piscina al atardecer hotel eden nord soller

Privacy Policy

Who controls the processing of your personal data?

Data Controller: GESTORA HOTELERA MALLORQUINA S.L., NIF/CIF: B07694649, Address: PASSEIG ES TRAVES, Nº 26 07108 SOLLER, Telephone: 971631600, Email: hoteleden@hoteleden.com. Data protection officer: contact: / http://www.protecmir.com / e-mail: protecmirlegal@protecmir.com.

What data do we process?

At GESTORA HOTELERA MALLORQUINA S.L. we process the personal data provided by you by filling in the forms provided for this purpose on this website, the personal data resulting from the provision or contracting of our services or products and/or the personal data resulting from the commercial relationship that you maintain with us. In addition, we process the personal data generated in the context of your activity on our website, which category includes your browsing data obtained through the website. It is important for us to keep the record of your personal data up to date. You are obliged to keep us informed of any changes or errors in your personal data as soon as possible by contacting us by email: hoteleden@hoteleden.com.

What do we process your personal data for?

Purpose: GESTORA HOTELERA MALLORQUINA S.L. may process your personal data for the following purposes:

Managing and maintaining the services provided through the website.
Managing and servicing queries and requests for information made by users through the contact form. The email address and personal data that you provide us through the contact form on the website will be used exclusively to deal with the queries you send us by this means.
Compliance with applicable legal obligations.
Sending commercial communications and newsletters, as well as advertising our services and products.
Managing the contracting of our services and/or products.
Managing requests for information or requests for quotations for our services or products.
Conducting surveys to improve our services.
Registration in the user area.
Receiving and managing your Curriculum Vitae in order to participate in the organisation’s staff selection processes.
Managing participation in activities and competitions held by the entity.
Managing the members’ club.
Handling and processing of complaints submitted through the internal complaints channel.
If you have given your consent and in order to be able to offer you services relating to your interests, your personal data may be used to draw up a commercial profile. No automated decisions will be made based on said profile.

How long will we keep your personal data?

We keep your personal data in our systems and files for as long as is needed to carry out the purposes of the processing, and to comply with applicable legislation. Your personal data will be kept for as long as there is a contractual and/or commercial relationship with you, or as long as you do not exercise your right to the deletion and/or restriction of processing of your data. The length of time for which personal data is kept will vary depending on the purposes of the processing, and in general terms:

The personal data that you provide when contracting our services or products will be kept for the duration of the contractual relationship and, once said relationship has ended, for the legally mandated period of time with regard to any legal actions arising from said relationship.
The personal data you provide to manage requests for information or queries through the contact form will be kept as long as you do not request its erasure or cancellation.
The personal data you provide to subscribe to our Newsletter or bulletins will be kept as long as you do not request its deletion, opposition and/or limitation.
The personal data you provide to us by sending us your curriculum vitae will be kept for a period of no more than 1 year.
The personal data you provide to participate in our activities and contests will be kept as long as you do not request its deletion or cancellation.
The personal data that you provide through the complaints channel will be held for a period not exceeding 3 months.
The personal data obtained from your browsing and consumption habits, as well as the commercial profile obtained, will be kept as long as you do not request its deletion or cancellation.
Your personal data will be kept for as long as it is useful for the purposes indicated, and, in any case, for legally mandated periods and for the length of time necessary to address any possible liabilities arising from the processing.

What is the legitimacy for the processing of your data?

