Our objective is to be as transparent as possible with our users and clients regarding the personal data we collect. Your privacy is important to us.
By reading this Privacy Policy, the user is informed about how GESTIÓ LLÚRIA collects, processes, and protects personal data provided through the website - www.casallimonahotel.com (hereinafter, the website) and any other data that may be provided to GESTIÓ LLÚRIA in the future through other means.
The User should read this Privacy Policy carefully, which has been written clearly and simply to facilitate understanding, and determine freely and voluntarily whether to provide personal data to GESTIÓ LLÚRIA.
By filling out any form on the corporate website and clicking on the "I have read the privacy policy" or similar checkbox, the user expressly states that they have read this privacy policy, which indicates the data processing performed and the purposes, among other information, thus fulfilling the duty to inform imposed by Data Protection regulations.
In cases where consent is requested on the corporate website for a specific purpose, by clicking on the "I accept" or similar checkbox, or checking the selection box, the user gives unequivocal and explicit consent for the data processing in question.
Who is responsible for processing your data?
- Identity: GESTIÓ LLÚRIA, S.L. - CIF: B67580050
- Address: Calle de Roger de Llúria, 42 Principal. -08009 BARCELONA
- Phone numbers: 93 595 80 95 – 671 08 27 40
- Email: hola@casallimonahotel.com
Data processing collected through the WEBSITE
For what purpose do we process your personal data?
At GESTIÓ LLÚRIA, we process the information provided by interested persons to attend to their requests and, if applicable, to send them information about our products or services, as well as our newsletters.
No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be retained as long as the interested party does not request its deletion or as long as the commercial relationship lasts, always respecting the limitation periods of responsibilities.
What is the legal basis for processing your data?
Consent of the interested party (by checking the selection box): To attend to your request and, if applicable, to send you commercial communications and our newsletters.
To which recipients will your data be communicated?
No data will be transferred to third parties, except under legal obligation.
Will data be transferred to third countries?
No data transfers to third countries are planned.
How have we obtained your data?
The personal data we process at GESTIÓ LLÚRIA comes from the interested party.
Data processing for PERSONNEL SELECTION
For what purpose do we process your personal data?
At GESTIÓ LLÚRIA, we process the information provided by interested persons to carry out personnel selection processes.
No automated decisions will be made based on the provided data.
How long will we keep your data?
They will be retained for two years unless the interested party withdraws their consent before the maximum retention period.
What is the legal basis for processing your data?
Consent of the interested party: To participate in personnel selection processes.
To which recipients will your data be communicated?
No data will be transferred to third parties, except under legal obligation.
Will data be transferred to third countries?
No data transfers to third countries are planned.
How have we obtained your data?
The personal data we process at GESTIÓ LLÚRIA comes from the interested party or their legal representative.
The categories of data processed are:
- Identifying data
- Postal and electronic addresses
- Professional and academic data
No special categories of personal data are processed (these are data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data aimed at uniquely identifying a physical person, data concerning health, or data concerning a physical person's sex life or sexual orientation).
Image USE Processing
For what purpose do we process your personal data?
At GESTIÓ LLÚRIA, we process the data obtained (image and, where applicable, voice) to publish these images on websites or social networks, as well as other dissemination supports such as magazines, publications, etc., to carry out advertising or dissemination actions for our activities.
No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be retained from when the user gives their consent until they withdraw such consent.
What is the legal basis for processing your data?
Explicit consent of the interested party: Use of photographs and, where applicable, videos where the image of interested parties appears.
It is also informed that by giving consent, the images may be published on the company's website, social networks, and any support that the company deems appropriate to publicize its activities, events, and services.
To which recipients will your data be communicated?
They will be published on the company's website and/or social networks or other media.
Will data be transferred to third countries?
The use of images on social networks may involve international data transfers.
Customer data processing
For what purpose do we process your personal data?
At GESTIÓ LLÚRIA, we process the information provided by interested persons primarily to provide the requested services, as well as to carry out the administrative, accounting, and tax management derived from these services or product sales, and, where applicable, to send commercial communications about our products and services.
No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be retained as long as the interested party does not request its deletion, and if applicable, for the years necessary to comply with legal obligations.
What is the legal basis for processing your data?
- Execution of a contract: To provide the requested services
- Legal obligation: To carry out the administrative, accounting, and tax management of the requested services
- Legitimate interest of the controller: To send commercial communications about our products and services
To which recipients will your data be communicated?
The data will be communicated to the following recipients:
- Tax Agency, to comply with legal obligations (legal requirement).
- Financial entities, to issue the corresponding receipts, if applicable (contractual requirement).
Will data be transferred to third countries?
No data transfers to third countries are planned.
