PRIVACY POLICY

PRIVACY POLICY

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

WHAT TYPE OF DATA DO WE PROCESS?

FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR DATA?

HOW LONG WILL WE KEEP YOUR DATA?

WILL WE SHARE YOUR DATA WITH THIRD PARTIES?

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

CHANGES TO THE PRIVACY POLICY.

INFORMATION ABOUT COOKIES

 

BALNEARIO DE ARCHENA, S.A. informs below of its privacy policy applied to personal data.

PRIVACY POLICY

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
RESPONSIBLE FOR THE TREATMENT: BALNEARIO DE ARCHENA, S.A.
NIF: A30000145
Address: Carretera del Balneario, s/n, 30600, Archena, Murcia
DPD email: dpd@balneariodearchena.com

WHAT TYPE OF DATA DO WE PROCESS?

Depending on the products, services or functionalities that you want to enjoy at any given time, we will need to process some data or others. In general, said data will be, depending on the case, the following:

1.- Your identifying data: name, surname, NIF, NIE or passport, language, country from which you interact with us, etc.Contact information: telephone number, postal address, email, etc.
2.- Economic and transactional information: Your payment or card information, information about your purchases, orders, returns…
3.- Connection, geolocation and navigation data (in case you interact with us from your mobile, for example).
4.- Commercial information if you are subscribed to our newsletter.
5.- Data about your tastes and preferences.

Remember that, when we ask you to fill in your personal data to give you access to some functionality or service on the website, we will mark some fields as mandatory, since they are data that we need to be able to provide you with the service or give you access to the functionality in question.

Please note that if you choose not to provide us with such data, you may not be able to complete your registration as a user or you may not be able to enjoy those services or functionalities.

FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on how you interact with our website, we will process your personal data for the following purposes:

For the development, compliance and execution of the Purchase and Sale Contract

1.- This purpose includes the processing of your data mainly for:

– Contact you in relation to updates or informative communications related to the products purchased, including sending quality surveys on the products supplied.
– To make the hotel’s online reservations, you will have to complete the information in the form enabled for this purpose by our reservation provider. By formalizing the reservation and accepting the privacy policy, you are authorizing the processing. of data for the management of the reservation. The data will be kept as long as there is a commercial relationship, and to guarantee the management of your reservation.
– Manage payment for the products you purchase, regardless of the payment method used.
– Activate the necessary mechanisms in order to prevent potential fraud against you and ourselves during the purchasing process. If we consider that the operation may be fraudulent, this processing may result in the blocking of the transaction.
– Manage possible returns once you have made a purchase and manage requests for information about the availability of different products.
– Invoice and to make available to you the tickets, invoices and any other document proving payment regarding the purchases you have made on our Platform.

2.- To respond to the requests or requests you make through the different means incorporated into our Platform.

We only process personal data that is strictly necessary to manage or resolve your request or request.

3.- For social media management

In the event that you follow us or contact us through the different social networks in which we are present, we will process the data that you provide us through them. for the sole purpose of responding to your messages or comments and managing our contact list.

4.- For marketing purposes.

To the extent that you subscribe to our Newsletter, your personal data will be used for the periodic sending of company newsletters.

You must remember that you can unsubscribe from the Newsletter at any time and free of charge by notifying BALNEARIO DE ARCHENA, S.A. in the e-mail dpd@balneariodearchena.com,

5.- Usability and quality analysis to improve our services (Cookies)

If you access our Platform, we inform you that we will process your browsing data for analytical and statistical purposes, that is, to understand the way in which users interact with our Platform and thus be able to introduce improvements to it. Likewise, on occasions, we carry out quality actions and surveys aimed at knowing the degree of satisfaction of our clients and users and detecting those areas in which we can improve.

6.- Telephone reservation

In the event that you make your reservation through our telephone number, your data will be processed for the management of the reservation, including your bank card data as a guarantee under a PCI system.

The conditions of the reservation and its cancellation will be given by the operator who answers your call.

7.- Calls

In the event that you have called us by phone and we have recorded and/or collected other personal data, it will be collected in order to guarantee the quality of the services provided by the hotel, as well as to guarantee the correct attention provided by our staff. Calls will be kept for the time necessary to respond to the queries, and subsequently 12 months to avoid possible errors or misunderstandings.

8.- WIFI

If you use the internet access service through the hotel’s WI-FI, we will collect your access and navigation data for the purpose of correct management of the service and for security reasons. Your access and browsing data will be kept for the time necessary to cover legal obligations regarding security.

9.- Management of the internal information system.

The data is processed with the purpose of correctly receiving, managing and processing the information received through the internal information system.

10.– Employment selection

In the event that you fill in the relevant form and, if applicable, attach your CV, we will treat your data as a potential job applicant with the utmost respect for your privacy.

WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR DATA?

The legal basis that allows us to process your personal data also depends on the purpose for which we process it, in this way we will find different legal bases based on the following purposes:

1.- Development, compliance and execution of the purchase and sale contract.

