Data Protection and Privacy Policy

Following will be presented detailed information regarding the handling of your data of a personal nature by Hotel Palacio de los Angeles, hereinafter "The Hotel".

1. Details of the Data Controller:

• Legal Entity: Palacio de los Angeles, SL
• Address/Postal code: Plaza de la Cruz 4 – 26200 Haro, La Rioja
• Telephone Hotel: +34 93 492 22 44
• Telephone Bookings: +34 93 492 22 44
• Email: info@palaciolosangeles.com

2. Duty of Information and Consent for Handling of Your Data:

By accepting this Data Protection and Privacy Policy, the user is informed and provides their free, specific, unequivocal consent for the personal data that they provide while making online bookings as well as any other data provided via any other contact forms on the website www.palaciodelosangeles.com to be incorporated into the Hotel databases, which is the RESPONSIBLE for the correct provision of services contracted or requested by the user through the website, especially for the purpose of managing individual and group bookings and offering users booking availability at all times, as well as offering enhancements in the conditions of their stay (price, dates, services included...).
By accepting this Data Protection and Privacy Policy, the user is informed and provides their free, specific, unequivocal consent for the personal data that they provide while making online bookings to be added to databases belonging to the Hotel and to Leading Hotels of the World, Ltd (a hotel consortium belonging to Hotel Representative, A.G.) of which Palacio de los Angeles, SL is a member, for the purpose of managing individual and group bookings and offering users booking availability at all times, as well as offering improvement in the conditions of their stay (price, dates, services included...) at any hotel that forms part of Leading Hotels of the World, Ltd.
As regards the application of data protection regulations, Leading Hotels of the World, Ltd. acts as data controller for any data that the user provides when making their booking. If you would like further information about Leading Hotels of the World, Ltd., please consult its website https://www.lhw.com.

3. Purpose of Handling:

The Hotel will handle the data of a personal nature that you provide via this website, as well as any that you provide by any other means in the future, for the following purposes:

• Managing bookings: This includes handling data as required to make and arrange individual or group bookings, both via the website or through our Central Reservation Service, as well as handling your data for sending confirmation or documentation regarding the booking made and the terms and conditions of the same.
• Booking terms and conditions are available on the website.
• Improving your stay and experience at the Hotel: This includes the data of a personal nature as necessary to improve your stay, such as preferences regarding our rooms, services, and/or any other special request submitted by the user.
• Managing any kind of request, suggestion, or general query regarding the different sections available on this website.
• Sending promotional offers and marketing communications from the Hotel regarding our services, including information on new promotions and discounts on room bookings, accommodation services (hotel and apartments), catering (restaurants, bars, and terraces), SPA treatments and services, information for improving your future stay.
• Video-surveillance and access control for visitors, guests, staff, and vendors of the Hotel.

4. Processing of Data Belonging to children under 16 years of age:

This website is not intended for children under 16 years of age, for this reason the Hotel does not store or collect information relating to them. If any record reveals that the data subject is under 16 years of age, it will automatically be blocked.

5. Criteria for Data Retention:

• Booking details: The Hotel will store your data of a personal nature related to bookings for the time necessary to comply with the purposes described in this document. At the end of the relationship between the customer and the hotel, for whatever reason, the data of a personal nature will be stored in the case that any responsibilities could arise between the Hotel and the user and/or pursuant to any other regulatory frameworks that apply to the entity or to a legal standard that requires the conservation of data. Personal data will be stored in such a way that will allow the identification and the rights of the data subjects to be exercised, under the legal, technical, and organizational measures necessary for guaranteeing the confidentiality and integrity of it.
• Data from Curriculum Vitae: The Hotel may store your CV for a maximum period of one year. After that time, it will automatically be removed, pursuant to the principle of data quality.
• Other data provided to The Hotel via any contact form will be stored by the Hotel for as long as necessary to comply with the purposes described in this document.

6. Legitimization:

The legal basis for the handling of data is the consent provided by the data subjects regarding:

• Making and arranging individual or group bookings, both via the website or the contact centre and/or by any other means.
• Guest registration at the Hotel and managing their stay.
• Processing and managing any request for information or query regarding our services via any of the contact forms made available on this website.
• Sending marketing communications from the Hotel.
• Management for the purpose of recruiting processes.

7. Recipients:

Following, the recipients of your data of a personal nature are explained.

• State security forces and agencies: The data of a personal nature for guests and clients provided when registering at the Hotel will be transmitted to the state security forces and agencies pursuant to the provisions of Article 12 of Spanish Law 1/1992, of 21 February, on the Protection of Public Safety, amended by Spanish Law 4/2015, of 30 March, on the Protection of Public Safety.
• HRAG GROUP: The Hotel may transmit your data to LHWS Services GmbH, a company that forms part of the HRAG Group, which will process your data to send you promotions and offer you their own services pursuant to the terms and conditions provided. Your data will only be transmitted with your consent.

8. Source:

The data of a personal nature is obtained directly from the interested parties, from our partners, and from online booking platforms, such as Booking.com, Expedia.com, The Fork, etc.
The categories of data of a personal nature that we are provided with by our partners are:

• Identification data: first name, last name, address, nationality.
• Contact details: email address, telephone number.
• Other data: data in relation to the booking provided by the interested parties in the open fields of forms provided on these platforms.

9. Rights:

Right to Access, Rectification, and Erasure: Interested parties are entitled to obtain confirmation regarding whether the Hotel is handling any data of a personal nature regarding them or not. Interested parties are entitled to access their data of a personal nature and ask for inaccurate data to be amended or, where applicable, request erasure of the same when, among other reasons, the data is no longer required for the purposes for which it was collected.

Right to Restriction and Objection: Under certain circumstances, interested parties may request a restriction on the handling of their data, in which case, we will only store it for the exercise or defence of legal claims. Under certain circumstances and for reasons relating to their particular situation, interested parties may object to their data being handled. El Hotel will stop handling data in these situations, except for when there are pressing legitimate grounds, or for the exercise or defence of possible legal claims.

These rights may be exercised by sending an email to dpo@majestichotelgroup.com

10. Updates and Amendments:

El Hotel reserves the right to amend and/or update information regarding data protection as necessary for proper compliance with the data protection regulations. If any amendment is made, the new copy will be published on this page, where you may access the current policy. Our relationship with users will be governed, at all times, by the rules in place at the time the website is accessed.