Privacy Policy
Our goal is to be as transparent as possible with our users and customers about the personal data we collect. Your privacy is important to us.
By reading this Privacy Policy, the user is informed about the way in which GESTIÓ LLÚRIA collects, treats and protects the personal data that are provided through the website - www.casallimonahotel.com (hereinafter, the website) and other data that may be provided in the future to GESTIÓ LLÚRIA by other means.
The User must carefully read this Privacy Policy, which has been written in a clear and simple way, to facilitate its understanding, and determine freely and voluntarily if you wish to provide your personal data to GESTIÓ LLÚRIA
By filling out any form on the corporate website and clicking on the box "I have read the privacy policy" or similar, the user expressly states that he/she has read this privacy policy which indicates the data processing carried out and the purposes, among other information, thus fulfilling the duty to inform imposed by the Data Protection regulations.
In those cases where the corporate website requests consent for a specific purpose, by clicking on the "I accept" or similar box, or by checking the check box, the user gives unequivocal and explicit consent to the processing of the data in question.
who is responsible for the processing of your data?
- Identity: GESTIÓ LLÚRIA, S.L. - CIF: B67580050
- Address: Calle de Roger de Llúria, 42 Principal. -08009 BARCELONA
- Phone numbers: 93 595 80 95 - 671 08 27 40
- E-mail: [email protected]
Treatment of DATA collected through the WEBSITE
for what purpose do we process your personal data?
In GESTIÓ LLÚRIA we process the information provided by interested parties in order to respond to your request and, where appropriate, send you information about our products or services, as well as our newsletters.
No automated decisions will be made based on the data provided.
how long will we keep your data?
The data will be kept as long as the interested party does not request its deletion or for the duration of the business relationship, always respecting the statute of limitations of responsibilities.
what is the legitimacy for the processing of your data?
Consent of the data subject (by ticking the check box): To process your request and, where appropriate, to send you commercial communications, as well as our newsletters.
to which recipients will your data be communicated?
No data will be transferred to third parties, unless legally obliged to do so.
transfers of data to third countries?
No data transfers to third countries are foreseen.
how did we obtain your data?
The personal data that we process at GESTIÓ LLÚRIA comes from the interested party.
Processing of DATA for PERSONNEL SELECTION
for what purpose do we process your personal data?
At GESTIÓ LLÚRIA we process the information provided by the interested parties in order to carry out personnel selection processes.
No automated decisions will be made based on the data provided.
how long will we keep your data?
Your data will be kept for two years, unless you withdraw your consent before the maximum retention period expires.
what is the legitimacy for the processing of your data?
Consent of the data subject: To participate in personnel selection processes.
to which recipients will your data be communicated?
No data will be transferred to third parties, unless legally obliged to do so.
transfers of data to third countries?
No transfer of data to third countries is foreseen.
how did we obtain your data?
The personal data that we process in GESTIÓ LLÚRIA come from the interested party or their legal representative.
The categories of data processed are:
- Identification data
- Postal and e-mail addresses
- Professional and academic data
Special categories of personal data are not processed (such as data revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data aimed at uniquely identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person).
Processing of the USE OF IMAGE
for what purpose do we process your personal data?
In GESTIÓ LLÚRIA we process the data obtained (image and, where appropriate, voice) in order to publish these images on websites or social networks, as well as in other media, such as magazines, publications, etc., to carry out advertising or dissemination of our activities.
No automated decisions will be made based on the data provided.
how long will we keep your data?
The data will be kept from the time the user gives his consent until he withdraws such consent.
what is the legitimacy for the processing of your data?
Express consent of the interested party: Use of photographs and, where appropriate, videos where the image of interested parties appears.
It is also reported that by granting consent the images can be published on the company's website, social networks and any support that the company deems appropriate to publicize its activities, events and services.
to which recipients will your data be communicated?
They will be published on the company's website and/or social networks or other media.
transfers of data to third countries?
The use of images on social networks may involve international data transfers.
Processing of CUSTOMER DATA
for what purpose do we process your personal data?
In GESTIÓ LLÚRIA we process the information provided by the interested parties with the main purpose of providing the requested services, as well as to perform the administrative, accounting and tax management derived from such services or product sales, and, where appropriate, to send commercial communications about our products and services.
No automated decisions will be made based on the data provided.
how long will we keep your data?
The data will be kept as long as the data subject does not request its deletion, and if applicable, for the years necessary to comply with legal obligations.
what is the legitimacy for the processing of your data?
- Execution of a contract: To provide the requested services
- Legal obligation: To carry out the administrative, accounting and fiscal management of the requested services
- Legitimate interest of the data controller: To send commercial communications about our products and services
to which recipients will your data be communicated?
The data will be communicated to the following recipients:
- Tax Agency, for the purpose of complying with legal obligations (Legal requirement).
