Basic Information on Data Protection

Controller HOTEL BRASIL

Purpose Provision of online services – Commercial communications related to our services

Web user management

Lawful basis Express consent and legitimate interest

Recipients Data is not disclosed to third parties, except as required by legal obligation

Rights Access, rectify and erase data, as well as other rights, as explained in the additional information

At HOTEL BRASIL, we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe we should be transparent about it.

Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and LAW 34/2002, of 11 July, on Services of the Information Society and Electronic Commerce (hereinafter, “LSSI”), HOTEL BRASIL informs the user that, as the controller, it will incorporate the personal data provided by users into an automated file.

Our commitment starts with explaining the following to you:

• Your data is collected to improve the user experience, taking into account your interests and needs.
• We are transparent about the data we obtain about you and the reason why we do so.
• Our intention is to offer you the best possible experience. Therefore, when we are going to use your personal information, we will always do so in compliance with the regulations, and when necessary, we will request your consent.
• We understand that your data belongs to you. Therefore, if you decide not to authorise us to process it, you can ask us to stop processing it.
• Our priority is to guarantee your security and process your data in accordance with European regulations.

If you wish to obtain more information about the processing of your data, consult the different sections of the privacy policy below:

Who is the controller of your personal data?

Identity: HOTEL BRASIL

Registered office: CL Apolo XI, 27; 03501 Benidorm

C.I.F. no:B54532650

Email: calidad@alamedahotels.es

HOTEL BRASIL has designated a Data Protection Officer or an internal contact person within its organisation. If you wish to make an enquiry regarding the processing of your personal data, you can contact them by email at calidad@alamedahotels.es

What personal data do we collect?

The personal data that the user may provide:

• Name, address, and date of birth.
• Telephone number and email address.
• Location.
• Information related to payments and refunds.
• IP address, date and time you accessed our services, internet browser you use, and data about the device's operating system.
• Any other information or data you decide to share with us.

In some cases, completing the registration form is mandatory to access and enjoy certain services offered on the website; likewise, not providing the requested personal data or not accepting this data protection policy makes it impossible to subscribe, register, or participate in any of the promotions where personal data is requested.

Why and for what purpose do we process your data?

At HOTEL BRASIL, we process the information provided to us by interested parties for the following purposes:

• Manage orders or contract any of our services, either online or in physical stores.
• Manage the sending of information requested from us.
• Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and information tasks, being able to perform automatic assessments, obtaining profiles, and client segmentation tasks in order to personalise the service according to their characteristics and needs and improve the client's online experience.
• Develop and manage contests, sweepstakes, or other promotional activities that may be organised.

In some cases, it will be necessary to provide information to Authorities or third-party companies for audit reasons, as well as to handle personal data from invoices, contracts, and documents to respond to claims from customers or Public Administrations.

We inform you that the personal data obtained as a result of your registration as a user will form part of the Register of Processing Activities and Operations (RAT), which will be updated periodically in accordance with the provisions of the GDPR.

What is the lawful basis for the processing of your data?

The processing of your data may be based on the following legal bases:

• Consent of the data subject for contracting services and products, for contact forms, information requests, or subscription to e-newsletters.
• Legitimate interest for processing our customers' data in direct marketing actions and express consent of the data subject for everything related to automatic assessments and profiling.
• Compliance with legal obligations for fraud prevention, communication with public Authorities, and third-party claims.

How long do we keep your data?

The processing of the data for the described purposes will be maintained for the time necessary to fulfil the purpose of its collection (for example, for the duration of the commercial relationship), as well as for the fulfilment of the legal obligations arising from the data processing.

To which recipients is your data disclosed?

In some cases, only when necessary, HOTEL BRASIL will provide user data to third parties. However, data will never be sold to third parties. External service providers (for example, payment providers or delivery companies) with whom HOTEL BRASIL works may use the data to provide the corresponding services, however, they will not use this information for their own purposes or for disclosure to third parties.

HOTEL BRASIL seeks to guarantee the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have adequate measures to protect personal data. These third parties are obliged to ensure that the information is processed in accordance with data privacy regulations.

In some cases, the law may require the disclosure of personal data to public bodies or other parties; only what is strictly necessary to comply with these legal obligations will be disclosed.

The personal data obtained may also be shared with other companies in the group.

Where is your data stored?

In general, data is stored within the EU. For data sent to third parties outside the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCR) or because they have adhered to the "Privacy Shield".

