This legal text gives you details of how we collect and process your personal data through the use of our website www.hotelipvpalace.com, including any information that you may provide us through the site when you contract a service and / or purchase a product, register for our newsletter or provide your contact information through the form provided for this purpose.
By providing us with the data, we inform you that our services are only aimed at adults, so you guarantee that you are over 18 years old when you send us the form.
1. Responsible for the treatment.
Contact details of the person in charge: JUSPE, SA, Carretera A7, Km. 207 (next to Sohail castle), Fuengirola, Malaga, 29640 and email email@example.com
JUSPE, SA has a Data Protection Officer, with whom you can contact at the following email: firstname.lastname@example.org
Commercial registration data: Mercantile Registry of Malaga- Volume 3236 -Book 2149 -Tomo 114- Section 8º -Sheet MA 61294 -Inscription 4º
JUSPE, SA is responsible for your data. (Hereinafter we or ours).
2. What data do we collect?
The General Data Protection Regulation tells us that personal data is all information about an identified or identifiable natural person, that is, all the information capable of identifying a person. This would not include anonymous or percentage data.
On our website we can process certain types of personal data, which may include:
• Identity data: name, surname and username.
• Contact information: email or billing address.
• Financial data: bank details and other details of purchases made
• Technical data: login data, Internet protocol addresses, browser type and version, configuration and location of the time zone, operating system, browser plug-in types and versions, and any other technology on the devices that you use to access our website.
• Profile data: username and password, purchases made, comments and responses to surveys.
• Usage data: information about how you use our website, products and services.
• Marketing and communications data: preferences to receive marketing communications from us and preferred means of communication.
We do not collect any data related to special categories of personal data (those that reveal your ethnic or racial origin, political opinions, religious or philosophical beliefs, union membership and information about your health, genetic or biometric data).
In the event that you are asked to collect personal data by law or according to the terms of the contract between us and you refuse to provide it to us, we may not be able to carry out said contract or provide the service, and you must notify us in advance.
3. How do we collect your personal data?
The means we use to collect personal data are:
Through the form on our website, through our contact emails, by phone or by post, when:
• Request information about our products or services
• Contract the provision of our services or products
• Request budgets
• You subscribe to any of our services or publications
• Send your comments
To ensure the quality of our portal, we have to reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we understand that it does not meet these requirements or any other law or regulation. If this happens, we will try to state the reasons for our decision, but we cannot commit to doing so in all cases.
Through technology or automated interactions:
On our site we can automatically collect technical data about your equipment, browsing actions and usage patterns. This data is collected through cookies or similar technologies. If you want more information, you can consult our Cookies Policy
Through third parties:
• Google: analytical data or search data. Outside the European Union.
• Social Networks: (Facebook, Instagram, Twitter, Linkedin…) outside the European Union.
4. Purpose and legitimacy for the use of your data.
The most common uses of your personal data are:
• For the formalization of a contract between JUSPE, SA and you.
• When you give your consent to the processing of your data.
• When we need them to comply with a legal or regulatory obligation.
• When necessary for our legitimate interest or that of a third party.
The User may revoke the consent given at any time by sending an email to email@example.com or consulting the section on the exercise of rights below.
Below we attach a table in which you can consult the ways in which we are going to use your personal data and the legitimacy for its use, in addition to knowing what type of personal data we are going to process. We can process some personal data for some additional legal reason, so if you need details in this regard you can send an email to firstname.lastname@example.org
To request information through the contact form
Type of data
Legitimacy for your treatment
Consent of the interested party
To carry out commercial communications, delivering relevant content that may be of interest to you
Type of data
Legitimacy for your treatment
Consent of the interested party
To administer and protect our business and our website
Type of data
Legitimacy for your treatment
Commercial communications : you will only receive communications if
• You asked us for information or made a contract with us for a product or service.
• If you provided us with your data, accepting the box enabled in this regard in our form.
• As long as you have not expressed your wish to stop receiving such communications.
We obtain your express consent before sending you any communication, being able to request at any time that we stop sending you communications at the email email@example.com
When you choose to stop receiving our communications, your personal data will continue to be stored as a result of the contract made by you to comply with legal requirements.
Purpose: we will only use your data for the purposes for which we collected it, unless we reasonably consider that we should use it for another reason, notifying you in advance so that you are informed of the legal reason for its processing and as long as the purpose is compatible with the purpose. original.
Conservation period: They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from said purpose and from the data processing. The provisions of the archives and documentation regulations shall apply.
