Privacy Policy

PRIVACY POLICY

In compliance with the obligations established in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, you are provided with the information relating to the processing of your personal data:

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

MARIA ANGELES ORTIZ PEREZ. Tax ID: 12740128Z
Address: LOIS, S/N 33794, FIGUERAS‑CASTROPOL.
Phone: 676700778
Email: casapeleyon@gmail.com
Website: www.casapeleyon.com

You may contact us in any way.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it regularly, and if you have registered and access your account or profile, you will be informed of any changes.

If you belong to any of the following groups, see the dropdown information:

  • GUESTS

For what purposes will we process your personal data?
We inform you that your data will be processed for the purpose of managing your reservation, your stay at the hotel, and ensuring payment of expenses arising from said stay.

Your data will be disclosed to the Security Forces and Corps in compliance with current legislation, as well as to travel agencies or operators involved.

The data will be kept for at least 6 years in compliance with tax, commercial, consumer, and guest‑register legislation.

What is the legal basis for processing your data?
The legal basis is your consent.

  • WEB OR EMAIL CONTACTS

What data do we collect through the Web?
We may process your IP, which operating system or browser you use, and even the duration of your visit, in anonymized form.
If you provide data in the contact form, you will identify yourself so that we can contact you if necessary.

For what purposes will we process your personal data?

  • Respond to your inquiries, requests, or petitions.

  • Manage the requested service, respond to your request, or process your petition.

  • Send information electronically related to your request.

  • Send commercial or event information electronically, provided you have given express authorization.

  • Conduct analysis and improvements on the Web, regarding our products and services. Improve our commercial strategy.

What is the legal basis for processing your data?
The acceptance and consent of the data subject: In cases where submitting the form is required to make a request and clicking the "submit" button implies that you have been informed and have expressly given your consent to the privacy policy clause attached to the form or have accepted the privacy policy.
All our forms display an asterisk (*) for mandatory fields. If you do not provide those fields or do not check the privacy policy acceptance box, the form submission will not be allowed. Typically, it reads: “□ I am over 14 and have read and accept the Privacy Policy.”

  • SUPPLIERS

For what purposes will we process your personal data?

  • Send information electronically related to your request.

  • Send commercial or event information electronically, provided you have given express authorization.

  • Manage administrative, communications, and logistics services provided by the Data Controller.

  • Billing.

  • Process the corresponding transactions.

  • Control and collection procedures.

What is the legal basis for processing your data?
The legal basis is the acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products in any way.

  • SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?

How long will your personal data be retained?
We can only view or delete your data if you have a specific profile. We will process them for as long as you allow us to follow you, be friends with you, or you press “like,” “follow,” or similar buttons.
Any data correction, restriction of information, or publication changes must be made via your own profile or user settings on the social network in question.

What is the legal basis for processing your data?
The acceptance of a contractual relationship in the context of the corresponding social network, and in accordance with its Privacy Policy.

  • JOB APPLICANTS

For what purposes will we process your personal data?

  • Organize recruitment processes for hiring employees.

  • Schedule interviews and evaluate your application.

  • If you have given us your consent, we may transfer your application to collaborating or related companies, solely with the aim of helping you find employment.
    By checking the acceptance box on the privacy policy, you give us your

  • consent to share your job application with entities within our group of companies to include you in their selection processes.
    We also inform you that one year after receiving your resume, we will proceed with its secure destruction.

What is the legal basis for processing your data?
The legal basis is your unequivocal consent when sending your CV.

Do we include third‑party personal data?
As a general rule, we only process the data provided by the holders themselves. If you provide third‑party data, you must, beforehand, inform and obtain their consent, or otherwise you release us from any liability for failure to comply with this requirement.

And data of minors?
We do not process data of minors under 14 years of age. Therefore, please refrain from providing it if you are under that age or, where applicable, from providing data of third parties who are under that age. MARIA ANGELES ORTIZ PEREZ disclaims any liability for failure to comply with this provision.

Will we make electronic communications?

  • They will only be made to manage your request, if that is one of the means of contact you provided.

  • Any commercial communications will have been previously and expressly authorized by you.

What security measures do we apply?
Rest assured: We have adopted a high level of protection for the Personal Data we handle, and have implemented all technical means and measures at our disposal according to current technology to prevent loss, misuse, alteration, unauthorized access, and theft of Personal Data.

To which recipients will your data be disclosed?
Your data will not be shared with third parties, except as required by law. Specifically, they will be disclosed to the State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product acquired, as well as to data processors necessary for the execution of the agreement.
In cases of purchase or payment, if you choose an app, website, platform, bank card, or other online service, your data will be shared with that platform or processed within its environment, always with maximum security.
When ordered, access to our website will be granted to the web development and maintenance company or the hosting provider. They will have a service agreement in place that obliges them to maintain the same level of privacy as ours.

What rights do you have?

  • To know whether your data is being processed.

  • To access your personal data.

  • To request correction of your data if inaccurate.

  • To request deletion of your data if no longer necessary for the purposes for which they were collected or if you withdraw consent.

  • To request restriction of processing in certain cases; we will then only retain data as permitted by applicable law.

  • To data portability, which we will provide in a structured, commonly used, machine-readable format. If you prefer, we can forward it to the new data controller you designate. Applicable only in certain cases.

  • To lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority if you believe we have not dealt with you properly.

  • To withdraw your consent to any processing for which you have previously given consent, at any time.
    If you update any data, we appreciate your notifying us so we can keep them up to date.

Would you like a form to exercise your rights?

  • We have forms for exercising your rights—request by email—or you may use the forms provided by the Spanish Data Protection Agency or third parties.

  • These forms must be electronically signed or accompanied by a photocopy of your ID.

  • If someone represents you, you must provide us with a copy of their ID, or they must sign with their electronic signature.

  • Forms can be submitted in person, by mail, or by email to the Data Controller’s address provided at the beginning of this document.

How long will we take to respond to your Rights Request?
It depends on the right, but at most one month from your request, and two months if the request is complex and you are notified that we need more time.

Do we process cookies?
If we use any cookies beyond those strictly necessary, you can consult the cookies policy via the corresponding link from the start of our website.

How long will your personal data be retained?

  • Personal data will be retained while you remain associated with us.

  • Once you disconnect, personal data processed for each purpose will be retained for the legally required periods, including any that a court or tribunal may require in line with the statute of limitations for judicial actions.

  • The processed data will be retained as long as legal deadlines mentioned above have not expired, if there is a legal retention obligation, or, otherwise, until you request deletion or withdraw your consent.

  • We will retain all information and communications related to your purchase or service provision while the product or service warranties last, to address any possible claims.