What rights do you have and how can you exercise them?

You can direct your communications and exercise your rights by making a request to the following email address: calidad@alamedahotels.es.

Pursuant to the provisions of the GDPR you can request:

• Right of access: you can ask for information about the personal data we hold about you.
• Right to rectification: you can communicate any change to your personal data.
• Right to erasure and the right to be forgotten: you can request the deletion, after blocking, of the personal data.
• Right to restriction of processing: this involves restricting the processing of personal data.
• Right to object: you can withdraw consent for the processing of data, objecting to it being further processed.
• Right to data portability: in some cases, you can ask for a copy of the personal data in a structured, commonly used, and machine-readable format for transmission to another controller.
• Right not to be subject to individualised decisions: you can request that decisions not be taken based solely on automated processing, including profiling, which produces legal effects or significantly affects the data subject.

In some cases, the request may be rejected if you request the deletion of data necessary for the fulfilment of legal obligations.

Likewise, if you have any complaint about the processing of the data, you can submit a claim to the data protection authority.

Who is responsible for the accuracy and truthfulness of the data provided?

The user is solely responsible for the truthfulness and correctness of the data included, exempting HOTEL BRASIL from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the registration or subscription form. HOTEL BRASIL reserves the right to terminate the contracted services that have been concluded with the users, in the event that the data provided is false, incomplete, inaccurate, or not updated.

HOTEL BRASIL is not responsible for the truthfulness of information that is not of its own creation and for which another source is indicated, nor does it assume any responsibility regarding possible damages that may arise from the use of such information.

HOTEL BRASIL reserves the right to update, modify, or delete the information contained on its web pages, and may even limit or deny access to this information. HOTEL BRASIL is exempt from liability for any damage or harm that the user may suffer as a result of errors, defects, or omissions in the information provided by HOTEL BRASIL, provided that it comes from external sources.

Likewise, the user certifies that they are over 14 years of age and have the necessary legal capacity to give consent regarding the processing of their personal data.

How do we process the personal data of minors?

In principle, our services are not specifically aimed at minors. However, in the event that any of them are aimed at minors under fourteen years of age, in accordance with article 8 of the GDPR and article 7 of LO3/2018, of December 5 (LOPDGDD), HOTEL BRASIL will require the valid, free, unequivocal, specific, and informed consent of their legal guardians to process the personal data of minors. In this case, the ID card or other form of identification of the person giving consent will be required.

In the case of those over fourteen years of age, data processing may proceed with the user's consent, except in those cases where the Law requires the assistance of those holding parental authority or guardianship.

What security measures do we apply to protect your personal data?

HOTEL BRASIL has adopted the legally required levels of security for the protection of Personal Data, and seeks to install those other additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorised access, and theft of the Personal Data provided to HOTEL BRASIL.

HOTEL BRASIL is not responsible for possible damages or harms that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns, or disconnections in the operational functioning of this electronic system, caused by reasons beyond HOTEL BRASIL; for delays or blockages in the use of the present electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Center, in the Internet system, or in other electronic systems, as well as damages that may be caused by third parties through illegitimate intrusions beyond the control of HOTEL BRASIL. Notwithstanding the foregoing, the user must be aware that security measures on the Internet are not impregnable.

Links to other websites

On the website https://www.hotelbrasilbenidorm.com there may be links to other web pages. By clicking on one of these links and accessing an EXTERNAL website, the visit will be subject to the privacy policy of that website, and HOTEL BRASIL will be disassociated from any type of responsibility regarding its privacy policy.

The hotel's Social Media: https://www.facebook.com/hotelbrasilbenidorm/ https://www.instagram.com/hotelbrasilbenidorm/ are governed by this Privacy Policy.

How do we use cookies?

The website and social media of HOTEL BRASIL use cookies, for the purposes of optimising and personalising your navigation through them. Cookies are physical information files that are stored on the user's own terminal, and the information collected through cookies serves to facilitate the user's navigation through the portal and optimise the browsing experience. The data collected through cookies may be shared with the creators of the same, but in no case will the information obtained by them be associated with personal data or data that can identify the user.

However, if the user does not wish cookies to be installed on their hard drive, they have the possibility to configure the browser in such a way as to prevent the installation of these files. For more information, consult our Cookies Policy https://www.hotelbrasilbenidorm.com/politica-de-cookies/

Can the privacy policy be modified?

This privacy policy may be modified. We recommend that you review the privacy policy periodically.