Subscriber data by e-mail or form: From the moment the user subscribes until they unsubscribe.
User data uploaded by JUSPE SA to their Social Networks or pages: From the moment the user gives their consent until they withdraw it.
5. Your Data Protection Rights
INFORMATION AND FORMS IN THE EXERCISE OF DATA PROTECTION RIGHTS
Data protection regulations include a series of rights that all citizens can avail of. Juspe SA (Hotel IPV Palace & Spa), to facilitate their exercise, informs you of the different rights, their content, procedures, deadlines and provides you with the models that you can use in their exercise. However, if you have any questions, you can contact our Data Protection Delegate firstname.lastname@example.org
It is common to all rights:
⦁ Its exercise is free, except if the requests are manifestly unfounded or excessive.
⦁ Requests must be answered within one month, although, if the complexity and number of requests are taken into account, the period can be extended for another two months.
⦁ In all our Activity Records we collect the means to exercise rights.
⦁ You can exercise the rights directly or through your legal or voluntary representative.
⦁ It is possible that the person in charge will be the one who attends your request on behalf of the person in charge, if both have established it in the contract or legal act that binds them.
⦁ The age as a general rule, for the exercise of rights is fourteen years.
⦁ Regarding deceased persons, those linked to the deceased for family or de facto reasons, as well as their heirs, may exercise their rights of access, rectification and deletion, unless the deceased had expressly prohibited it or established by law.
How do I exercise my data protection rights?
⦁ Written request to Juspe SA (Hotel IPV Palace & Spa) (you will find the forms below) by any of the means admitted by law.
⦁ Identification (photocopy of ID or passport or other valid document to identify the person).
⦁ If acting represented, copy of the representation and identification of the representative (photocopy of ID or passport or other valid document to identify the person).
⦁ Right that you exercise, and as far as possible concretion in your request.
⦁ Address for the purposes of notifications, date and signature.
⦁ Documents (if necessary) that justify the exercise of rights
Right of access
It supposes that any person has the right to contact Juspe SA (Hotel IPV Palace & Spa), to know in the first place whether or not we are treating their personal data and, if so, to obtain the following information:
⦁ A copy of your personal data that we are treating.
⦁ The purposes for which we are treating your data.
⦁ The recipients or categories of recipients to whom the personal data was or will be disclosed, in particular, recipients in third countries or international organizations.
⦁ The expected period of conservation of personal data or, if this is not possible, the criteria used to determine that period.
⦁ The existence of the right to request the rectification or deletion of your personal data, the limitation of the processing of your personal data or to oppose such processing.
⦁ The right to file a claim with the Spanish Data Protection Agency.
⦁ When they were not obtained directly from the interested party, to identify the origin.
⦁ If there are automated decisions, including profiling, information on the logic applied, the importance and consequences of that treatment.
⦁ When data is transferred to a third country or an international organization, you will be informed of the appropriate guarantees in which the transfers are made.
The right of access includes providing a copy of the personal data that is the object of the treatment, however, if more than one copy is requested, a reasonable fee based on administrative costs may be required. This right to obtain a copy cannot adversely affect the rights and freedoms of others.
Right of Rectification
It supposes that any person from whom Juspe SA (Hotel IPV Palace & Spa) carries out data processing, can obtain the rectification of their data. In the request you make, you must indicate the data that you want to be rectified, and the documentation that justifies the inaccuracy or incompleteness must be attached when necessary. The rectification must be carried out without delay and within a maximum period of one month.
Right of Suppression (right to be forgotten)
Any person whose data is processed by Juspe SA (Hotel IPV Palace & Spa) can exercise this right whenever these circumstances arise:
⦁ If the personal data is no longer necessary in relation to the purposes for which it was collected or is otherwise processed.
⦁ If the processing of personal data has been based on consent, and it is withdrawn, there is no other legal basis that legitimizes it.
⦁ If the right of opposition has been exercised and it was based on the refusal to process the data for direct marketing, or was based on the legal basis of legitimate interest or fulfillment of a mission of public interest.
⦁ If the processing of personal data was illegal.
⦁ If personal data must be deleted to comply with a legal obligation established in Union or Member State law.
⦁ If the data was obtained in relation to the offer of services of the information society, collected in the General Data Protection Regulation Like all rights it is not unlimited, in such a way that this right finds its following limits: with the exercise of freedom of expression and information, for the fulfillment of a legal obligation, for the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred on the person in charge, for reasons of public interest, in the field of health public, for archival purposes of public interest, scientific or historical research purposes or statistical purposes, or for the formulation, exercise or defense of claims.
