PERSONAL DATA PROCESSING, TREATMENT AND PURPOSE OF CONSENT FOR DATA TRANSFER.
From the web the appropriate level of protection is guaranteed, adopting the technical and organizational measures to ensure the safety and legally prove necessary in order to prevent loss, deterioration, loss or unauthorized third parties access to the personal data that are collected here. regularly monitor our systems to detect possible vulnerabilities and attacks. However, We can not guarantee the security of information you send us. There is no guarantee that you can not access, spread, alter or destroy data if a leak occurs in one of our physical security measures, technical or management.
The legal basis for the processing of data is based on obtaining consent, according to Article 6.1a of Regulation (EU) 679/2016 or execution of a contractual relationship that links the user to the web, according to Article 6.1.b (for example, to proceed to book). However, the user has to know the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent to its withdrawal. The Web, does not perform data transfers to third parties, or international transfers other than those permitted by the Spanish Data Protection Agency or as long as they are expressly agreed to by the user. Thus, all those transfers of data will be carried out under the framework of protection indicated by the Spanish Agency for Data Protection, or as long as they are expressly agreed to by the user and to countries whose security and confidentiality is guaranteed.
DATA COLLECTION AND CONSERVATION TIME
Capturing data on the web it is carried through:
- Contact Form
- Booking form our accommodations
Data received by the user will be retained on this website for a period of time may be different, depending on the user. Default, personal data will be saved:
- Books-check in hotels must be stored for 3 years, available to the Forces of State Security.
- While the query made resolves.
- While not exercise their right of withdrawal.
There is however the possibility that we preserve your personal data if it is reasonably necessary to comply with our legal obligations (including requests for enforcement, Tax agency or SEPBLAC), meet the regulatory requirements, settle disputes, maintain security, prevent fraud and abuse, apply our Conditions of Use or fulfill your request to unsubscribe from future messages you receive from the Web.
Any loss or damage to the website or responsible for the website or to any third party through the communication of misinformation, inaccurate or incomplete registration forms will be exclusive responsibility of the User.
PURPOSE OF PROCESSING
|WHERE TO COLLECT DATA||Data collected||PURPOSE AND LEGAL BASIS|
|Contact Form||First name, email, message content.||Hostal Kasa collect the data necessary to respond to your inquiry.
The legal basis of treatment is your express consent (Art. 6.1.a)
|Reservation form Accommodation||After selecting the type of accommodation, dates and additional services, you will be prompted to start the reservation:
Full name, DAYS, country, province, Location, address, Phone, Email and data on the chosen card to make payment.
|Hostal Kasa collect the data necessary to make the reservation of accommodation chosen, invoice creation, sending the confirmation or sending information related reservation.
The legal basis of treatment is compliance with a legal obligation to which the data subject is party. (Art. 6.1.b)
CATEGORIES OF RECIPIENTS OF PERSONAL DATA
All utilities offered by third parties are strictly necessary for the development of the services of this website and have been selected based on the compliance with the law in force.
We work closely with third parties who may be recipients of personal data, for example:
- Our partners are social networking platforms and can provide related services, such as the connection of your profile information, from its social networking platforms to our platform. As is the case with Facebook, Twitter, Google+, Pinterest, LinkedIn.
- our server hosting, or web platform.
- our business partners who can advertise their services on our website, which may decide to subscribe.
- our subcontractors technical services, Payment and shipping, analytical solutions providers or credit institutions, como PCI DSS Compliant.
EXERCISE OF THE RIGHTS OF INTERESTED
Once, as a web user you provided your personal data, the law allows you as interested in your data:
- Request access to personal data relating to that person.
- Request rectification or deletion.
- Order limiting treatment.
- Opposing treatment.
- Request data portability.
To exercise any of the rights described, the applicant has to reach such a request accompanied by a photocopy of ID, passport or other valid document that identifies the user. For it, you must send the request to email@example.com. Likewise, the application must contain: Name of the person concerned, photocopy of your national identity card, or passport or other valid identification document and, where appropriate, the person representing, request in which the request is specific, address for notifications, date and signature of the applicant. The exercise of rights is free for interested except where applications are manifestly unfounded or excessive, especially because of its repetitive nature. In this case, the controller may charge a reasonable fee based on administrative costs or refusing to act on the request.
COMPLAINTS AND EXERCISE OF RIGHTS
Those interested can send their requests to the Data Protection Authorities, If you believe there is a problem with the way we are handling your personal data, by calling rights protection.
Said communication channel may be made through the following link to the Spanish Agency for Data Protection (AEPD):
The controller is : ALMACENES no S.L. (HOSTALKASA) – NIF: B-35546670 – to you. postal: CALLE GENERAL VIVES,75, Las Palmas (Las Palmas), Spain – Phone: 928222180 – Email: firstname.lastname@example.org
COMMUNICATIONS AND PROMOTIONS BUSINESS.
According to the Law Society Services Information and Electronic Commerce, the web does not conduct practices SPAM, so it does not send commercial e electronically which have not been previously requested or authorized by the user. In consecuense, in each of the forms have occurred in the web, the user can give their express consent to receive the newsletter, irrespective of the commercial information requested on time.
In accordance with the provisions of the Law 34/2002 Services Information Society and Electronic Commerce, Site agrees not to send commercial communications without identifying them properly.
In general, the web will not seek personal information, with authoritative knowledge, lower fourteen (14) years.
In the case of the web carrying out any activity control, discover the inadvertent collection of information regarding minor 14 years, will carry out all the necessary measures, as service provider and responsible treatment, It is obliged to undertake and to thereby suppress such information, as quickly as possible, except in cases in which, by reason of applicable law, necessary to preserve.
In accordance with the provisions of the European Data Protection Regulation, those over 13 years are entitled to consent, except in those cases where the law requires for rendering assistance to holders of parental authority or guardianship.
ACCEPTANCE AND CONSENT
The website reserves the right to amend this policy to adapt to new legislation or jurisprudence, as well as industry practices. In such cases, Lender will announce on this page changes with reasonable notice before implementation.