Legitimacy: The legitimacy to process your personal data is based on:

Executing and maintaining a contractual and commercial relationship with you, such as contracting the organisation’s products and services, managing and processing requests for quotes for the organisation’s products and/or services, all in accordance with the provisions of Article 6.1.B of GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December (LOPDPGDD).
Your express consent for one or more purposes, such as sending you our own or third-party advertising communications or newsletters, managing how curricula vitae are sent, taking part in activities or competitions, all in accordance with the provisions of Article 6.1.A of GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December (LOPDPGDD).
Compliance with various legal obligations, all in accordance with the provisions of Article 6.1.C of GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December (LOPDPGDD).
Meeting legitimate interests pursued by the data controller or by a third party, e.g. for security reasons, to improve our services and/or to manage requests or queries.
During the data collection process, and in each place on the website where personal data is requested, the user will be informed, whether by means of a hyperlink or by the inclusion of appropriate mentions on the form itself, of the mandatory nature or otherwise of the collection of their personal data.
The personal data requested in the forms on the website are, in general, mandatory (unless otherwise specified in the required field) in order to comply with the established purposes. Therefore, if the personal data requested is not provided, or is not provided correctly, the request cannot be fulfilled.
There is an obligation to provide your personal data when contracting a service or product, and/or when requesting quotes or offers.
The sending of advertising communications, newsletters or bulletins about our products and services is based on the consent that you are asked for, without the withdrawal of this consent affecting under any circumstances the contractual or commercial relationship that you have with us.
If you have authorised us to send advertising for our services and products, your personal data may be used to manage the sending of advertising offers and newsletters by electronic means. In these cases, the provisions of Art. 20 and 21 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce apply to the use and processing of your personal data for the purpose of sending advertising by electronic means.
If you have ticked the option to receive advertising, or if you have subscribed to our newsletter, you can cancel this option at any time.

With which recipients will your data be shared?

Recipients: In general, your personal data will not be shared with any third party outside the entity, unless there is a legal obligation to do so. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the data controller entity. You are informed that you can request a complete list of recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: hoteleden@hoteleden.com. In addition to the above, the entity may transfer or communicate personal data in order to fulfill its obligations to Public Administrations in cases where this is required, in accordance with current legislation. No international data transfers are foreseen. No adequacy decisions, guarantees, binding corporate rules or specific applicable situations are envisaged.

How do we transfer your data?

International data transfers: In order to carry out the data processing activities detailed above, we may transfer data to countries outside the European Economic Area (EEA), and store said data in physical or digital databases managed by entities acting on our behalf. Database management and the processing of data are limited to the purposes of the processing, and are carried out in accordance with applicable data protection laws and regulations. In the event that data is sent outside the EEA, the company will use appropriate contractual measures to ensure data protection, which may include, among others, contracts based on the standard data protection clauses adopted by the European Commission applicable to the sending of personal data outside the EEA.

What rights do you have regarding the processing of your personal data?

Rights: You have the right to obtain access to your personal data, as well as to request that any inaccurate data be rectified or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may request that the processing of your data be limited, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to your particular situation, you may oppose the processing of your data, in which case your personal information will no longer be processed for those purposes regarding which you have stated your opposition. Where technically possible, you may request the portability of your data to another data controller. To exercise these rights, in accordance with current legislation, you can send a letter by post, enclosing a copy of a document proving your identity (DNI), to GESTORA HOTELERA MALLORQUINA S.L. at PASSEIG ES TRAVES, Nº 26 07108 SOLLER or send an email to hoteleden@hoteleden.com. You have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

You expressly accept the inclusion of personal data collected while browsing the website and/or provided by filling in any form, as well as any resulting from a possible commercial relationship, in the automated personal data files of the entity.

The entity guarantees the confidentiality of users' personal data. However, the entity will disclose to the competent public authorities personal data and any other information in its possession or accessible through its systems that is required, in accordance with the legal and regulatory provisions applicable to the case. Personal data may be kept in files owned by GESTORA HOTELERA MALLORQUINA S.L. even after the commercial relationships formalised through the entity's website have ended, solely for the purposes indicated above and, in any case, for the legally established periods, at the disposal of administrative or judicial authorities.

Use of social media.

When you interact with our website through various social media, such as when you connect, follow us or share our content on social media (Facebook, Twitter, LinkedIn, Instagram or others), we may receive information from said social media, including profile information, user ID associated with your social media account, and any other public information that you allow to be shared with third parties on the social network.

