Privacy Policy This legal text provides details on how we collect and process your personal data through the use of our website http://www.hotelcortijobravo, including any information you may provide us through the site when you contract our services, provide your data through the enabled form for this purpose, or register for our newsletter. By providing us with your data, we inform you that our services are not possible for individuals who are legally prohibited from giving consent. Therefore, when you submit forms to us, you guarantee that you have sufficient capacity to grant consent. Below, we inform you about the data protection policy of: Inspira Hoteles, S.L (a subsidiary of Grupo B Bou, as can be consulted in Annex I of the Legal Notice), hereinafter Grupo B Bou. 1. Data Controller. Contact details of the controller: Grupo B Bou, with its registered office at: Ctra. Vélez- Benamocarra Km 1,5, 29700 Vélez Málaga Málaga and telephone: 951550048. Email: privacidad@bbouhotels.com Grupo B Bou is responsible for your data. (Hereinafter referred to as "we" or "our"). 2. What data do we collect? The General Data Protection Regulation defines personal data as any information relating to an identified or identifiable natural person, i.e., any information capable of identifying a person. This would not include anonymous or percentage data. Personal data that may be collected directly from the data subject will be treated confidentially and will be incorporated into the corresponding processing activities, owned by Grupo B Bou. On our Website, we may process certain types of personal data, which may include: Identity data: name, surnames, and national identity document (DNI). Personal characteristics data: curriculum vitae. Contact data: email, telephone, and address. Profile data: password. Marketing and communication data: preferences for receiving marketing communications from us and preferred means of communication. We do not collect any data relating to special categories of personal data (those that reveal your ethnic or racial origin, political opinions, religious or philosophical convictions, trade union membership, and information about your health, genetic or biometric data). In the event that you are requested to provide personal data by law or under the terms of a contract between us, and you refuse to provide it, we may not be able to enter into that contract or provide the service, and you must inform us in advance. 3. How do we collect your personal data? The means we use to collect personal data are: Through the form on our website, through our contact email, by telephone, or by postal mail, when: You request information about our products or services. You contract our services. You subscribe to any of our services or publications. You make comments. To ensure the quality of our portal, we reserve the right to refuse any registration request or to suspend or cancel a previously accepted registration if we understand that it does not comply with these requirements or any other law or regulation. If this occurs, we will attempt to explain the reasons for our decision, but we cannot commit to doing so in all cases. Through technology or automated interactions: on our site, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. This data is collected through cookies or similar technologies. If you would like more information, you can consult our cookie policy here (link). Through third parties: Google: analytics data or search data. Outside the European Union. 4. Purpose and lawfulness of the use of your data. The most common uses of your personal data are: For the formalization of a contract between Grupo B Bou and you. When you give your consent for the processing of your data. When we need it to comply with a legal or regulatory obligation. When it is necessary for our legitimate interest or that of a third party. The User may withdraw their consent at any time by sending an email to info@hotelcortijobravo.com or by consulting the exercise of rights section below. Below, we attach a table where you can find the ways we will use your personal data and the lawfulness of its use, as well as the type of personal data we will process. We may process some personal data for an additional legal reason, so if you need details regarding this, you can send an email to info@hotelcortijobravo.com. Form Purpose Data Type Lawfulness for Processing Contact The purpose is the management of contacts and requests for information received via the web. Name Email Telephone Consent of the data subject (Art. 6.1.a GDPR) Pre-contractual measures (Art. 6.1.b GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1.f GDPR) Newsletter The purpose is the management of data provided for sending information about our services and promotions. Email Consent of the data subject (Art. 6.1.a GDPR) Pre-contractual measures (Art. 6.1.b GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1.f GDPR) Work with us Personnel selection and job placement. Name Surnames Email Telephone Curriculum vitae Address Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6.1.b GDPR). Processing is necessary for compliance with a legal obligation to which the controller is subject (Art. 6.1.c GDPR). Royal Legislative Decree 2/2015, of October 23, approving the consolidated text of the Law on the Workers' Statute. My Reservations The purpose is the management of reservations. Email Consent of the data subject (Art. 6.1.a GDPR) Processing is necessary for compliance with a legal obligation to which the controller is subject (Art. 6.1.c GDPR). Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6.1.b GDPR). Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1.f GDPR). Book your table Management of data provided for booking a table. Name Surnames Telephone Email Consent of the data subject (Art. 6.1.a GDPR) Pre-contractual measures (Art. 6.1.b GDPR) Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1.f GDPR). Reservation and Registration Reservation Management Name Surnames NIF/NIE Email Telephone Password Address Consent of the data subject (Art. 6.1.a GDPR) Processing is necessary for compliance with a legal obligation to which the controller is subject (Art. 6.1.c GDPR). Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6.1.b GDPR). Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1.f GDPR). I am already part of the club Management of contact details provided to make a reservation as a club member. Email Password Name Surnames NIF/NIE Address Consent of the data subject (Art. 6.1.a GDPR) Processing is necessary for compliance with a legal obligation to which the controller is subject (Art. 6.1.c GDPR). Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6.1.b GDPR). Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1.f GDPR). Comments Management of contact details for making a comment on the website. Name Surnames Email Telephone Consent of the data subject (Art. 6.1.a GDPR) Commercial communications: you will only receive communications if: You requested information from us or contracted a product or service from us. You provided us with your data, accepting the checkbox enabled for this purpose in our form. Provided you have not expressed your wish to stop receiving such communications. We obtain your express consent before sending you any communication, and you may request at any time that we stop sending you communications by emailing info@hotelcortijobravo.com. When you choose to stop receiving our communications, your personal data will continue to be stored as a result of the contract you entered into, in order to comply with legal requirements. Purpose: we will only use your data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason, notifying you in advance so that you are informed of the legal basis for its processing, and provided that the purpose is compatible with the original purpose. 5. How long will we keep your data? Your data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine any potential liabilities that may arise from that purpose and the processing of the data. The provisions of different regulations regarding the retention period will apply where relevant to this processing. Data of subscribers via email or form: From the time the user subscribes until they unsubscribe. 6. Minors. Grupo B Bou does not authorize individuals under the age of 14 to provide their personal data through the means provided on this website (filling out web forms for service requests, contact, or by sending emails). Therefore, individuals who provide personal data using these means formally declare that they are over 14 years of age, and Grupo B Bou is exempt from any liability for non-compliance with this requirement. If your child under the age of 14 has provided personal information to Grupo B Bou, please contact us so that we can process the exercise of their applicable rights. In cases where the services offered by Grupo B Bou are intended for individuals under the age of 14, the means will be provided to obtain the authorization of the parents or legal guardians of the minor. 7. Exercise of Data Protection Rights: How to exercise these rights? Users may send a communication to the registered office of Grupo B Bou or to the email address info@hotelcortijobravo.com, including in both cases a photocopy of their D.N.I or other similar identification document, to request the exercise of the following rights: Access to your personal data: you may ask Grupo B Bou if they are using your personal data. To request its rectification, if it is incorrect, or to exercise the right to be forgotten with respect to it. To request the restriction of processing; in this case, your data will only be stored by Grupo B Bou for the exercise or defense of claims. To object to its processing: Grupo B Bou will cease to process the data in the manner you indicate, unless for legitimate reasons or for the exercise or defense of possible claims, it must continue to be processed. To data portability: if you wish for your data to be processed by another company, Grupo B Bou will facilitate the portability of your data to the new controller. You may use the templates made available by the Spanish Data Protection Agency to exercise your aforementioned rights: Here. Complain to the AEPD: if you believe there is an issue with how Grupo B Bou is processing your data, you may direct your complaints to the corresponding supervisory authority, which in Spain is the competent authority for this: the Spanish Data Protection Agency. We will ask you for specific information to help us confirm your identity and guarantee your right to access your personal data (or to exercise any of the other rights mentioned above). This is a security measure to ensure that personal data is not disclosed to any person who does not have the right to receive it. We will resolve all requests within the legally stipulated period of one month. However, it may take us longer than one month if your request is particularly complex. In this case, we will notify you and keep you updated. 8. Communication of data: provision of services. It is possible that, in the performance of our work, we may need the assistance of third parties, who will only process the data to provide the contracted service, and with whom we have the appropriate measures in place to guarantee your rights: Service providers who provide system administration and information technology services. Professional advisors, including lawyers, auditors, and insurers, who provide banking, legal, insurance, and accounting consulting services. All data processors to whom we transfer your data will respect the security of your personal data and will process it in accordance with the GDPR. We only allow such processors to process your data for specific purposes and in accordance with our instructions. However, you may request that we provide a list of the companies that provide us with services, in compliance with transparency. You can do this by emailing: info@hotelcortijobravo.com. 9. Data Security. We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized manner, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know such data. They will only process your personal data according to our instructions and will be subject to a duty of confidentiality. We have implemented procedures to deal with any suspected breach of your personal data and will notify you and the Supervisory Authority in the event of a security breach, as regulated in Articles 33 and 34 of the GDPR.