The processing of your data is necessary for the execution of the sales contract that binds us to you. We understand that the processing of this data is positive for all the parties involved when payment for a purchase occurs and in particular for you since it allows us to establish appropriate measures in order to protect you against fraud attempts carried out by third parties.

2.- Customer Support.

We consider that we have a legitimate interest to respond to the requests or queries that you submit to us through the various existing means of contact. We understand that the processing of this data is also beneficial for you as it allows us to serve you appropriately and resolve any queries raised. When you contact us, in particular, to manage incidents related to the product purchased through the Platform, the processing is necessary for the execution of the purchase and sale contract. When your query is related to the exercise of the rights about which we inform you below, or to claims related to our products or services, what legitimizes us to process your data is compliance with legal obligations on our part.

3.- Social networks

The basis of legitimacy is our legitimate interest in responding to queries raised through the social network, as well as the consent granted at the time you follow us and wish to be part of our contact list.

4.- Marketing

The legitimate basis for processing your data for marketing purposes is the consent you provide.

For example, when you agree to receive personalized information through various means, when you authorize the sending of a newsletter, or when you accept the legal bases to participate in a promotional action.

5.- Usability and quality analysis

The legitimate basis for processing your data is the consent you give.

6.- Telephone reservation

The consent of the interested party when making the reservation, once they have been informed of the reservation and payment conditions.

7.- Calls

The legitimate interest of the company to be able to manage the reservation or query, guarantee the correct attention of the staff.

8.- WIFI

The consent given when connecting to the network and with the acceptance of the privacy policies.

9.- Management of the internal information system.

Legal obligation, in accordance with Law 2/2023, of February 20, regulating the protection of people who report regulatory infractions and the fight against corruption. The processing of special categories of personal data for reasons of essential public interest may be carried out in accordance with the provisions of article 9.2.g) of Regulation (EU) 2016/679.

The possibility of receiving communications regarding sexual and gender-based harassment is based on the obligation established by Royal Decree 901/2020, of October 13, which regulates equality plans and their registration and modifies them. Royal Decree 713/2010, of May 28, on the registration and deposit of collective labor agreements and agreements, as well as the internal action protocol.

The receipt of communications regarding breaches of the Code of Ethics is based on the organization’s interest in complying with its internal regulations.

The reception of complaints and claims is based on the quality regulations applicable to the organization.

10.- Employment selection

The basis of legitimacy is the consent you give us by filling in the corresponding form and, where appropriate, attaching your curriculum vitae. If you apply for a specific offer, the basis of your consent will be pre-contractual.

HOW LONG WILL WE KEEP YOUR DATA?

1.- Development, compliance and execution of the purchase and sale contract.

We will process your data for the time necessary to manage the purchase of the products or services you have purchased and subsequently for the legally established deadlines for compliance with our tax obligations. On some occasions, we will only process some data until you decide, such as the payment data (bank card) that you have asked us to store for possible future purchases.

2.- Customer Support

We will process your data for as long as necessary to respond to your request or request.

3.- Social networks

We will process your data for as long as necessary to respond to your request or request and as long as you are a follower of our profile.

4.- Marketing

We will process your data until you request unsubscription or cancel your subscription to the newsletter.

5.- Usability and quality analysis to improve our services (Cookies)

As established in the cookie policy.

6.- Telephone reservation

Your personal data will be kept for the period essential for the management of your reservation.

7.- Calls

Calls will be kept for the time necessary to respond to the queries, and subsequently 18 months to avoid possible errors or misunderstandings.

8.- WIFI

Your access and browsing data will be kept for the time necessary to cover legal obligations regarding security.

9.- Management of the internal information system.

Personal data related to the information received and internal investigations will only be kept for the period that is necessary and proportionate in order to comply with Law 2/2023, of February 20. In no case may the data be kept for a period of more than ten years.

The data that is the subject of processing may be kept in the information system only for the time necessary to decide on the appropriateness of initiating an investigation into the reported events.

If three months have elapsed since receipt of the communication without investigation actions having been initiated, it must be deleted, unless the purpose of conservation is to leave evidence of the operation of the system.

10.– Employment selection

We will process your data for as long as it is necessary for the selection process and, in any case, for a maximum period of 2 years.

Regardless of whether we process your data for the time strictly necessary to fulfill the corresponding purpose, we will subsequently keep it duly stored and protected for the time in which responsibilities arising from the processing may arise, in compliance with the regulations in force at all times. Once the possible actions are prescribed in each case, we will proceed to delete the personal data.

 

WILL WE SHARE YOUR DATA WITH THIRD PARTIES?

To fulfill the purposes indicated in this Privacy Policy, it is necessary that we give access to your personal data to third parties that provide us with support in the services that we offer and that we detail below:

Financial entities, for payment management
Technology service providers that support us
Suppliers and collaborators of logistics, transportation and delivery services.

