CLAUSE DE CONFIDENTIALITÉ

LAST MODIFICATION: 21/10/2018

The Privacy Policy forms part of the General Conditions that govern the Web Page www.hotelmama.es together with the Policy of Cookies and the Legal Warning.

HOTEL MAMA S.L.U. reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Web Page. In the event that a user has registered on the website and accesses their account or profile, when accessing it, you will be informed in the event that there have been substantial changes in relation to the processing of their personal data.

Who is responsible for the processing of your data?

The data collected or voluntarily provided by means of the Web Page, whether by browsing the same, as well as all those that you can provide in the contact forms, via email or telephone, will be collected and processed by the File Manager, whose data are indicated below:

HOTEL MAMA S.L.U. CIF: B57992174

Address: C/San Miguel 53, 07002 Palma de Mallorca, Illes Balears

Tel: 871 037 437

Contact DPD: info@hotelmama.es

Inscribed in the Mercantile Registry of _ __________, Volume ______, Folio ___, Sheet ________, insc. ___

If, for any reason, you wish to contact us in any matter relating to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

What data do we collect through the website?

For the simple fact of navigating the Web Page, HOTEL MAMA S.L.U. will collect information referring to:

- IP address.

- Browser version.

- Operating system.

- Duration of the visit or navigation through the Website.

Such information is stored by Google Analytics, so we refer to the Privacy Policy of Google, as it collects and treats such information. http://www.google.com/intl/en/policies/privacy/

In the same way, the Web Page provides the utility of Google Maps, which may have access to your location, if you allow it, in order to provide a greater specificity on the distance and / or roads our headquarters. In this regard, we refer to the Privacy Policy used by Google Maps, in order to know the use and processing of such data http://www.google.com/intl/en/policies/privacy/

The information that we handle will not be related to a specific user and will be stored in our databases for the purpose of statistical analysis, improvements in the Website, on our products and / or services and help us improve our business strategy. The data will not be communicated to third parties.

User registration on the website/ Submission of forms

In order to access certain products and/or services, such as reservations / contact requests, the user must fill in a form. In order to do this, a series of personal data is requested in the registration form. The data are necessary and obligatory to carry out such a registration. If you do not provide these fields, the registration will not be carried out.

In this case, the navigation data will be associated with the user's registration data, identifying the same specific user who navigates the Web Page. In this way, it will be possible to personalize the offer of products and/or services that, in our opinion, best suits the user.

The registration data of each user will be incorporated into the databases of HOTEL MAMA S.L.U., together with the history of operations carried out by the same, and will be stored in the same until the account of the registered user is deleted. Once this account has been deleted, this information will be removed from our databases, keeping apart for 10 years those data relating to the transactions made, without accessing or altering them, in order to comply with the deadlines legally in force. The data that are not linked to the transactions carried out will be maintained unless the consent is withdrawn, in which case they will be deleted immediately (always taking into account the legal deadlines).

The legal basis for the processing of your personal data is the execution of a contract between the parties.

In relation to the sending of communications and promotions by electronic means and the response to requests for information, the legitimacy of the processing is the consent of the data subject.

The purposes of the processing will be the following:

a) Manage your access to the Web Page.

b) Manage the purchase of products and / or services made available to you through the Website.

c) Keep you informed of the processing and status of their requests, purchases and / or reservations.

d) Respond to your request for information.

e) Manage all utilities and / or services offered by the platform to the user.

Thus, we inform you that you may receive communications via email and / or your phone, in order to inform him of possible incidents, errors, problems and / or status of your requests.

In order to send commercial communications, the user's express consent will be requested at the time of registration. In this respect, the user may revoke the consent given by contacting HOTEL MAMA S.L.U., using the means indicated above. In any case, in each commercial communication, you will be given the opportunity to unsubscribe from receiving them, either through a link and / or email address.

If you are one of the following groups, consult the drop-down information:

AGENTS

For what purposes are we going to treat your personal data?

