Privacy Policy

1. WEBSITE OWNER AND DATA CONTROLLER

In compliance with Article 10 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, and in accordance with Regulation (EU) 2016/679 and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights, the following is stated:

Who is responsible for processing your data?

You may contact us at any of the addresses provided above.

1. PERSONAL DATA PROTECTION

2.1. DATA PROTECTION RIGHTS

User Rights:

  • Right of Access: The right to access personal data and to inquire if Hoteles Awe is processing your data.
  • Right to Rectification: The right to rectify your data if it is incorrect.
  • Right to Object: The right to object to data processing; Hoteles Awe will cease processing the data as per your instructions, unless legitimate reasons require continued processing.
  • Right to Restriction of Processing: The right to restrict the processing of your data while the controller determines whether to comply with other requests.
  • Right to Data Portability: The right to receive personal data concerning you that you have provided to Hoteles Awe in a structured, commonly used, and machine-readable format, and to request its transmission to another controller where technically feasible.

How to exercise these rights: Interested parties may exercise their rights by sending a written communication to the fiscal address of Hoteles Awe or to the email address: privacy@hotelesawe.com, including a photocopy of their ID or official documentation proving their identity.

Right to withdraw consent: If you have given consent for a specific purpose, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Supervisory Authority: If a user believes there is a problem with how Hoteles Awe is handling their data, they can file a complaint with the Spanish Data Protection Agency.

2.2. DATA RETENTION

Data retention will vary depending on the service provided or contracted:

  • 4 years: Law on Social Order Infringements and Sanctions (obligations related to affiliation, registrations, deregistrations, contributions, salary payments, etc.); Articles 66 et seq. of the General Tax Law (accounting books, etc.).
  • 5 years: Article 1964 of the Civil Code (personal actions without a special term).
  • 6 years: Article 30 of the Commercial Code (accounting books, invoices, etc.).
  • 10 years: Article 25 of the Law on the Prevention of Money Laundering and Terrorism Financing.
  • Data on social media profiles: Until the user withdraws their consent.

2.3. PURPOSES AND LEGITIMACY

Depending on the type of data processing, we summarize below the legal basis for such processing:

  • Accounting and tax management: Management of invoicing, tax obligations, bonuses, etc., of the company’s customers and/or suppliers. Maintenance, development, and control of the contractual relationship between the parties. Compliance with legal obligations.

  • Administrative management: Management of shipments, deliveries, etc. Maintenance, development, and control of the contractual relationship between the parties.

  • Marketing: Commercial actions regarding our products or services directed at our customers or those who have requested information in the past, including conducting satisfaction surveys with our customers. Free and unequivocal consent of the data subject (potential customers); Legitimate interest of the company in promoting and marketing products or services similar to those obtained or requested by interested parties in the past.

  • Management of collaborators: Maintenance, development, and control of the contractual relationship between the parties.

  • Claims management (customer service): Consent of the data subject.

  • Operations in campaigns via electronic means with potential customers: Consent of the data subject.

  • Data protection rights management: Consent of the data subject.

  • Debt collection by third parties from suppliers: Legal obligation.

  • Management of relationships with web contacts/users through the website: Free and unequivocal consent of the data subject.

  • Processing of resumes and job offers: The candidate authorizes PALACETE COLONIAL to process the documents submitted, all content directly accessible through Internet search engines, profiles maintained on professional social networks, data obtained in evaluation tests, and information provided during the job interview, with the aim of assessing the application.

  • Newsletters and bulletins: Sending advertising related to our products and services by electronic means. Consent of the data subject.

2.4 DATA PROCESSORS OUTSIDE THE EU

No data transfers outside the EU are planned.

2.5 CONFIDENTIALITY AND DOCUMENT DESTRUCTION

Professional secrecy: Hoteles Awe and the collaborators working with us who are involved in the services provided to the client are committed to not disclosing or using the information they have accessed due to their profession. The information provided by the client will always be considered confidential and will not be used for purposes other than those related to the services contracted with Hoteles Awe.

Hoteles Awe undertakes not to disclose or reveal information about the client’s objectives, the reasons for the requested advice, or the duration of their relationship with the client.

Document destruction: To preserve and guarantee confidentiality, Hoteles Awe commits to destroying all confidential information accessed during the provision of services once it is no longer necessary for the purpose for which it was collected unless there is a legal obligation to retain it. If the client wishes to retain the original or a copy of such information, they must print it or save it by their own means or visit the Hoteles Awe headquarters to collect it before its destruction.