The entity uses social media for the purpose of providing information about the services it offers, as well as any other activity or event carried out and wished to be publicised, but at no time will it obtain personal data from users interacting on them, unless there is express authorization.

This data is only used within the social network itself and is not incorporated into any processing system.

Social media platforms have their own terms of use and privacy policies that you are obliged to take into account and observe if you make use of them.

Below we provide you with information regarding the processing of your personal data carried out by GESTORA HOTELERA MALLORQUINA S.L.

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA OF CUSTOMER / RESERVATION

In accordance with the provisions of the General Data Protection Regulation GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, you are provided with the following information on how your personal data is processed: MANAGER: GESTORA HOTELERA MALLORQUINA S.L. Fiscal ID code: B07694649. Address: PASSEIG ES TRAVES, Nº 26 07108 SOLLER. Telephone: 971631600. Email: hoteleden@hoteleden.com. Data Protection Officer: CONTACT: http://www.protecmir.com / Email: protecmirlegal@protecmir.com PURPOSE: At GESTORA HOTELERA MALLORQUINA S.L. we process your personal data in order to provide you with the hotel accommodation service in our establishment, manage the sending of information and commercial research, and invoice the contracted services. In order to be able to offer you services in accordance with your interests, we will develop a commercial profile based on the information provided. No automated decisions will be made based on said profile. The personal data provided will be retained while the commercial relationship is maintained and its deletion is not requested, for a period of 5 years from the last contracting and/or reservation made. In any case, your personal data will be kept while useful for the indicated purpose, and, in any case, during the legal deadlines and for the time necessary to attend to possible liabilities arising from the processing. LEGAL BASIS: The processing of your personal data is based on the execution of a contract to which the data subject is party or for the application, at the request of the latter, of pre-contractual measures; furthermore, we must process your data to comply with a legal obligation applicable to the data controller. In any case, you have given your consent to process your personal data for one or more specific purposes, in accordance with the General Data Protection Regulation GDPR (EU) 679/2016 (Art. 6.1.A, B and C) and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDPGDD). Law 1/1992, amended by Organic Law 4/2015, of 30 March, on the Protection of Citizen Security, applies. Articles 20 and 21 of the Information Society Services Act 34/2002 also apply to the sending of commercial offers by telecommunications. The prospective offer of services is based on the consent requested from you, without the withdrawal of this consent conditioning the contract for acquisition and/or provision of service under any circumstances. There is an obligation to provide personal data; otherwise, hotel accommodation services cannot be provided and/or requested offers cannot be facilitated. The prospective offer of products and services is based on the consent requested from you, without the withdrawal of this consent conditioning the contract for product acquisition and/or provision of service under any circumstances. RECIPIENTS: Data will not be communicated to any third party outside the entity, unless legally obligated. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service to the data controller entity. You can request information regarding data processors by emailing: HOTELEDEN@HOTELEDEN.COM. Your personal data will be communicated to the Secretary of State for Security and its processing may only be carried out by Security Forces and/or competent authorities. No data transfers to third countries are foreseen. RIGHTS: Interested parties have the right to obtain access to their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to their particular situation, interested parties may oppose the processing of their data, in which case their personal information will cease to be processed for those purposes regarding which they have expressed opposition. When technically possible, the interested party may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may write by post, enclosing a copy of a document proving identity (DNI), to GESTORA HOTELERA MALLORQUINA S.L. at PASSEIG ES TRAVES, Nº 26 07108 SOLLER or email HOTELEDEN@HOTELEDEN.COM. You have the right to present a claim before the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA IN A PASSENGER REGISTRATION FORM.

