Holder: INVERSIONES PASCUAL S.L. (hereinafter, “Hotels VIVA”).
CIF (Código de Identificación Fiscal [Tax Identification Code]): B07461767
Registered Office: Agustín Argüelles, No. 1, 07400 Alcudia
Registration information: Registered in the Mallorca Commercial Registry, in volume 1,134, Folio 170, Page PM-7.
Who is the data controller for your data?
The data controller for the data collected via the Website and the reservations platform is INVERSIONES PASCUAL, S.L., head office at Agustín Argüelles, nº1, 07400 Alcudia.
You may contact our Data Protection Officer at email@example.com
What personal data do we collect?
The data we process are the following:
From the forms you fill out and the requests you make on the Website, for example when you register, when you give us your feedback on your experience with us in quality surveys, when you register for our newsletters, or book a stay. We also process the data included in the questions and requests we receive by email or at our service centre.
From profiles and analytics obtained from the users browsing the Website, whether they are registered or not.
The data we obtain are either directly provided by you, or by third parties that forward requests on your behalf, for example the reservation holder.
The categories of data we process typically consist of:
Identification and contact details, ID or passport number;
Data on personal characteristics, such as language, gender, date of birth and nationality;
Financial and transaction data;
Data on your reservation and contact history with HOTELS VIVA;
Data on the social networks with which you register. We only access the data you have configured as public, for example, likes, comments, images…
What will we process your data for?
The data of the Website’s users will be processed by HOTELS VIVA for managing its relationship with them, responding to their questions and requests, the administration and management of the Website’s security, and for fulfilling its legal obligations.
Such data will also be processed for the internal administrative purposes of the HOTELS VIVA group, statistics, and quality assessment. This includes the analysis of aggregate reservation data sent via the website, and opinion surveys, though filling them out is not mandatory.
If you register with our newsletter, your data will be processed by HOTELS VIVA in order to send to you marketing information on the group.
The data supplied during the reservation process will be processed by INVERSIONES PASCUAL, S.L. for the handling of and commercial follow-up to your requests, the provision of the requested services, the administration and management of the Reservation Platform and the fulfilment of legal obligations. Said data will also be processed for statistical purposes and for quality improvement.
To whom can we disclose your data?
Your data will only be disclosed to third parties because of legal obligations, or with your consent, or when your request entails such disclosure. For example:
For the proper management of reservations, the data supplied will necessarily be disclosed to the destination hotels, or to the companies whose services are included in a booked service. This includes the disclosure to said hotels of the details of the credit card you have supplied for the reservation, in order to meet any potential penalties for cancellations or no-shows set in the terms of the rate. The management of your reservations necessarily entails the aforementioned processing; therefore, the process cannot be completed if you object to such processing.
Lawful basis for processing
The basis for the processing of your data is the management of the legal relationship with you, the provision of requested or booked services, and the fulfilment of legal obligations, in particular of the applicable regulations on accounting, taxation, and tourism.
The security management of the Website and the Reservations Platform is based on the existence of a legitimate interest. The analysis of the consolidated data of customers, the gathering of statistics and performance of quality control, the commercial follow-up to your requests are based on our legitimate interest in internal administrative purposes, as well as in evaluating and promoting our services.
The drawing up of commercial profiles, the customisation of services and the sending of customised marketing offers and information are based on the consent that you are asked for, and any withdrawal of such consent cannot affect the provision of the booked services.
How long will we store your data for?
Generally speaking, we store your data throughout your relationship with us and, in any case, for the timeframes set forth in the applicable legal provisions, for example regarding accounting and tax matters, and for the time necessary to comply with any obligations arising out of the processing. We will delete your data when they are no longer necessary or relevant for the purposes for which they were collected.
The access logs to restricted areas of the website will be deleted within a month of their creation. The information related to browsing will be deleted once the connection to the website is over and statistics are gathered.
Data processed for marketing purposes, including marketing profiles, will be stored until you request their deletion. The files and documents proving your consent to data processing for these purposes, for example, the logs of electronic forms, will be stored throughout the duration of the processing and for the applicable legal timeframes.
What are your rights?
You have the right to obtain confirmation as to whether we are processing your data or not and, if so, to access them. You may also ask for your data to be rectified when they are inaccurate, or that they be completed when they are incomplete, as well as asking for their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were gathered.
In certain circumstances, you may ask for the processing of your data to be restricted. In such a case, we will only process the data in order to lodge, exercise or defend claims, or in order to protect the rights of other persons. In certain circumstances, and for reasons connected to your specific situation, you may also object to the processing of your data. In such a case, we will stop processing your data, except for compelling legitimate reasons that prevail over your interests, rights and freedoms, or in order to lodge, exercise or defend claims. Likewise, under certain circumstances, you may request the portability of your data, so they may be sent to another data controller.
You may withdraw the consent you may have given for specific purposes, without this affecting the lawfulness of the processing based on the consent you gave before it was withdrawn, and make a complaint to the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
To ask that the processing of your data for marketing purposes be stopped, you can send an email to the following address: firstname.lastname@example.org
To exercise your rights, you will need to send the relevant data controller a request along with a copy of your national identity document, or other current document identifying you, by mail or email to the addresses indicated in the section Who is the data controller for your data?
You can obtain more information on your rights and on how to exercise them on the website of the Spanish Data Protection Agency at http://www.agpd.es.