**Privacy and Data Protection Policy**
The Site Owner informs users of its Privacy Policy regarding the treatment and protection of personal user data that may be gathered while navigating the Website: http://www.hotelpuchet.com
Accordingly, the Site Owner guarantees the fulfilment of the existing legislation in terms of personal data protection, reflected in the organic law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD). It also complies with the Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, regarding the protection of natural persons (GDPR).
The usage of this Website implies the acceptance of this Privacy Policy, as well as the conditions included in the Legal Notice.
**Identity of The Data Controller**
Data Controller: Puchet de Ponent S.L.
Address: Carrer de Navarra, 7, 07800 Eivissa, Illes Balears. Spain
Website: http://www.hotelpuchet.com
Principles applied in data processing
In the processing of personal data, the Site Owner shall apply the following principles that are adjusted to the requirements of the new European Data Protection Regulations (GDPR):
Principle of lawfulness, loyalty and transparency: The Site Owner shall always require the consent for the processing of personal data, which may be for one or more specific purposes, of which the Site Owner shall inform the User in advance with absolute transparency.
Principle of data minimisation: The Site Owner shall only request data that is strictly necessary for the purpose or purposes for which they are requesting it.
Principle of limitation of the conservation period: The Site Owner shall keep the collected personal data for the time strictly necessary for processing purposes. The Site Owner shall inform the User of the conservation period corresponding to the purpose.
In the case of subscriptions, the Site Owner shall periodically revise the lists and delete those registered who have been inactive for a considerable time.
Principle of Integrity and Confidentiality: Collected personal data shall be processed in such a way that its security, confidentiality and integrity are guaranteed. The Site Owner takes the necessary precautions to avoid unauthorised use or improper use of the data of its users by third parties.
**Collecting personal data**
It is not necessary to provide any personal data to navigate the Website.
The cases in which you are required to provide your personal data are the following:
When completing the booking process.
When contacting through contact forms or sending an email.
When registering for a subscription form or a newsletter which the Site Owner manages with MailRelay.
When registering for the WELCOME BACK loyalty programme.
When registering for the AGENCY ACCESS private area.
**Rights**
The Site Owner informs the user that, regarding their personal data, they have the right to:
Request access to stored data.
Request an amendment or cancellation.
Request limitation of processing.
Object to processing.
They may not exercise the right of data portability.
Exercising these rights is personal and as such must be exercised directly by the interested party by requesting it directly from the Site Owner, which means any client, subscriber or collaborator that may have provided their data at any moment can address the Site Owner and request information about their data that has been stored and how it has been obtained, request an amendment thereof, object to processing, limit the use thereof or request the cancellation of this data in the Site Owner’s files.
To exercise their rights, they must send their request together with a photocopy of their national identity document or equivalent to the postal address:
Puchet de Ponent S.L. – Carrer de Navarra, 7, 07800 Eivissa, Illes Balears, España
Exercising these rights will not include any data that the Site Owner is obliged to store for administrative, legal or security purposes.
They have the right to effective legal protection and to present a complaint before the control authority, in this case, the Spanish Data Protection Agency, if they consider the personal data processing that concerns them to violate the Regulation.
**Purpose of the processing of your personal data**
When you connect to the Website to send an email to the Site Owner, subscribe to their newsletter, you are providing personal information for which the Site Owner is responsible. This information can include personal data which can be your IP address, name and surname, physical address, email address, telephone number and other information. By providing this information, you give your consent for your information to be collected, used, managed and stored by –– Puchet de Ponent S.L. –– solely in the ways described in the pages:
Legal Notice
Privacy Policy
Personal data and the processing purpose by the Site Owner differ according to the information capture system:
Contact forms: The Site Owner requests personal data, which can include: name and address, email address, telephone number, website address with the purpose of responding to the User’s enquiries.
For example, the Site Owner uses this data to answer messages, queries, complaints, comments or concerns the Users may have in relation to the information present on the Website, personal data processing, matters relating to the legal text present on the Website, as well as any other enquiry the User may have and is not subject to the conditions of the Website.
There are other purposes for which the Site Owner processes personal data:
To guarantee compliance with conditions contained in the Legal Notice page and the applicable law. This can include the development of tools and algorithms that help the Website to guarantee the confidentiality of the personal data it collects.