In the case of the internal information system, the identity of the informant may only be communicated to the Judicial Authority, the Public Prosecutor’s Office or the competent administrative authority within the framework of a criminal, disciplinary or sanctioning investigation, for the information received included within the scope of Law 2/2023.

At the level of the entity, only the System Manager and the manager will have access to the system. They could have access on a limited basis and within the scope of their powers:

•  The person responsible for human resources or the duly designated competent body, only when the adoption of disciplinary measures against a worker could be appropriate.
• The person responsible for the legal services of the entity or organization, if the adoption of legal measures is appropriate in relation to the facts reported in the communication.
• The data protection officer.

The processing of data by other people, or even its communication to third parties, will be lawful when it is necessary for the adoption of corrective measures in the entity or the processing of sanctioning or criminal procedures that, where appropriate, may be appropriate.

In the case of information not included, the report data will be sent to the corresponding person or body of the entity, in accordance with the Procedure that can be consulted on this page, guaranteeing their confidentiality.

Outside of these cases, your personal data will not be communicated to third parties.

 

In addition, we inform you that we are present on the social networks Facebook, Instagram, Twitter, TikTok and YouTube, to keep our followers informed about the company’s news and services.

You can access these social networks voluntarily and through the links available on the website itself or by accessing directly and on your own from the browser or installed app.

You should know that this website is not responsible for the use of data that these social networks may make. However, when this data is generated on the social network and derives from an interaction with our official account, we will be co-responsible for the treatment together with the social network.

The creation of an account on a social network by this company does not mean that you must consent to the processing of your data without being previously informed of its scope.

In order to consent to our transfer from this website and the processing of your data, you must carefully read the privacy policy of the social network you wish to access:

• Facebook: https://es-es.facebook.com/privacy/explanation
• Instagram: https://about.instagram.com/es-la/safety
• YouTube: https://www.youtube.com/intl/es/about/policies/#community-guidelines
• TikTok: https://www.tiktok.com/legal/page/row/privacy-policy/es
• Twitter: https://twitter.com/es/privacy

In this way, before clicking on the logos of the social networks present on our website, you can inform yourself and make a redirection with prior knowledge of the processing of your data and on a voluntary basis.

By contracting our services you are authorizing us to transfer your personal data to the company FLEXMYROOM INSURETECH, S.L., domiciled in Benidorm (03503 – Alicante), Calle Gerona, 13, Local CA 18, and with CIF number B42687616, with the sole purpose of protecting your reservation enjoying the services and insurance products offered. Only the data strictly necessary for the activation of the insurance (name and surname, identity number, postal address and contact information) will be transferred, in our common interest. This entity will cancel your personal data when the service has ended and the legally established deadlines have been met. You can exercise your rights of access, rectification, deletion, limitation of treatment, data portability, and opposition to treatment and not be subject to automated decisions at the email address datos@flexmyroom.com

International transfers: Any international transfer of personal data (e.g. in the case of the use of cookies, social media, etc.) will be based on your express consent, in the absence of an adequacy decision, adequate safeguards or other legal basis.

WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

We are committed to respecting the confidentiality of your personal data and guaranteeing the exercise of your rights.

You can exercise them free of charge by sending us an email to our address dpd@balneariodearchena.com, simply indicating the reason for your request and the right you want to exercise.

If we consider it necessary to identify you, we may request a copy of a document proving your identity. In particular, regardless of the purpose or legal basis under which we process your data, you have the right to:

Ask us for access to the data we have about you.

Ask us to rectify the data we already have. Please note that by actively providing us with your personal data by any means, you guarantee that it is true and accurate and you agree to notify us of any changes or modifications thereof.

Ask us to delete your data to the extent that it is no longer necessary for the purpose for which we need to process it as we have previously informed you, or that we no longer have the legitimacy to do so.

Ask us to limit the processing of your data, which means that in certain cases you can ask us to temporarily suspend the processing of the data or to keep it beyond the time necessary when you may need it. If you have provided us with your consent to process your data for any purpose, you also have the right to withdraw your consent at any time.

Receive the personal data that concerns you and that you have provided to us, in a structured, commonly used and machine-readable format, as well as transmitting it to another data controller.

On the other hand, when the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.

Finally, we inform you of your right to file a complaint with the relevant data protection supervisory authority, in particular, with the Spanish Data Protection Agency https://www.agpd.es/portalwebAGPD/index- ides-idphp.php

CHANGES TO THE PRIVACY POLICY.

We may modify the information contained in this Privacy Policy from time to time as we deem appropriate. If we do so, we will notify you in different ways through the Platform, or we will even communicate it to your email address when the change in question is significant for your privacy, so that you can

review the changes, evaluate them and, where appropriate, oppose or unsubscribe from any service or functionality.

INFORMATION ABOUT COOKIES

We use cookies and similar devices to facilitate your navigation on the Platform, understand how you interact with us and, in certain cases, be able to show you advertising based on your browsing habits. Please read our Cookies Policy to learn more about the cookies and similar devices we use, their purpose and other information of interest.