How have we obtained your data?
The personal data we process at GESTIÓ LLÚRIA comes from the interested party or their legal representative.
The categories of data processed are:
- Identifying data
- Postal and electronic addresses
- Commercial information
- Banking information, if applicable
Advertising data processing
For what purpose do we process your personal data?
At GESTIÓ LLÚRIA, we process the information provided by interested persons to manage the sending of commercial communications about our products and/or services through electronic means (email, WhatsApp, SMS...).
No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be retained from when the user gives their consent until they withdraw such consent.
What is the legal basis for processing your data?
Consent of the interested party (by signing the consent document, checking or ticking the selection box, or any other valid means of obtaining it): To send commercial communications.
To which recipients will your data be communicated?
Advertising sending platforms through electronic means, to ensure sending with guarantees and obtain statistical data.
Will data be transferred to third countries?
No data transfers to third countries are planned.
How have we obtained your data?
The personal data we process at GESTIÓ LLÚRIA comes from the interested party.
The categories of data processed are:
- Identifying data and postal and electronic addresses
- Commercial information
No special categories of personal data are processed (these are data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data aimed at uniquely identifying a physical person, data concerning health, or data concerning a physical person's sex life or sexual orientation).
Video surveillance data processing
Basic information on Data Protection
- Controller: GESTIÓ LLÚRIA
- Purpose: Ensuring the security of people, property, and facilities
- Legal basis: Public interest mission
- Recipients: Data may be transferred to State Security Forces and Bodies, as well as Courts and Tribunals, if applicable
- Rights: You have the right to access, rectify, and delete the data, as well as other rights, indicated in the additional information, which you can exercise by contacting the controller
Complete information on Data Protection
For what purpose do we process your personal data?
At GESTIÓ LLÚRIA, we process the images captured by cameras to ensure the security of people, property, and facilities.
No automated decisions will be made based on the provided data.
How long will we keep your data?
The data will be retained for a maximum of 30 days, unless communicated to Security Forces and Bodies, and/or Courts and Tribunals.
What is the legal basis for processing your data?
Public interest mission: Ensuring the security of people, property, and facilities.
To which recipients will your data be communicated?
If applicable, to the State Security Forces and Bodies, as well as Courts and Tribunals, to provide the images if a crime or offense has been committed.
Will data be transferred to third countries?
No data transfers to third countries are planned.
What category of personal data do we process?
Image.
Rights of the Data Subject
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation about whether GESTIÓ LLÚRIA is processing personal data that concerns them or not.
Interested persons have the right to access (Art. 15 GDPR) their personal data, as well as to request the rectification (Art. 16 GDPR) of inaccurate data or, where applicable, request its deletion (Art. 17 GDPR) when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, the interested parties may request the limitation (Art. 18 GDPR) of the processing of their data, in which case we will only retain them for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, the interested parties may object (Art. 21 GDPR) to the processing of their data. In this case, GESTIÓ LLÚRIA will stop processing the data, except for legitimate compelling reasons or the exercise or defense of possible claims.
You will also have the right to request the portability (Art. 20 GDPR) of your personal data. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, to be able to transmit it to another entity directly, whenever technically possible.
If you have given your consent for a specific purpose, you have the right to withdraw the consent (Art. 7 GDPR) at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
You can exercise your rights by contacting the controller in person, by mail, or by email to the controller's email address, sending the instance/request. Forms for the exercise/request of rights can be found on the Spanish Data Protection Agency's website:
https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/queSede.jsf
Obligation to provide data
The data requested in the forms accessible from the GESTIÓ LLÚRIA Website and, in general, those requested by the company for service provision/product sale are generally mandatory (unless otherwise specified in the required field) to meet the established purposes. Therefore, if they are not provided or not provided accurately, requests may not be properly addressed.
If the interested party provides third-party data, they declare having the consent of these and commit to informing the data owner of the information contained in this Privacy Policy, exempting GESTIÓ LLÚRIA from any responsibility in this regard.
Security measures
Personal data will be processed lawfully, fairly, and transparently concerning the data subject ("lawfulness, fairness, and transparency"); collected for specified, explicit, and legitimate purposes, and not further processed in a manner that is incompatible with those purposes; adequate, relevant, and limited to what is necessary concerning the purposes for which they are processed; kept in a form that permits the identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (respecting the limitation periods of responsibilities); processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures ("integrity and confidentiality").
We follow strict criteria for selecting service providers with access to personal data, all to comply with their data protection obligations, as well as formalize with them the corresponding processing assignment contract (Art. 28 GDPR), by which they will be imposed, among others, the following obligations: apply appropriate technical and organizational measures; process the data following our instructions; and delete or return the data once the services are completed.