To support and improve the services this Website offers.
To analyse user navigation. The Site Owner collects other non-identifying data that is obtained through the use of cookies that are downloaded to the User’s computer when they navigate the Website, the characteristics and purpose of which are outlined in the Cookie Policy page.
To manage social media. The Site Owner has a social media presence. If you are a follower of the Site Owner’s social media channels, the personal data processing shall be governed by this section, as well as those terms of use and access policies that belong to this social media network in question and which you have previously accepted.
The privacy policies of the main social media networks can be consulted at these links:
Facebook
Twitter
LinkedIn
YouTube
Instagram
The Site Owner shall process your personal data with the purpose of correctly managing its social media presence, informing you of its activities, as well as for any other purpose that the social media regulations permit.
In no case shall the Site Owner use the social media profiles of its followers to send personal advertisements.
**Security of personal data**
To protect your personal data, the Hotel takes every reasonable precaution and follows the best industry practices to avoid its loss, improper use, improper access, dissemination, alteration or destruction thereof.
Your data may be incorporated in a file of mailing lists, for the management and processing of which the Site Owner is responsible. The security of your data is guaranteed, inasmuch as the Site Owner takes all the necessary security measures and guarantees that personal data is only used for the purposes given.
**Content from other websites**
Pages on this website may include embedded content (e.g. videos, images, articles, etc.). The embedded content from other websites will behave in exactly the same way as if the visitor had visited the other website itself.
These websites may collect data about you, use cookies, embed an additional third-party tracking code and monitor your interaction using this code.
**Política de Cookies**
Para que este sitio Web funcione correctamente necesita utilizar cookies, que es una información que se almacena en su navegador web.
Puede consultar toda la información relativa a la política de recogida y tratamiento de las cookies en la página de Política de Cookies.
**Entitlement to process your data**
The legal basis for processing your data is:
Consent of the interested party.
Personal data categories
Categories of personal data the Site Owner processes:
Identification details.
**Storage of personal data**
The data provided to the Site Owner is stored until its withdrawal is requested.
MailRelay is a product from CPC Servicios Informáticos Aplicados a Nuevas Tecnologías S.L., with registered address at C/ Nardo, 12. 28250 Torrelodones, Madrid.
More information at: https://mailrelay.com
CPC processes data with the aim of providing email marketing services to the Site Owner.
Google Analytics is a web analytics service provided by Google, Inc., a company registered in Delaware whose headquarters is 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, the United States (“Google”).
Google Analytics uses cookies, which are text files stored on your computer, to help the Site Owner analyse how Users browse the Website. The information generated by the cookie about how the Website is used (including your IP address) shall be directly transferred and stored by Google on their servers in the United States.
More information at: https://analytics.google.com
You can consult how Google manages privacy in respect to the use of cookies and other information on Google’s Privacy Policy page: https://policies.google.com/privacy?hl=es
You can also view a list of the types of cookies Google and its collaborators use and all the information related to their use of advertising cookies at:
Types of cookies that Google uses
How Google uses cookies in advertising
**Website navigation**
When navigating the Website, non-identifying data may be collected, which can include IP address, geolocation, a record of how the service and sites are used, navigation habits and other data that cannot be used to identify you.
The Website uses the following third-party analysis services:
Google Analytics.
The Site Owner uses the information obtained to obtain statistical data, analyse trends, manage the site, study navigation patterns and to collect demographic information.
The Site Owner is not responsible for the processing of personal data carried out by websites that can be accessed through the different links found on the Website.
**Accuracy and veracity of personal data**
You give an undertaking that the data provided to the Site Owner is correct, complete, accurate and valid, as well as to duly update it.
As a User of the Website, you are solely responsible for the veracity and correctness of the data submitted to the Website, relieving the Site Owner of any responsibility in this respect.
**Acceptance and consent**
As a User of the Website, you declare that you have been informed of the conditions regarding personal data protection, you accept and consent to the processing thereof by the Site Owner, in the way and for the purposes indicated in this Privacy Policy.
To contact the Site Owner, subscribe to a newsletter or make comments on this Website, you must accept this Privacy Policy.
