Privacy Policy

This privacy policy informs you about how we process the personal data you provide or will provide while browsing, should you continue to browse. It also includes our data protection policy, where expressly referenced.

1. DATA CONTROLLER

The Data Controller and owner of the domain www.hotellabarracuda.com (hereinafter, the Website), is Comunidad de Propietarios La Barracuda, with registered office at Avda. de España, 1, 29620-Torremolinos (Málaga-Spain) with Tax Identification Number H29068103

Contact information:

• Telephone: (+34) 952 385 400
• Email: info@hotellabarracuda.com

2. PURPOSE OF THE PROCESSING AND LEGAL BASIS

The data you provide us is used for the following purposes:

• To manage reservations and maintain the existing contractual and commercial relationship. The legal basis for this is the fulfillment of a contract.

• To send you the requested information and answer any questions you submit through the contact section available on the website. The legal basis for this processing is the consent you have given.

• To respond to your inquiries regarding the exercise of the rights described below. The legal basis for processing your data is our compliance with legal obligations. In fulfilling these obligations, we may disclose your data to public authorities and courts, provided that such information is required in accordance with established legal processes.

• By submitting your resume, you authorize us to analyze the data and documents contained therein. These will be kept for a maximum of one year, unless you indicate otherwise. The legal basis for this processing is the consent you have given.

• If you expressly authorize us to do so, we may send you information related to our activities through any electronic means, including newsletters. This information will be kept until you request its deletion. The legal basis for this processing is the consent you have given.

• Through this Website, you can access, via links, third-party websites, such as VISA, Verified by VISA, and MasterCard, integrated with Redsys, to make payments for the products and services purchased. Our staff will never have access to the bank details (e.g., credit card number) that you provide to these third parties.

3. DATA RETENTION PERIOD

The data you provide will be kept as long as there is a mutual interest in maintaining the purpose of the processing. It will be blocked when it is no longer necessary for the purpose for which it was collected or when you have exercised your right to erasure, cancellation, and/or restriction of processing. After this period, the data will be deleted in accordance with data protection regulations, which implies its blocking. It will be available exclusively to Judges and Courts, the Public Prosecutor's Office, and the competent authorities, particularly the Data Protection Authority, for addressing liabilities arising from the processing, for the duration of the applicable statute of limitations. Once this period has expired, the data will be destroyed using appropriate security measures to ensure its pseudonymization or complete destruction.

In addition to the general treatment of the previous point, the retention period of four years (Art. 66 et seq. of the General Tax Law) will be observed, and six years for accounting books and invoices (Art. 30 of the Commercial Code)

4. YOUR RIGHTS

Data protection regulations grant you the following rights in relation to the processing of personal data:

• Right of access: the right to access your personal data to know which data is being processed and the processing operations carried out with it.

• Right of rectification: To be able to request the modification of your data if it is inaccurate or untrue.

• Right to data portability: The ability to obtain a copy in an interoperable format of the data being processed.

• Right to restriction of processing, in the cases provided for in the Law.

• Right to erasure: Request the erasure of your data when processing is no longer necessary.

• Right to object: Request the cessation of the sending of commercial communications under the terms indicated.

• Right to revoke the consent given.

To exercise these rights, you must submit an express request, along with a copy of your ID card or equivalent valid identification document, through the following means:

• Send an email to info@hotellabarracuda.com with the subject line "Data Protection". This email must be sent from the email address you provided on the form. Otherwise, your information will not be displayed, as your identity will not be considered sufficiently verified.

• BY MAIL: Addressed to Avda. de España, 1 29620-Torremolinos (Málaga-SPAIN)

If you do not receive a timely response from us to your request, or if you find our response unsatisfactory, please be advised that the competent supervisory authority is the Spanish Data Protection Agency (www.aepd.es). You can find a series of templates on their website that will help you exercise your rights.

5. NO TRANSFER OF DATA

We expressly inform you that your personal data will not be transferred to third parties under any circumstances, except where legally required. Any exception to this rule will require your prior, explicit, informed, and unambiguous consent.

6. SECURITY MEASURES

At Hotel La Barracuda we comply with the provisions of current regulations on the protection of personal data (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights), for the processing of personal data under our responsibility, and expressly with the principles described in Article 5 of the GDPR, by which they are processed lawfully, fairly and transparently in relation to the data subject and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

We have implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect your rights and freedoms. We provide you with all the necessary information so that you can exercise your rights. We have installed all the technical means and measures at our disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the personal data you provide us. However, you should be aware that internet security measures are not infallible.

7. MINORS

Access to and use of this portal is prohibited for minors (under 14 years of age). Minors may not use the services available through the Website without the prior authorization of their parents, guardians, or legal representatives, who will be solely responsible for all actions taken through the Website by the minors under their care, including completing forms with the minors' personal data and, where applicable, checking the corresponding boxes. We are not responsible for the truthfulness and accuracy of the data you submit. If you have minors in your care, it is your sole responsibility to determine which services and/or content are appropriate for their age.

8. DURATION AND MODIFICATION OF THE PRIVACY POLICY

We reserve the right to modify this Privacy Policy, in whole or in part, by posting the changes on the Website. We may also change, delete, or add content and services, as well as the way in which they are presented, without prior notice. Therefore, the terms and conditions/policies in effect at the time of your access will apply, so you should review them periodically.

Notwithstanding the foregoing, we may terminate, suspend or interrupt access to the Website content at any time without prior notice, without the User being able to demand any compensation.