- Financial institutions, for the purpose of issuing the corresponding receipts, if applicable. (Contractual requirement)
Data transfers to third countries
No data transfers to third countries are foreseen.
how did we obtain your data?
The personal data that we process in GESTIÓ LLÚRIA come from the interested party or their legal representative
The categories of data processed are:
- Identification data
- Postal and e-mail addresses
- Commercial information
- Banking information, if applicable
Data processing for ADVERTISING
for what purpose do we process your personal data?
In GESTIÓ LLÚRIA we process the information provided by interested parties in order to manage the sending of commercial communications about our products and / or services by electronic means (e-mail, WhatsApp, SMS...).
No automated decisions will be made based on the data provided.
how long will we keep your data?
The data will be retained from the time the user gives consent until he/she withdraws such consent.
what is the legitimacy for the processing of your data?
Consent of the interested party (by signing the document to obtain consent, ticking the check box or any other valid means of obtaining consent): For the sending of commercial communications.
to which recipients will your data be communicated?
Platforms for sending advertising by electronic means, in order to send it with guarantees and obtain statistical data.
transfers of data to third countries?
No data transfers to third countries are foreseen.
how did we obtain your data?
The personal data that we treat in GESTIÓ LLÚRIA come from the interested party.
The categories of data processed are:
- Identification data and postal and electronic addresses
- Commercial information.
Special categories of personal data are not processed (such as data revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data aimed at uniquely identifying a natural person, data concerning health or data concerning the sex life or sexual orientation of a natural person).
VIDEOVIGILANCE data processing
Basic information on data protection
Responsible: GESTIÓ LLÚRIA; Purpose: To ensure the security of persons, property and facilities; Legitimation: Mission in the public interest; Recipients: Data transfers are foreseen to: Where appropriate, the State security forces and bodies, as well as Courts and Tribunals; Rights: You have the right to access, rectify and delete the data, as well as other rights, indicated in the additional information, which can be exercised by contacting the address of the data controller
Complete information on Data Protection
for what purpose do we process your personal data?
In GESTIÓ LLÚRIA we process the images captured by the cameras in order to ensure the safety of people, property and facilities.
No automated decisions will be made based on the data provided.
how long will we keep your data?
The data will be kept for a maximum of 30 days, except for communication to Security Forces and Bodies, and/or Courts and Tribunals.
what is the legitimacy for the processing of your data?
Mission in the public interest: To ensure the safety of people, goods and facilities.
to which recipients will your data be communicated?
If applicable, to the State security forces and bodies, as well as Courts and Tribunals, with the purpose of providing the images if a crime or infraction has been committed.
Data transfers to third countries
No data transfers to third countries are foreseen.
what category of personal data do we process?
Image.
DATA SUBJECT'S RIGHTS
what are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not GESTIÓ LLÚRIA is processing personal data concerning them.
Interested parties have the right to access (art. 15 RGPD) to their personal data, as well as to request the rectification (art. 16 RGPD) of inaccurate data or, where appropriate, request its deletion (art. 17 RGPD) when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the limitation (Art. 18 RGPD) of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing (art. 21 RGPD) of their data. In this case, GESTIÓ LLÚRIA will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
You also have the right to request portability (art. 20 RGPD) of your personal data. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, so that it can be transmitted to another entity directly, where technically possible.
If you have given your consent for a specific purpose, you have the right to withdraw your consent (art. 7 GDPR) at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
You may exercise your rights by contacting the data controller in person, by post or by e-mail to the e-mail address of the data controller, sending the request/application. The forms for the exercise/application of rights can be found on the website of the Spanish Data Protection Agency:
https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/queSede.jsf
OBLIGATION TO PROVIDE THE DATA
The data requested in the forms accessible from the Web Site of GESTIÓ LLÚRIA and, in general, those requested by the company for the provision of the service/sale of product, are, in general, mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if they are not provided or are not provided accurately, it is possible that requests cannot be fulfilled correctly.
In case the interested party provides data of third parties, he/she declares to have the consent of these and undertakes to transfer to the interested party, owner of such data, the information contained in this Privacy Policy, exempting GESTIÓ LLÚRIA from any liability in this regard.
SECURITY MEASURES
Personal data will be processed in a lawful, fair and transparent manner in relation to the data subject ("lawfulness, fairness and transparency"); collected for specified, explicit and legitimate purposes, and will not be further processed in a manner incompatible with those purposes; adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, kept in a manner that allows the identification of data subjects for no longer than is necessary for the purposes of the processing of personal data (respecting the statute of limitations for liabilities); processed in such a way as to ensure adequate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, through the implementation of appropriate technical or organizational measures ("integrity and confidentiality").
We follow strict criteria for the selection of service providers with access to personal data, in order to comply with their data protection obligations, as well as to formalize with them the corresponding data processor contract (art. 28 RGPD), whereby they will be required, among others, to: implement appropriate technical and organizational measures; process the data according to our instructions; and delete or return the data to us once the provision of the services is terminated.