Keep track of your activity.

Carry out the corresponding transactions.

Invoicing and declaration of the opportune taxes.

Management of control and recovery.

What is the legitimacy for the treatment of your data?

The legal basis is contractual origin, the acceptance of an agency contract.

CONTACTS OF THE WEB OR OF THE ELECTRONIC MAIL

For what purposes are we going to treat your personal data?

To answer your queries, requests or requests.

Manage the service requested, answer your request, or process your request.

Information by electronic means, which deal with your request.

Commercial information or events by electronic means, provided there is express authorization.

What is the legitimacy for the treatment of your data?

Acceptance and consent of the interested party: In those cases where in order to make a request it is necessary to fill in a form and make a "click" on the send button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.

All our forms have a checkbox with the following formula to send the information: "□ I have read and accept the Privacy Policy.

CUSTOMERS

For what purposes are we going to treat your personal data?

Elaboration of the budget and follow-up of the same one by means of communications between both parts.

Information by electronic means, which deal with your request.

Commercial information or events by electronic means, provided there is express authorization.

Manage the administrative services, communications and logistics performed by the Responsible.

Carry out the corresponding transactions.

Invoicing and declaration of the opportune taxes.

Management of control and recovery.

What is the legitimacy for the treatment of your data?

The legal basis is your consent and the execution of a contract.

SUPPLIERS + SUPPLIERS.

For what purposes are we going to treat your personal data?

Information by electronic means, which relate to your request.

Commercial information or events by electronic means, provided there is express authorization.

Manage the administrative services, communications and logistics performed by the Responsible.

Invoicing.

Carry out the corresponding transactions.

Invoicing and declaration of the opportune taxes.

Management of control and recovery.

What is the legitimacy for the treatment of your data?

The legal basis is the acceptance of a contractual relationship, or failing that your consent to contact us or offer their products by any means.

CONTACTS SOCIAL NETWORKS

For what purposes are we going to treat your personal data?

To answer your queries, requests or requests.

Manage the service requested, answer your request, or process your request.

Connect with you and create a community of followers.

What is the legitimacy for the treatment of your data?

Acceptance of a contractual relationship in the environment of the corresponding social network, and in accordance with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

How long are we going to keep the personal data?

We can only consult or cancel your data in a restricted way by having a specific profile. We will treat them as long as you let us follow you, being friends or giving them to "like", "follow" or similar buttons.

Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.

VIDEO SURVEILLANCE

For what purposes are we going to treat your personal data?

Video surveillance of our facilities.

Control of our employees.

 

Sometimes they can be assigned to the courts and tribunals for the exercise of legitimate actions.

What is the legitimacy for the treatment of your data?

The unequivocal consent of the interested party when accessing our facilities after viewing the informative poster of the video-surveillance area.

JOB SEEKERS

For what purposes are we going to treat your personal data?

Organization of selection processes for hiring employees.

Appointing you for job interviews and evaluating your candidacy.

If you have given us your consent, we will be able to transfer it to collaborating or related entities, with the sole aim of helping you find a job.

What is the legitimacy for the treatment of your data?

The legal basis is your unequivocal consent, when you give us your CV and receive and sign information regarding the treatments that we are going to carry out.

How long will we keep the personal data?

The CV will be stored for a period of one year, after which, if we have not contacted you, it will be deleted.

HUMAN RESOURCES

For what purposes are we going to treat your personal data?

Management of the labour relationship and the worker's file.

To carry out all the administrative, fiscal and accounting procedures necessary to comply with our contractual commitments, obligations in terms of labour regulations, Social Security, prevention of occupational risks, fiscal and accounting.

Payroll payment management through a financial institution.

Hourly control through the access control system by means of fingerprint/card (if applicable).

Management of the entity's collective insurance/pension plan.

Carrying out training actions for both subsidised and non-subsidised training.

What is the legitimacy for the treatment of your data?

The legal basis for the processing of your data is the execution of your employment contract. Compliance with the relevant legal obligations. The consent of the data subject.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Do we include personal data of third parties?