In accordance with Regulation (EU) 679/2016, General Data Protection Regulation (GDPR), and Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPDPGDD), you are provided with the following information on the processing of your personal data: MANAGER: GESTORA HOTELERA MALLORQUINA S.L. Fiscal ID code: B07694649. Address: PASSEIG ES TRAVES, Nº 26 07108 SOLLER. Telephone: 971631600. Email: hoteleden@hoteleden.com. Data Protection Officer: CONTACT: http://www.protecmir.com / Email: protecmirlegal@protecmir.com. PURPOSE: At GESTORA HOTELERA MALLORQUINA S.L. we process the information provided to us in order to render the requested hotel accommodation service and comply with documentary registration and information obligations established by Royal Decree 933/2021, of 26 October, establishing documentary registration and information obligations for natural or legal persons carrying out accommodation and motor vehicle rental activities. No automated decisions will be made based on said profile. The data provided and processed in a digital register must be kept for a period of three years starting from the end of the contracted service or provision. In any case, your personal data will be kept as long as they are useful for the indicated purpose, and, in any case, during legal periods and for the time necessary to attend to possible liabilities arising from processing. LEGAL BASIS: The processing of your personal data is based on the execution of a contract to which the data subject is party or for the application, at their request, of pre-contractual measures. Furthermore, we must process your data to comply with a legal obligation applicable to the data controller in accordance with Regulation (EU) 679/2016 (art. 6.1. B and C) and LOPDPGDD. Law 1/1992, modified by Organic Law 4/2015, of 30 March, on citizen security protection, applies. Royal Decree 933/2021, of 26 October, also applies. Organic Law 7/2021, of 26 May, on the protection of personal data processed for purposes of prevention, detection, investigation and prosecution of criminal offences and execution of criminal sanctions, also applies. There is an obligation to provide personal data, or otherwise the hotel accommodation service cannot be provided. RECIPIENTS: Data will not be communicated to any third party outside the entity, unless legally obligated. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the data controller entity. You can request information regarding data processors by email: HOTELEDEN@HOTELEDEN.COM. Your personal data will be communicated to the Secretary of State for Security and its processing may only be carried out by Security Forces and/or competent authorities. No data transfers to third countries are foreseen. RIGHTS: Interested parties have the right to obtain access to their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request limitation of processing of their data, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to their particular situation, interested parties may oppose processing of their data, in which case personal information will cease to be processed for those purposes regarding which opposition was expressed. When technically possible, the interested party may request portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may write by post, enclosing a copy of a document proving identity (DNI), to: GESTORA HOTELERA MALLORQUINA S.L. at PASSEIG ES TRAVES, Nº 26 07108 SOLLER or email HOTELEDEN@HOTELEDEN.COM. You have the right to file a complaint before the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA IN SATISFACTION SURVEYS.

