Legal Notice

Data Controller: HOSTAL SES NEGRES S.L.

Purpose of Data Processing: Commercial and administrative management of services, reservations, or requested information.

Legal Basis for Processing: Consent of the individual to provide data. Hotel-client contractual relationship.

Recipients: The data you provide will be added to our database and will not be disclosed to third parties.

Rights: Access, rectify, and delete your data, as well as other rights provided by current regulations.

You can exercise your rights via the following link: Exercise Your Rights

For more information, please consult our Privacy Policy and Cookie Policy.

Claims to the Data Protection Authority: You can submit claims related to the processing of your personal data to the Spanish Data Protection Agency (www.agpd.es).

Right to Erasure of Data:

The individual has the right to request the deletion of their data by the Controller when:

• The processing is unlawful.
• The individual has withdrawn their consent.
• The data is no longer necessary for the purposes for which it was collected or processed.
• The individual has exercised the right to object, and no other legitimate grounds for processing prevail.
• The data must be deleted to comply with a legal obligation of the Controller.

The individual does not have the right to request deletion when processing is necessary:

• To exercise the right to freedom of expression and information.
• To comply with a legal obligation of the Controller.
• For the establishment, exercise, or defense of legal claims.
• For public interest based on current legislation for public health reasons or for historical, statistical, or scientific research purposes.

Right to Data Portability:

The individual has the right to have their data transferred by the Controller to another data controller or directly to themselves in a commonly used and machine-readable format when processing is automated and based on:

• The individual’s consent for specific purposes.
• The performance of a contract or pre-contract with the individual.

The right to data portability does not apply when:

• The transfer is technically impossible.
• It may negatively impact the rights and freedoms of others.
• The processing is for a public interest mission based on current legislation.

Right to Restriction of Processing

The individual has the right to oppose processing of their data by the Controller for reasons related to their particular situation when processing is based on:

• Direct marketing.
• Profiling.
• Legitimate interest of the Controller or third parties, provided that the individual’s interests, rights, or freedoms are not overridden, particularly if the individual is a child.
• Historical, statistical, or scientific research unless processing is necessary for public interest reasons.

Even if the individual objects to data processing, the Controller may continue to process the data if the Controller’s legitimate interest outweighs the individual’s interests, rights, or freedoms in a justified judicial procedure.

The Controller must inform the individual of the right to object to data processing explicitly, clearly, and separately from other information at the time of the first communication.

Right to Object

This right allows the individual to object to data processing or request that processing cease when their consent is not required for processing due to a legitimate and justified reason related to their specific personal situation, provided that the law does not state otherwise.

Right Not to Be Subject to Profiling

The individual has the right not to be subject to profiling aimed at making individual decisions based on automated data processing to evaluate, analyze, or predict the following personal aspects:

• Professional performance.
• Economic situation.
• Personal preferences or interests.
• Location or movements of the person.

When profiling is based solely on automated processing:

• The individual has the right to be informed if any decision may produce legal effects or significantly affect them.
• The individual has the right to obtain human intervention from the Controller, express their point of view, and challenge the decision if processing is authorized by:
• A contract between the Controller and the individual.
• The explicit consent of the individual.

The right not to be subject to profiling does not apply when the decision that may result is authorized by:

• The explicit consent of the individual.
• A contract between the Controller and the individual.
• Processing based on current legislation.