where technically feasible.
Do you have the possibility to withdraw your consent?
In cases where the legitimacy for the processing of your data is your consent, you have the right to withdraw it at any time by writing to the address or email indicated at the beginning of this Policy. If you withdraw your consent, the data processing that has been carried out before will remain valid.
Where can you exercise your rights?
The exercise of rights must be carried out in writing, attaching a photocopy of the identification document, and addressing the address or email indicated at the beginning of this Policy. We provide you with forms for exercising your rights. For more information: www.agpd.es.
Do you have the right to file a complaint with the Control Authority?
In the event that your rights have not been respected, you can file a complaint by writing to the Spanish Data Protection Agency located at Calle Jorge Juan, 6-28001-Madrid or using the electronic headquarters: https://sedeagpd.gob. In both cases, you must accompany the relevant documentation.