Right of Opposition
It supposes that those people of whom Juspe SA (Hotel IPV Palace & Spa) treats personal data, can oppose said treatment, in two cases:
When they are subject to treatment based on a mission of public interest or legitimate interest, including profiling. This right will be upheld unless compelling reasons are proven that prevail over the interests, rights and freedoms of the interested party, or for the formulation, exercise or defense of claims.
When the purpose of the treatment is direct marketing, also including profiling. Esteemed this right, personal data will no longer be processed for this purpose.
Right to Limitation of Treatment
It can be exercised by those people for whom Juspe SA (Hotel IPV Palace & Spa) performs treatments, with two modalities:
⦁ Request the suspension of the processing of your data:
a) When the accuracy of the data has been contested, during the period in which they are verified.
b) When the right of opposition has been exercised based on a legitimate interest or mission of public interest, while verifying whether it proceeds or not.
⦁ Request the conservation of your data:
a) When the treatment is illegal and you oppose the deletion of the data, requesting the limitation.
b) When the data is no longer necessary for the purpose of the treatment, but the interested party needs it for the formulation, exercise or defense of claims. The fact that the processing of personal data is limited must be clearly stated in the information systems of Juspe SA (Hotel IPV Palace & Spa).
Right to Portability
Whenever technically possible, any person whose data is processed by Juspe SA (Hotel IPV Palace & Spa), based on consent or within the framework of the execution of a contract, may request, provided that the treatment is carried out By automated means, that the data be sent to him or to the new person in charge of the same, in a structured, commonly used, machine-readable and interoperable format. This right does not apply when the treatment is necessary for the fulfillment of a mission of public interest or in the exercise of public powers.
Right not to be the subject of automated individual decisions
Any person from whom data is processed by Juspe SA (Hotel IPV Palace & Spa), has the right not to be the subject of a decision based solely on automated processing, including profiling, that produces legal effects on them or significantly affects them, Unless it is included in the regulations that will establish counterbalance measures for this obligation.
You can also give your consent for this, or that is necessary for the preparation of a contract, but in these two cases, you can request human intervention, you can express your point of view and you can challenge the decision.
6. Transfer of personal data
It is possible that, in the performance of our work, we need the help of third parties, who will only process the data to provide the contracted service, and with which we have the corresponding measures to guarantee your rights:
• Service providers that provide information technology and systems administration services.
• Professional advisers including attorneys, auditors, and insurers who provide banking, legal, insurance, and accounting consulting services.
All those in charge of treatment to whom we transfer your data will respect the security of your personal data and will treat it in accordance with the RGPD.
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, modified or disclosed. In addition, we limit access to your personal data to those employees, contracting agents, and other third parties who have a business need to know such data. They will only process your personal data according to our instructions and will be subject to a duty of confidentiality.
We have implemented procedures to deal with any suspected violation of your personal data and we will notify you and the Control Authority in the event that a security breach occurs, as regulated in the RGPD in its articles 33 and 34.
8. International transfers
Countries outside the European Economic Area (EEA) do not always offer the same levels of protection for your personal data, so European law has prohibited transfers of personal data outside the EEA unless the transfer meets certain requirements.
Some of our external service providers are located outside the European Economic Area (EEA), so the processing of your personal data will involve a transfer of data outside the EEA.
• Social Networks: JUSPE SA makes use of the social networks Facebook, Instagram, LinkedIn and Twitter, all in the USA.
• Email: The email service of JUSPE, SA is provided using Outlook services.
• Storage and encryption: JUSPE, SA uses the following external provider for the storage of your personal data: DROPBOX and encrypts all the information it receives and generates with WINZIP.
If you need expansion regarding the specific mechanism used by us when transferring your data outside the EEA, you can contact us via our email email@example.com. Conditions of the IPV Exclusive Club
By contracting our services you are accepting that we transfer your personal data to the entity FLEXMYROOM INSURETECH, SL, domiciled in Benidorm (03503 - Alicante), Calle Gerona, 13, Local CA 18, and with CIF number B42687616, with the sole purpose that You can benefit from the insurance that this entity offers.This entity will cancel your personal data when the service has ended and the legally established deadlines have been met.You can exercise your rights of access to data, rectification or deletion of data, limitation of the use of the data, of opposition to the use of the data and of the portability of the data at the email address firstname.lastname@example.org