PRIVACY POLICY

The objective of this policy is to inform interested parties about the different treatments carried out by this organization through the website and that affect their personal data in accordance with the provisions of Organic Law 3/2018, of December 5, on Protection of Personal Data and guarantee of digital rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.

IDENTIFICATION AND CONTACT DETAILS OF THE RESPONSIBLE.
RMD ALCAIDESA 2018 SL , domiciled at AVDA. DE ARAGÓN, 402, 28022, MADRID, with NIF B-88065354, and email protecciondedatos@esteponaresort.com

DATA PROTECTION OFFICER
SEGURIDAD Y PRIVACIDAD DE DATOS SL, with address at AVDA. CORTES VALENCIANAS, EDIFICIO GÉMINIS CENETER, Nº 39, 13º, C y D, 46015, VALENCIA, contact telephone: 963 122 868 and email: infodpo@forlopd.es

• PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA.
• USERS / BROWSERS OF THE RESPONSIBLE'S WEB PAGE.

We will process your personal data provided through our web forms to:
• Respond to requests, complaints and incidents transferred through our contact channels incorporated into the website.
• Understand the behavior of the navigator within the web in order to detect possible computer attacks on our web.
• Comply with the legal obligations that are directly applicable to us and regulate our activity.
• To protect and exercise our rights or respond to claims of any kind.
• Where appropriate, sending commercial communications related to the goods or services that make up our activity (offers, promotions, events), and / or news related to our sector through ordinary mail, e-mail, SMS or fax.

CUSTOMERS.
We will process your personal data provided through our web forms to:

• The management of the requested reservations.
• Business relationship management.
• The provision of the services that you have contracted with us.
• Administrative, accounting and tax management.
• The preparation of internal statistics to improve our services.
• Where appropriate, sending commercial communications relating to the goods or services that make up our activity (offers, events, congratulations), and / or news related to our sector by ordinary mail, e-mail, SMS or fax.
• Understand the behavior of the navigator within the web in order to detect possible computer attacks on our web.
• Comply with the legal obligations that are directly applicable to us and regulate our activity.
• To protect and exercise our rights or respond to claims of any kind.

LEGAL BASIS OF THE TREATMENT.
• USERS / BROWSERS ON THE RESPONSIBLE'S WEB PAGE.
• In the consent given to process your data for the purposes indicated. The refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• To comply with the legal obligations that apply to us. In this case, the interested party may not refuse the processing of personal data.
• In our legitimate interest to protect our image, business and trajectory by avoiding attacks on our website. In this case, the interested party may not refuse the processing of personal data, although they may exercise, where appropriate, the rights recognized in the eighth section of this policy.

• CLIENTS.
• Execution of a contract in which he is a party or application of pre-contractual means. The refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• In the consent given to process your data for purposes unrelated to the development or execution of the existing contract. The refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• To comply with the legal obligations that apply to us. In this case, the interested party may not refuse the processing of personal data.
• In our legitimate interest to protect our image, business and trajectory by avoiding attacks on our website. In this case, the interested party may not refuse the processing of personal data, although they may exercise, where appropriate, the rights recognized in the eighth section of this policy.

DEADLINES OR CRITERIA FOR CONSERVATION OF THE DATA.

The personal data provided will be kept for the time necessary to fulfill the purposes for which they were initially collected.

Once the data is no longer necessary for the treatment in question, they will be kept duly blocked so that, where appropriate, they will be made available to the competent Public Administrations and Bodies, Judges and Courts or the Public Prosecutor's Office, during the limitation period. of the actions that could derive from the relationship maintained with the client and / or the legally established retention periods.

Data blocking period:
• THE CIVIL CODE. Between 5 or 15 years depending on the case, according to the provisions of article 1964.2 of the aforementioned legal body.
• THE COMMERCE CODE. For 6 years, according to the provisions of article 30 of the aforementioned legal body. It applies with respect to commercial information related to (invoices issued and received, tickets, corrective invoices, bank documents, etc.).
• THE GENERAL TAX LAW. For 4 years following the provisions of articles 66 to 70 of the aforementioned legal body. It applies to information related to tax obligations.
• AUTOMATED DECISIONS AND PROFILE DRAFTING.
The website does not make automated decisions or create profiles.