In accordance with Regulation (EU) 679/2016, General Data Protection Regulation (GDPR), and Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPDPGDD), you are provided with the following information on the processing of your personal data: MANAGER: GESTORA HOTELERA MALLORQUINA S.L. Fiscal ID code: B07694649. Address: PASSEIG ES TRAVES, Nº 26 07108 SOLLER. Telephone: 971631600. Email: hoteleden@hoteleden.com. Data Protection Officer: CONTACT: http://www.protecmir.com / Email: protecmirlegal@protecmir.com. PURPOSE: At GESTORA HOTELERA MALLORQUINA S.L. we process the information you provide us in order to know your degree of satisfaction regarding your stay at our establishment. In order to offer you products and services in accordance with your interests, we will elaborate a commercial profile based on the information provided. No automated decisions will be made based on said profile. The personal data provided will be kept while the commercial relationship is maintained and deletion is not requested by the interested party, for a period of 5 years from the last contracting and/or reservation made. In any case, your personal data will be kept while useful for the indicated purpose, and, in any case, during legal periods and for the time necessary to attend to possible liabilities arising from processing. LEGAL BASIS: The processing of your personal data is based on your consent for one or several specific purposes, in accordance with Regulation (EU) 679/2016 (art. 6.1. A) and LOPDPGDD. Law 34/2002, of 11 July, on information society services and electronic commerce, articles 20 and 21, applies for sending commercial offers through telecommunications. The prospective offer of services is based on the consent requested, without withdrawal of consent conditioning the contract for acquisition and/or provision of service under any circumstances. There is an obligation to provide consent to carry out prospective offers and send commercial information. RECIPIENTS: Data will not be communicated to any third party outside the entity, unless legally obligated. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the data controller entity. You can request information regarding data processors by email: HOTELEDEN@HOTELEDEN.COM. In addition to the above, the entity may make assignments or communications of personal data to meet its obligations to public administrations in cases required by law. No data transfers to third countries are foreseen. RIGHTS: Interested parties have the right to obtain access to their personal data, as well as to request rectification of inaccurate data or, where appropriate, request deletion when, among other reasons, data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request limitation of processing of their data, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to their particular situation, interested parties may oppose processing of their data, in which case personal information will cease to be processed for those purposes regarding which opposition was expressed. When technically possible, the interested party may request portability of data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may write by post, enclosing a copy of a document proving identity (DNI), to: GESTORA HOTELERA MALLORQUINA S.L at PASSEIG ES TRAVES, Nº 26 07108 SOLLER or email HOTELEDEN@HOTELEDEN.COM. You have the right to present a claim before the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA OF ACCOUNTING / INVOICING

In accordance with the provisions of the General Data Protection Regulation GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, you are provided with the following information on the processing of your personal data: MANAGER: GESTORA HOTELERA MALLORQUINA S.L. Fiscal ID code: B07694649. Address: PASSEIG ES TRAVES, Nº 26 07108 SOLLER. Telephone: 971631600. Email: hoteleden@hoteleden.com. Data Protection Officer: CONTACT: http://www.protecmir.com / Email: protecmirlegal@protecmir.com. PURPOSE: At GESTORA HOTELERA MALLORQUINA S.L. we process the information provided to us in order to prepare and issue invoices for contracted products and/or services and to comply with accounting and fiscal obligations. The personal data provided will be kept while the commercial relationship is maintained and its deletion is not requested, for a period of 5 years from the last contracting and/or purchase. In any case, your personal data will be kept while useful for the indicated purpose, and, in any case, during legal periods and for the time necessary to attend to possible liabilities arising from processing. LEGAL BASIS: The processing of your personal data is based on the execution of a contract to which the data subject is party or for application at their request of pre-contractual measures; furthermore, we must process your data to comply with a legal obligation applicable to the data controller, in accordance with General Data Protection Regulation GDPR (EU) 679/2016 (Art. 6.1. B and C) and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDPGDD). RECIPIENTS: Data will not be communicated to any third party outside the entity, unless legally obligated. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the data controller entity. You can request information regarding data processors by email: HOTELEDEN@HOTELEDEN.COM. In addition to the above, the Entity may perform assignments or communications of personal data to meet its obligations to Public Administrations in cases required by current legislation. No data transfers to third countries are foreseen. RIGHTS: Interested parties have the right to obtain access to their personal data, as well as to request rectification of inaccurate data or, where appropriate, request deletion when, among other reasons, data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request limitation of processing of their data, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to their particular situation, interested parties may oppose processing of their data, in which case personal information will cease to be processed for those purposes regarding which opposition was expressed. When technically possible, the interested party may request portability of data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may write by post, enclosing a copy of a document proving identity (DNI), to: GESTORA HOTELERA MALLORQUINA S.L at PASSEIG ES TRAVES, Nº 26 07108 SOLLER or email HOTELEDEN@HOTELEDEN.COM. You have the right to present a claim before the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA OF CURRICULUM VITAE