**Changes to the Privacy Policy**
The Site Owner reserves the right to modify this Privacy Policy to adapt to new legislation or case law, as well as industry practices.
These policies remain in effect until they are modified by other duly published policies.
**DATA CONTROLLER’S INFORMATION**
Corporate Name: Puchet de Ponent S.L. (henceforth the “Company” or the “Party Responsible”).
CIF: B07320559
Address: Carrer de Navarra, 7, 07800 Eivissa, Illes Balears
Phone number: +34 971 302 067
Email for correspondence regarding Data Protection: info@smturistic.com
**Applicable law**
Our Privacy Policy has been designed in accordance with the General Data Protection Regulation, EU Regulation 2016/679, of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Organic Law 3/2018 of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
By providing us with your data, You state that you have read and understood this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data in accordance with the purposes and terms expressed herein.
The Company may modify this Privacy Policy to adapt it to new laws, jurisprudence, and/or interpretations from the Spanish Data Protection Agency. These Privacy Terms and Conditions may be complemented by the Legal Notice, Cookies Policy, and the General Terms and Conditions, which are used as applicable for certain products or services if access thereto involves any particularities in terms of personal data protection.
**Data Protection Officer**
No Data Protection Officer has been designated.
**Purpose of the processing of your personal data**
Your personal data will be processed for the following purposes:
– To provide you with information related to the products and services our company offers and that are outlined on this website.
– To contract our services through the acceptance of the corresponding quote / request and/or the signature of a commercial contract.
– To send via email and/or post news and recent developments about our company, as well as updates to our range of products and services.
**Data conservation period**
We conserve your personal data from the moment you give us your consent to when you revoke it or request a limitation of processing. In such cases, we shall keep your data locked for the legally required periods.
**Legitimisation and collected data**
The legal basis for the processing of your data is the express consent granted through a positive and affirmative act (filling in a corresponding form and ticking the policy acceptance box) when providing us with your personal data.
**Consent to process your data**
Upon filling out any form and ticking the “I accept the privacy policy” box to subsequently send the personal data included on the form, and upon sending e-mail messages to the Company by means of the accounts set up for said purpose, the user recognises that they have read and expressly accepted this privacy policy and that they grant their unequivocal and express consent to having their personal data processed in accordance with the purposes set forth.
**Data categories**
The data collected relates to the identifying data category, which may be: Name and Surname, Telephone number, Postal Address, Company, Email Address, as well as IP address from which the data collection form was accessed.
**Security measures**
As part of our commitment to guarantee the safety and confidentiality of your personal data, we hereby inform you that we have adopted measures of a technical and organisational nature that ensure personal data security and prevent their alteration, loss, unauthorised processing and/or unauthorised access, keeping mind the state of the technology, nature of the data stored, and the risks to which they are exposed, as stipulated by article 32 of GDPR (EU) 679/2016.
**Transfer of data**
Your data is not transferred, internationally or otherwise, except to parties authorised by fiscal, commercial or telecommunication legislation, as well as such cases in which a judicial authority requires us to.
User rights
Anyone has the right to obtain confirmation of whether or not we are processing personal data relating to them. Data owners have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, the data owners may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims. In certain circumstances and for reasons related to their particular situation, the data owners may object to the processing of their data. In this case, the Party Responsible for the file will stop processing the data, except for compelling legitimate reasons or for the exercise or defence of possible claims.
In accordance with current law, you have the following rights: right to request access to your personal data, right to request their rectification or deletion, right to request the limitation of your data’s processing, right to oppose your data’s processing, right to data portability, and right to revoke the consent granted. You also have the right to make a complaint to the Spanish Data Protection Agency.
**How to exercise your rights**
To exercise your rights, you should contact the data controller, requesting the corresponding form for the exercise of the chosen right. Optionally, you can turn to the competent Supervisory Authority for additional information about your rights. The channels for exercising your rights are via the telephone number +34 971 302 067 and the email address: info@smturistic.com. Remember to attach a copy of a document that allows us to identify you.
**Consent to send electronic correspondence**
Similarly, and in accordance with the provisions of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, by completing the data collection form and by ticking the box “I agree to being sent electronic communications”, you are giving express consent to send you information about the Company to your e-mail address, telephone, fax, or by other electronic means.
