PRIVACY POLICY

1. Identification of the Data Controller

EMPRENDIMIENTOS HOSTELEROS VALENCIA, S.L. is the PERSON RESPONSIBLE for the processing of the USER’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD). You can contact the Responsible via email address reservas@hotelcosmovalencia.com / info@stayingvalencia.com.
The address for the purpose of claims will correspond to the address indicated as the address of the Holder.

2. Purposes of processing

a) Respond to the questions that the interested party sends to the person in charge.
Retention period: The data will be kept until the issue raised by the interested party is resolved. Subsequently, if necessary, the information will be kept blocked for the legally established periods.
Legal basis: Legitimate Interest of the Data Controller and Consent of the Data Subject.

b) To manage the interested party’s subscription to his or her Client or User account, as well as access to the services and functionalities specific to our Clients / Users.
Retention period: The data will be retained as long as the data subject does not revoke the consent given. Subsequently, if necessary, the information will be kept blocked for the legally established periods.
Legal basis: Consent of the interested party.

c) To process accommodation reservations made by the user.
Conservation period: The data will be processed as long as there is an interest on the part of the interested party, based on the existing contractual relationship when contracting the accommodation service. Subsequently, if necessary, the information will be kept blocked for the legally established periods.
Legal basis: Contractual relationship.

d) To send the interested party commercial communications about our services that may be of interest to them (newsletter).
Retention period: The data will be retained as long as the interested party does not revoke the consent given. Subsequently, if necessary, the information will be kept blocked for the legally established periods.
Legitimate basis: Express consent of the interested party.

e) Manage the publication of content or opinions of users, about their degree of satisfaction with their experience using our services or the facilities we provide.
Retention period: The data will be kept as long as the interested party does not revoke the consent given. Subsequently, if necessary, the information will be kept blocked for the legally established periods.
Legitimate basis: Express consent of the interested party.

3. Recipients of your data
The Data Controller contracts with third party data processors in order to provide its services. With the exception of these entities, your data will not be communicated to other third parties. If for any reason it is necessary to communicate such data to third parties, you will be informed in advance and, where appropriate, your consent will be requested and the purposes of the communication and the identity of the third party to whom they will be communicated will be specified.
All of the above, with the exception of those cases in which a legal requirement makes it necessary to communicate such data to a third party.

4. Rights
Persons who provide us with their data have the following rights in relation to such data:

a. Right of access
b. Right of rectification or deletion
c. Right to limitation of processing
d. Right to portability
e. Right to object
f. Right to revoke consent

a. Right of access: Any person has the right to obtain from the Controller confirmation of whether or not personal data concerning him/her are being processed and, if so, the right of access to personal data.

b. Right of rectification: This is the right to obtain rectification of personal data held by us concerning him/her.

c. Right of deletion: This is the right to obtain the deletion of your personal data.

d. Right to limitation of processing: This is the right to have your data cease to be subject to the corresponding processing operations when any of the following conditions are met:

 When you have exercised your rights of rectification or opposition and the Controller is in the process of determining whether the request is admissible.
 If the data processing was unlawful, which implies the deletion of the data, but you do not want your data to be deleted by the Controller.
 When the data is no longer necessary for the processing, which implies the deletion of the data, but you want the Controller to limit the processing of the data and to keep them in order to formulate, exercise or defend yourself against claims.

e. Right to portability: This is the right to obtain from the Data Controller, in case of automated processing of your data, a copy of such data in a structured, commonly used and machine-readable format or to have such copy transmitted directly to the Data Controller indicated by you. Please note that this right shall not apply to:
 The data of third parties that you have provided to the Controller.
 The data concerning you, but which have been provided to the Controller by third parties.

f. Right of opposition: This is the right to object to your personal data being processed. As far as the processing carried out by the Controller is concerned, you may object to the sending of commercial communications both own and third parties.
If you want more information about your rights, we suggest you visit the website of the Spanish Data Protection Agency, as well as the European Data Protection Regulation.
The exercise of these rights may be made by sending an email to reservas@hotelcosmovalencia.com, clearly indicating which right you wish to exercise and providing a copy of your identity document to prove your identification.

You can also contact us by mail at the registered office of the Data Controller listed in point 1 of this Privacy Policy.
Additionally, we inform you about the possibility of filing a complaint before the competent Control Authority, in this case, the Spanish Data Protection Agency, especially in case you have not obtained satisfaction in the exercise of your rights. You can contact the Spanish Data Protection Agency through their telephone numbers 901 100 099 and 912 663 517 or by visiting them at their address C/ Jorge Juan, 6. 28001 – Madrid.

5. Safety measures
The Controller guarantees to the USER that the processing carried out complies with all the provisions of the aforementioned data protection regulations, GDPR and LOPDGDD, and that the data are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Likewise, the Controller guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated the appropriate information to them so that they can exercise them.

6. Origin and accuracy of the data
The totality of the data collected comes from the interested party. The User, by accepting this Privacy Policy, declares and undertakes to guarantee the truthfulness and accuracy of the data provided, as well as to be the legitimate owner of the same.

Likewise, the User undertakes to keep his/her data updated at all times, and to communicate without delay to the Responsible Party any significant modification, such as the change of ownership of his/her bank account, or the modification of his/her e-mail account provided through the relevant forms hosted on the web.

In this sense, the User shall be solely responsible for the failure to comply with the above, exonerating the Data Controller from any liability with respect to such data that the User has not previously communicated.