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA OF SUPPLIERS

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA OF WEBSITE USERS

In accordance with the provisions of the General Data Protection Regulation GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, you are provided with the following information on the processing of your personal data: MANAGER: GESTORA HOTELERA MALLORQUINA S.L. Fiscal ID code: B07694649. Address: PASSEIG ES TRAVES, Nº 26 07108 SOLLER. Telephone: 971631600. Email: hoteleden@hoteleden.com. Data Protection Officer: CONTACT: http://www.protecmir.com / Email: protecmirlegal@protecmir.com. PURPOSE: At GESTORA HOTELERA MALLORQUINA S.L. we process the information provided to us in order to provide the services and/or sell products contracted by you through our website, as well as managing the sending of information and commercial research. In order to offer services in accordance with your interests, we will elaborate a commercial profile based on the information provided. No automated decisions will be made based on said profile. The personal data provided will be kept while the commercial relationship is maintained and its deletion is not requested, for a period of 5 years from the last contracting and/or purchase made by you. In any case, your personal data will be kept while useful for the indicated purpose, and, in any case, during legal periods and for the time necessary to attend to possible liabilities arising from processing. LEGAL BASIS: The processing of your personal data is based on the execution of a contract to which the data subject is party or for application at their request of pre-contractual measures; in any case, you have given your consent to process your personal data for one or more specific purposes, in accordance with GDPR (EU) 679/2016 (ART. 6.1. A and B) and Organic Law 3/2018, of 5 December, (LOPDPGDD). Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, articles 20 and 21, applies to sending commercial offers through telecommunications. The prospective offer of products and services is based on requested consent, without withdrawal of consent conditioning the contract for product acquisition and/or service provision under any circumstances. There is an obligation to provide personal data; otherwise, services cannot be provided and/or products sold and/or requested offers provided and management of commercial information sending performed. RECIPIENTS: Data will not be communicated to any third party outside the entity, unless legally obligated. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the data controller entity. You can request information regarding data processors by email: HOTELEDEN@HOTELEDEN.COM. In addition to the above, the Entity may perform assignments or communications of personal data to meet its obligations to Public Administrations in cases required by current legislation. No data transfers to third countries are foreseen. RIGHTS: Interested parties have the right to obtain access to their personal data, as well as to request rectification of inaccurate data or, where appropriate, request deletion when, among other reasons, data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request limitation of processing of their data, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to their particular situation, interested parties may oppose processing of their data, in which case personal information will cease to be processed for those purposes regarding which opposition was expressed. When technically possible, the interested party may request portability of data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may write by post, enclosing a copy of a document proving identity (DNI), to: GESTORA HOTELERA MALLORQUINA S.L at PASSEIG ES TRAVES, Nº 26 07108 SOLLER or email HOTELEDEN@HOTELEDEN.COM. You have the right to present a claim before the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA OF VIDEO SURVEILLANCE

In accordance with the General Data Protection Regulation GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, you are provided with the following information on the processing of your personal data: MANAGER: GESTORA HOTELERA MALLORQUINA S.L. Fiscal ID code: B07694649. Address: PASSEIG ES TRAVES, Nº 26 07108 SOLLER. Telephone: 971631600. Email: hoteleden@hoteleden.com. Data Protection Officer: CONTACT: http://www.protecmir.com / Email: protecmirlegal@protecmir.com. PURPOSE: At GESTORA HOTELERA MALLORQUINA S.L. we process information captured through video surveillance cameras with the purpose of preserving the security of persons and property, as well as the security of facilities or establishment. In addition to controlling access to company or entity facilities and establishment. The personal data provided will be kept for a maximum period of 30 days from its recording. In any case, your personal data will be kept while useful for the indicated purpose, and, in any case, during legal periods and for the time necessary to attend to possible liabilities arising from processing. LEGAL BASIS: The processing of your personal data is based on the necessity to satisfy legitimate interests pursued by the data controller or by a third party in accordance with GDPR (EU) 679/2016 (Art. 6.1. F) and Organic Law 3/2018, of 5 December, (LOPDPGDD). Articles 22 and 89 of Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights apply. Article 20.3 of the Workers' Statute also applies. RECIPIENTS: Data will not be communicated to any third party outside the entity, unless legally obligated. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the data controller entity. You are informed that images may be processed by the data processor in accordance with article 28 of GDPR. In addition to the above, the entity may make assignments or communications of personal data to meet its obligations to Public Administrations in cases required by current legislation. No data transfers to third countries are foreseen. RIGHTS: Interested parties have the right to obtain access to their personal data, as well as to request rectification of inaccurate data or, where appropriate, request deletion when, among other reasons, data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request limitation of processing of their data, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to their particular situation, interested parties may oppose processing of their data, in which case personal information will cease to be processed for those purposes regarding which opposition was expressed. When technically possible, the interested party may request portability of data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may write by post, enclosing a copy of a document proving identity (DNI), to: GESTORA HOTELERA MALLORQUINA S.L at PASSEIG ES TRAVES, Nº 26 07108 SOLLER or email HOTELEDEN@HOTELEDEN.COM. You have the right to present a claim before the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA OF NEWSLETTER / MAILING