• RECIPIENTS.
During the period of duration of the processing of your personal data, the organization may transfer your data to the following recipients:
• Judges and Courts.
• State Security Forces and Bodies.
• Other competent public authorities or bodies, when the person in charge has a legal obligation to provide personal data.
• Banks and Financial Entities, in the event that you hire us.
• Paraty Hoteles SL, only when there is your express consent, in order to keep you informed of news, products and services related to the company.

INTERNATIONAL TRANSFERS OF DATA.
The organization does not carry out any International Data Transfer.

RIGHTS.
Interested parties may exercise their rights of access, rectification and deletion at any time and completely free of charge, as well as request that the processing of their personal data be limited, oppose it, request the portability of these (whenever technically possible) or withdraw the consent given, and where appropriate, where appropriate, not to be the subject of a decision based solely on automated processing, including profiling.
To do this, you can use the forms provided by the organization, or send a letter to the postal address or email indicated above. In any case, your request must be accompanied by a photocopy of your ID or equivalent document, in order to prove your identity.
In the event that you feel your rights are violated with regard to the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you can file a claim with the competent Data Protection Control Authority (Agency Spanish Data Protection), through its website: www.agpd.es.
In compliance with the provisions of article 21 of Law 34/2002 on services of the information society and electronic commerce, if you do not wish to receive more information about our services, you can unsubscribe by sending an email to the address protecciondedatos @ esteponaresort.com, with the subject "LEAVES" or by clicking on the email section * to unsubscribe *.

VERACITY OF THE DATA.
The interested party guarantees that the data provided is true, accurate, complete and up-to-date; agreeing to inform of any change regarding the data that you provide, through the channels enabled for this purpose and indicated in point one of this policy. The interested party will respond, in any case, to the veracity of the data provided, RMD ALCAIDESA 2018 SL reserving the right to exclude from the registered services any user who has provided false data, without prejudice to other actions that may be applicable in Law. Likewise, the user must be duly authorized to provide data from third parties. Only with the consent of future hotel guests can the user provide the hotel with such data. Such information, which will allow RMD ALCAIDESA 2018 SL to provide a better service to its guests is optional, therefore, its consignment by the user, implies, under their sole responsibility, the assumption of the duty to inform those of the content of our Policy of Privacy prior to the offering of personal information.

SOCIAL NETWORKS
Social Networks are part of the daily life of many Internet users and, for this, RMD ALCAIDESA 2018 SL has created different profiles in some of them. All users who visit our website have the opportunity to join our social networks or groups.
However, you must bear in mind that, unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid way), your data will belong to the corresponding Social Network, so we recommend you that you carefully read their conditions of use and privacy policies, as well as, make sure to configure your preferences regarding the treatment of data.

MODIFICATIONS / UPDATE
This privacy policy may be modified / updated depending on the established legal requirements or in order to adapt said policy to the instructions issued by the Spanish Agency for Data Protection or changes to our website.
For this reason, we advise users to periodically visit our privacy policy.
If you have any questions about this policy, you can contact RMD ALCAIDESA 2018 SL through the following email: protecciondedatos@esteponaresort.com Last revision: JULY 2020

In case of contracting the TRAVEL INSURANCE Rate:

If you have contracted our services, you are accepting that we transfer your personal data to the entity FLEXMYROOM INSURETECH, S.L. located in Benidorm (03503-Alicante), Calle Gerona, 13, Local CA 18, and with CIF (Tax Identification Code) number B42687616, with the sole purpose that you can benefit from the insurances that this entity offers. This entity will cancel your personal data when the service has ended and the legally established deadlines have been met. You can exercise your rights of access to data, rectification or deletion of data, limitation of the use of data, opposition to the use of data and portability of data at the email address: datos@flexmyroom.com