No, as a general rule we only process the data provided by the owners. If you provide us with the data of third parties, you must first inform and request their consent from these people, or else you exempt us from any liability for failure to comply with this requirement.

What about data on minors?

We do not process data on children under 14 years of age, therefore, refrain from providing them if you are not that age.

Will we carry out communications by electronic means?

They will only be made to process your request, if it is one of the means of contact that you have provided us.

If we make commercial communications will have been previously and expressly authorized by you.

What security measures do we apply?

You can rest assured: We have adopted an optimum level of protection for the Personal Data that we handle, and we have installed all the technical means and measures at our disposal, according to the state of technology, to prevent the loss, misuse, alteration, unauthorized access and theft of Personal Data.

To what extent will decision-making be automated?

HOTEL MAMA S.L.U. does not use fully automated decision-making processes to establish, develop or terminate a contractual relationship with the user. If we use these processes in a particular case, we will keep you informed and inform you of your rights in this regard if required by law.

Will profiling take place?

In order to be able to offer you products and/or services in accordance with your interests and to improve your user experience, we may create a "business profile" based on the information provided. However, no automated decisions will be made based on that profile.

To which addressees will your data be communicated?

To the companies that make up the HOTEL MAMA S.L.U. group.

Your data will not be transferred to third parties, except for legal obligations. Specifically, they will be communicated to the State Agency of the Tax Administration and to banks and financial institutions for the collection of the service rendered or product acquired, as well as to those in charge of the processing necessary for the execution of the agreement.

In the case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security.

In the event that you have given us your consent for the processing of your name and images and other information related to the activity of HOTEL MAMA S.L.U., will be disclosed in the various social networks and website of HOTEL MAMA S.L.U.

International transfers.

If it is necessary for HOTEL MAMA S.L.U. to carry out international data transfers, these will only be carried out to entities under the authorisation of the USA-European Union Privacy Shield Agreement (more information: https://www.privacyshield.gov/welcome), to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements laid down in current legislation on data protection, such as the European Regulation, or when there is a legal authorisation to carry out the international transfer.

What rights do you have?

To know if we are treating your data or not.

To access your personal data.

To request the rectification of your data if they are inaccurate.

To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.

To request the limitation of the treatment of their data, in some cases, in which case we will only keep them in accordance with current legislation.

To carry your data, which will be provided in a structured format, common use or mechanical reading. If you prefer, we can send them to the new person in charge that you designate to us. It is only valid in certain cases.

To file a complaint with the Spanish Data Protection Agency, if you believe that we have not dealt with you correctly.

To revoke consent for any treatment for which you have consented, at any time.

If you modify any data, please let us know so that we can keep them updated.

Do you want a form for the exercise of rights?

We have forms for the exercise of your rights, ask us by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be signed electronically or be accompanied by a photocopy of the DNI.

If someone represents you, you must attach a copy of your DNI, or have them sign it with their electronic signature.

The forms can be presented in person, sent by letter or by mail to the address of the person in charge at the beginning of this text.

You have the right to file a complaint with the Spanish Data Protection Agency in the event that you consider that the request for your rights has not been properly dealt with.

The maximum term to resolve by HOTEL MAMA S.L.U., is one month, counting from the effective reception of your request by us.

You have the right to revoke at any time the consent for any of the treatments for which you have given it.

Do we treat cookies?

If we use other types of cookies that are not necessary, you can consult the cookie policy in the corresponding link from the beginning of our website.

How long will we keep your personal data?

The personal data will be maintained as long as you remain linked to us.

Once you disassociate yourself, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal actions.

The data processed will be kept as long as the legal periods referred to above do not expire, if there is a legal obligation to maintain, or if there is no such legal period, until the interested party requests its deletion or revokes the consent granted.

We will maintain all the information and communications relating to your purchase or the provision of our service, while the guarantees of the products or services last, to attend to possible claims.