In accordance with the provisions of the General Data Protection Regulation GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, you are provided with the following information on the processing of your personal data: MANAGER: GESTORA HOTELERA MALLORQUINA S.L. Fiscal ID code: B07694649. Address: PASSEIG ES TRAVES, Nº 26 07108 SOLLER. Telephone: 971631600. Email: hoteleden@hoteleden.com. Data Protection Officer: CONTACT: http://www.protecmir.com / Email: protecmirlegal@protecmir.com. PURPOSE: At GESTORA HOTELERA MALLORQUINA S.L. we process the information provided to us in order to send you personalised offers on company products and/or services and manage the sending of information and commercial research. Furthermore, we process information of customers who have contracted our products and services in order to send them personalised offers on company products and/or services. In order to offer our products and services in accordance with your interests, we will elaborate a commercial profile based on the information provided. No automated decisions will be made based on said profile. The personal data provided will be kept for as long as your explicit consent is maintained and its deletion is not requested. In any case, your personal data will be kept while useful for the indicated purpose, and, in any case, during legal periods and for the time necessary to attend to possible liabilities arising from processing. LEGAL BASIS: The processing of your personal data is based on the execution of a contract to which the data subject is party or for application, at their request, of pre-contractual measures; in any case, you have given your consent to process your personal data for one or more specific purposes, in accordance with GDPR (EU) 679/2016 (ART. 6.1. A and B) and Organic Law 3/2018, of 5 December, (LOPDPGDD). Law 34/2002 on Information Society Services, articles 20 and 21, applies. The prospective offer of products and services is based on requested consent, without withdrawal of consent conditioning the contract for product acquisition and/or service provision under any circumstances. There is an obligation to provide personal data and consent to manage the sending of advertising information and commercial research. RECIPIENTS: Data will not be communicated to any third party outside the entity, unless legally obligated. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the data controller entity. You can request information regarding data processors by email: HOTELEDEN@HOTELEDEN.COM. In addition to the above, the Entity may perform assignments or communications of personal data to meet its obligations to Public Administrations in cases required by current legislation. No data transfers to third countries are foreseen. RIGHTS: Interested parties have the right to obtain access to their personal data, as well as to request rectification of inaccurate data or, where appropriate, request deletion when, among other reasons, data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request limitation of processing of their data, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to their particular situation, interested parties may oppose processing of their data, in which case personal information will cease to be processed for those purposes regarding which opposition was expressed. When technically possible, the interested party may request portability of data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may write by post, enclosing a copy of a document proving identity (DNI), to GESTORA HOTELERA MALLORQUINA S.L. at PASSEIG ES TRAVES, Nº 26 07108 SOLLER or email HOTELEDEN@HOTELEDEN.COM. You have the right to present a claim before the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

INFORMATION ON ART. 13 AND 14 OF THE G.D.P.R. RELATING TO THE PROCESSING OF PERSONAL DATA OF WIFI USERS

With the acceptance of the present privacy policies, the service user authorizes the processing of their personal data by GESTORA HOTELERA MALLORQUINA S.L. with the purpose of sending personalized offers of the services it provides. This acceptance of data treatment for advertising purposes includes authorization and sending of Newsletters and advertising by any communication means including email, SMS, social networks and Whatsapp.

