1. Information to the User:
Hostal Mikaela, S.L. is the data controller of the User’s personal data and informs you that such data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. The following information regarding the processing is therefore provided:
- Purpose of processing: to maintain a commercial relationship with the user in relation to the products or services offered. The processing operations envisaged include:
– Responding to queries and suggestions that users may submit.
– Managing orders, requests, or any type of petition made by the user through any of the contact methods made available.
– Managing your requests and/or reservations and their payment.
– Sending commercial advertising communications by email, mobile applications, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be carried out by the controller and related to its products and services, or those of its collaborators or suppliers with whom promotional agreements have been reached.
– If you send or submit a résumé, it may be used in staff recruitment processes. CVs will be kept for a maximum period of one year, after which they will be deleted, guaranteeing full confidentiality both in their processing and subsequent destruction. After this period, if you wish to continue participating in recruitment processes, please resend your résumé. - Data retention criteria: Data will be kept for as long as there is a mutual interest in maintaining the purpose of processing and, when no longer necessary for that purpose, will be deleted with appropriate security measures to ensure pseudonymisation.
- Data disclosure: Website developers and the company hosting our servers will have access to the data. All of them have formalised agreements with us to access the data exclusively for the purposes described herein. Data will not be transferred to any other third party, except where legally required.
- Legal basis: Processing is based on the consent requested through the corresponding acceptance checkbox.
User rights:
– Right to withdraw consent at any time. Right to object and to data portability. The data subject has the right to receive all personal data concerning them that they have provided to a controller, provided that the processing is based on consent or is necessary for the performance of a contract and is carried out by automated means.
– Right of access: The data subject has the right to request and obtain free information regarding their personal data being processed, the origin of such data, and the communications made or planned. When the request is submitted electronically, and unless otherwise requested, the information will be provided in a commonly used electronic format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
– Right to rectification and erasure: The controller must fulfil the right of rectification or erasure within ten days. Personal data whose processing does not comply with the law, particularly inaccurate or incomplete data, will be rectified or erased as appropriate. The data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them and to have incomplete data completed, including by means of an additional statement.
– Right to restriction of processing: The data subject has the right to obtain from the controller the restriction of processing of their data. Where processing has been restricted, data may only be processed for storage, with the data subject’s consent, for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of public interest. The data subject will be informed before the restriction is lifted.
– Right to object: The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them (public interest and legitimate interest), including profiling based on those provisions. The controller shall cease processing the data unless compelling legitimate grounds are demonstrated that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defence of legal claims.
– Right to lodge a complaint with the Supervisory Authority if satisfaction has not been obtained in the exercise of their rights, in this case before the Spanish Data Protection Agency: http://www.agpd.es
– Contact details to exercise your rights:
Postal address: C/ Amoladeras, 13. 30370 – Cabo de Palos (Murcia), Spain
Email address: reservas@subuphostel.com
2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
By checking the corresponding boxes and entering data in the fields of the contact forms or download forms, Users expressly and freely accept that their data are necessary for the provider to process their request, while the inclusion of data in the remaining fields is voluntary.
The User guarantees that the personal data provided to the controller are truthful and undertakes to communicate any modification thereof.
The controller expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances and that, whenever any type of transfer of personal data is to be carried out, the prior express, informed, and unequivocal consent of the Users will be requested.
All data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the User.
If all required data are not provided, it is not guaranteed that the information and services supplied will be fully tailored to your needs.