PRIVACY POLICY

DATA CONTROLLER

Mymgra, S.L. (hereinafter referred to as Hotel Princesa Ana) is the owner of the domain www.hotelprincesaana.com (hereinafter, the Website) and the data controller for the information you provide while browsing. Here are our identification details:

• Company Name: Mymgra, S.L.
• Trading Name: Hotel Princesa Ana
• Tax ID: B18091785
• Address: Constitución Street, 37, 18014-Granada (GRANADA-SPAIN)
• Phone Number :(+34) 958 18 76 06
• Email: administracion@hoteles-ma.es
• Domain-Website: https://www.hotelprincesaana.com

 

PURPOSES OF PROCESSING

We inform you that the data provided and its processing are documented in our Activity Registers. By accepting this Privacy Policy, you expressly, freely, informedly, and unequivocally consent to your data being processed by Hotel Princesa Ana for the following purposes:

• To manage bookings and maintain the existing contractual and commercial relationship.
• To send you the information you request through any of the contact methods available on the Website.
• To inform you about offers and promotions that may interest you through commercial communications via email, SMS, WhatsApp, social media, or any other electronic or physical means, present or future, that enables such communications. These communications will always be related to our services or those of our partners with whom we have a promotional agreement. In this case, third parties will never have access to your personal data.

A commercial profile may be created based on the information provided, but we will not make automated decisions based on this profile.

• DATA STORED DURING YOUR VISIT: When you browse the Website, our servers generally store, among other data, information about the browser and operating system you use, the website from which you visit us, the pages you visit, and the date. Except for the IP address, personal data is only stored if you voluntarily provide it to us beforehand. 
• PRESTADORES DE SERVICIOS DE PAGO:  A través del Sitio Web, podrás acceder,PAYMENT SERVICE PROVIDERS: Through the Website, you may access third-party websites via links to make payments for the services booked. We inform you that these are governed by their own terms of use and contracting, so you should read their established conditions. At no time will our staff have access to the banking details you provide to these third parties.

DATA RETENTION

The data you provide will be retained as long as there is mutual interest in maintaining the purpose of the processing, and will be blocked when they are no longer necessary for the purpose for which they were collected. They will remain exclusively available to Judges and Courts, the Public Prosecutor’s Office, and the competent authorities, particularly the Data Protection Authority, for the attention of liabilities arising from the processing, during the limitation period for these liabilities. Once this period has expired, the data will be destroyed with appropriate security measures to ensure their pseudonymisation or total destruction. In addition to the general processing mentioned above, the following specific data retention rules will apply:

• Customer Data: retention period of 4 years (Art. 66 and following of the General Tax Law), and 6 years for accounting books and invoices (Art. 30 of the Commercial Code)

LEGAL BASIS

The legal basis for processing the personal data you provide us is your consent, expressed through the corresponding checkboxes in the various forms. In any case, we inform you that you may withdraw this consent at any time through the means indicated in the “YOUR RIGHTS” section.

NO DATA TRANSFER

We inform and expressly guarantee you that your personal data will not be transferred to third parties under any circumstances. Any exception to this rule will require your prior express, informed, and unequivocal consent. 

YOUR RIGHTS

Current data protection legislation grants you the following rights.

1. Access to data: You can consult the personal data we hold at any time.
2. Rectification of your information: You have the right to modify your personal information when it is incorrect or incomplete.
3. Erasure of data: You have the right to request the deletion of your personal data that we are not legally obliged to retain.
4. Data portability: You may request a copy of the data we hold and ask us to transfer this information to another service provider (to the extent technically feasible).
5. Restriction of processing: You have the right to restrict how we use your data, particularly in cases where:
   1. You contest the accuracy of your personal information
   2. The processing of the data is unlawful, and you oppose the erasure of your personal information
   3. We no longer need your personal information for processing, but you require it for the establishment, exercise, or defence of legal claims
   4. You have objected to the processing
6. Objection to processing: You have the right to object to your data being processed for specific purposes. In such cases, we will stop processing your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing or unless it is necessary for the establishment, exercise, or defence of legal claims.
7. Withdrawal of consent: You may withdraw your consent at any time by sending us a communication to this effect. This withdrawal will not affect the validity of the processing of your data carried out prior to the withdrawal.
   1. Exercise of these rights:To exercise these rights, you must send a formal request, along with a copy of your ID or equivalent identification document, to Hotel Princesa Ana at Constitución Street, 37, 18014-Granada (GRANADA-SPAIN), or to the email address administracion@hoteles-ma.es. If you do not receive a response from us in a timely manner or are not satisfied with the response, we inform you that the competent supervisory authority is the Spanish Data Protection Agency (www.aepd.es).

 

SECURITY MEASURES

In accordance with the provisions of the current regulations on personal data protection (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights), Hotel Princesa Ana complies with all the provisions of the GDPR and LOPD regulations for the processing of personal data under our responsibility, and expressly with the principles described in Article 5 of the GDPR, by which they are processed lawfully, fairly, and transparently in relation to the data subject, and are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed. We have sufficient mechanisms to:

1. Ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
2. Restore the availability and access to personal data promptly in the event of a physical or technical incident.
3. Regularly verify, evaluate, and assess the effectiveness of the technical and organisational measures implemented to ensure the security of processing.
4. Pseudonymise and encrypt personal data, if necessary.

  Additionally, we have implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and LOPD to protect your rights and freedoms, providing you with all the necessary information to exercise your rights. We have installed all the means and technical measures at our disposal to prevent the loss, misuse, alteration, unauthorised access, and theft of the personal data you provide us. However, you should be aware that security measures on the Internet are not impregnable.

MINORS:

Access to and use of the portal by minors is prohibited. We are not responsible for the truthfulness and accuracy of the data you provide. If you have minors under your care, it will be your sole responsibility to determine which services and/or content are or are not appropriate for their age. We inform you that there are software programs that allow filtering and blocking access to certain content and services, so that parents, for example, can decide which content and services on the Websites their children can access and which they cannot.

DURATION AND MODIFICATION OF THE PRIVACY POLICY: 

We reserve the right to modify, in whole or in part, this Privacy Policy, publishing the changes on the Website. Likewise, we may make any changes we deem appropriate without prior notice, including changing, deleting, or adding content and services provided, as well as the way they are presented or located. Consequently, the general terms/Policies published at the time you access the Website will be considered valid, so you should read them periodically. Notwithstanding the above, we may terminate, suspend, or interrupt access to the contents of the Website at any time without prior notice, without the User being able to demand any compensation.