In accordance with the provisions of the General Data Protection Regulation GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, you are provided with the following information on the processing of your personal data: MANAGER: GESTORA HOTELERA MALLORQUINA S.L. Fiscal ID code: B07694649. Address: PASSEIG ES TRAVES, Nº 26, 07108, SÓLLER, Telephone: 971631600. Email: hoteleden@hoteleden.com. Data Protection Officer: Contact: http://www.protecmir.com / Email: protecmirlegal@protecmir.com. PURPOSE: At GESTORA HOTELERA MALLORQUINA S.L we process the information provided to us in order to render the WIFI service and send you personalized offers of company services, and manage the sending of information and commercial research. In order to offer our services according to your interests, we will elaborate a commercial profile based on the information provided. Automated decisions will not be made based on said profile. The personal data provided will be kept for as long as your express consent is maintained and its deletion is not requested. In any case, your personal data will be kept while useful for the indicated purpose, and, in any case, during legal deadlines and for the time necessary to attend to possible liabilities arising from processing. LEGAL BASIS: The processing of your personal data is based on your consent for one or more specific purposes, in accordance with GDPR (EU) 679/2016 (Art. 6.1. A) and Organic Law 3/2018, of 5 December, (LOPDPGDD). General Telecommunications Law 9/2014, of 9 May, and Information Society Services Law 34/2002, articles 20 and 21, apply to sending commercial offers through telecommunications. The prospective offer of services is based on requested consent, without withdrawal of consent conditioning the contract for acquisition and/or provision of service under any circumstances. There is an obligation to provide personal data, or otherwise wifi service cannot be provided. There is an obligation to provide consent to perform prospective offers and send commercial information. RECIPIENTS: Data will not be communicated to any third party outside the Entity, unless legally obligated. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the Data Controller Entity. You can request information regarding data processors by email: HOTELEDEN@HOTELEDEN.COM. In addition to the above, the Entity may perform assignments or communications of personal data to meet its obligations to Public Administrations in cases required by legislation. No data transfers to third countries are foreseen. RIGHTS: Interested parties have the right to obtain access to their personal data, as well as to request rectification of inaccurate data or, where appropriate, request deletion when, among other reasons, data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request limitation of processing of their data, in which case we will only retain it for the exercise or defence of claims. Likewise, and for reasons related to their particular situation, interested parties may oppose processing of their data, in which case personal information will cease to be processed for those purposes regarding which opposition was expressed. When technically possible, the interested party may request portability of data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may write by post, enclosing a copy of a document proving identity (DNI), to GESTORA HOTELERA MALLORQUINA S.L. at PASSEIG ES TRAVES, Nº 26, 07108, SÓLLER or email hoteleden@hoteleden.com. You have the right to present a claim before the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the data subject.

Data security.

We have appropriate technical and organisational security measures in place to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage, ensuring their integrity and confidentiality. The technical and organisational security measures implemented allow: guaranteeing the permanent confidentiality, integrity, availability and resilience of processing systems and services; restoring availability and access to personal data promptly in the event of a physical or technical incident; and regularly verifying, evaluating and assessing the effectiveness of technical and organisational measures implemented to ensure processing security.

These technical and organisational security measures have been designed taking into account our IT infrastructure, the state of the art in accordance with current standards and practices, implementation costs, and the nature, scope, context and purposes of processing, as well as risks of varying probability and severity entailed by processing for your personal data.