Iriguibel Hotel

Privacy Policy

Privacy Policy

Basic information on data protection

Controller

HOTEL INTXAURDIA S.L.

Purpose

The collection and processing of your personal data through registration forms is for the purpose of enabling the management of the commercial, accounting, and administrative relationship of clients in everything related to services and accommodation in our hotels. On the other hand, the user may authorize HOTEL INTXAURDIA S.L. for the processing of their data for promotional and marketing purposes, including the sending of commercial electronic communications for the range of products and services offered by the hotel.

Legitimation

Execution of a service contract that the User has contracted, from the moment of the client’s registration. If you authorize HOTEL INTXAURDIA S.L. for the sending of promotional commercial electronic communications, the legitimizing basis will be the user’s consent. Compliance with legal obligations. Legitimate interest of the controller or of third parties responsible. Recipients: Data transfers are planned to: Public Administration with competence in the matter; People and organizations related to the controller. The recipients of the information are the third parties in charge of processing that provide their services to HOTEL INTXAURDIA S.L., with whom the corresponding agreement has been signed that guarantees compliance with the GDPR and adequate security measures. In compliance with current legislation, your reservation data is transferred to State Security Forces and Bodies.

Rights

At any time you may exercise your rights of access, rectification, deletion and opposition, portability, and limitation of processing, collected in GDPR (EU) 2016/679, by writing to the address CALLE INTXAURDIA 4 31620 HUARTE NAVARRA or by email to hoteliriguibel@hoteliriguibel.com The request must specify which of these rights you request to be satisfied and must be accompanied by a photocopy of your ID or equivalent identification document. Origin: From the data subject themselves or their legal representative from our website https://www.hoteliriguibel.com/ and/or private entities Additional information: Request it at the Hotel: CALLE INTXAURDIA 4 31620 HUARTE NAVARRA or on the website: https://www.hoteliriguibel.com/ In the event that our data protection policy had to vary as a result of legislative changes or criteria emanating from the Data Protection Agency, you will be appropriately informed of any variation that may be necessary to introduce to comply with the law

Who is responsible for processing your data?

Identity: HOTEL INTXAURDIA S.L. – NIF: B31690480 Postal address: CALLE INTXAURDIA 4 31620 HUARTE NAVARRA Phone: 948361190 Email: hoteliriguibel@hoteliriguibel.com Data Protection Officer (DPO): PRODANA CONSULTORES S.L. DPO Contact Polígono Mutilva Baja Calle E, Nº9 1ºC 31192 Mutilva Navarra Spain dpo@prodanaconsultores.com

What is the purpose of processing your personal data?

At HOTEL INTXAURDIA S.L. we process the information provided by interested parties with the purpose of enabling the management of the commercial, accounting, and administrative relationship of clients in everything related to services and accommodation in our hotels. On the other hand, the user may authorize HOTEL INTXAURDIA S.L. for the processing of their data for promotional and marketing purposes, including the sending of commercial electronic communications for the range of products and services offered by the hotel.

How long will we keep your data?

Personal data related to administrative and fiscal management will be kept for the term of compliance with legal obligations (minimum 5 years). Other personal data will be kept while the relationship with the client is maintained and the latter does not exercise their rights of Deletion, Revocation, or Limitation of processing.

What is the legitimization for the processing of your data?

We indicate the legal basis for the processing of your data:
  • Execution of a contract: Execution of a services provision contract
  • Consent of the interested party: The sending of commercial communications of our products and services. Subscription to our “newsletter”, access and management of your data for management. The transfer of data to third parties related to the Controller with the aim of related processing.
  • Legitimate interest of the controller: Purposes related to the provision, assistance, and communication about the contracted/supplied services or products: purchase, customer care, return, transfer to third parties for transport and delivery, management of offers to customers, communications with the customer in relation to the service, complaints and grievances, transfer of data to third parties for the provision of services and business activity coordination.
  • Compliance with legal obligations. Administrative, accounting, and tax management; Communications with the client; The transfer of data to third parties related to the Controller for processing related to this legitimate interest.

Who will your data be communicated to?

The data will be communicated to the following recipients:
  • Public administration competent in the corresponding subject, for the fulfillment of legal obligations.
  • People and organizations related to the controller, to provide external services to the company such as: consulting, IT, auditors, insurers, occupational risk measures, lawyers and other external service providers…
  • Financial entities for economic transactions.
  • In compliance with current legislation, your reservation data is transferred to State Security Forces and Bodies.
  • The recipients of the information are third parties in charge of processing that provide their services to HOTEL INTXAURDIA S.L. with whom the corresponding agreement has been signed that guarantees compliance with the GDPR and adequate security measures.

Transfers of data to third countries?

There are no planned data transfers to third countries.

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation as to whether or not HOTEL INTXAURDIA S.L. is processing personal data concerning them. Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of processing of their data, in which case we will only retain them for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, HOTEL INTXAURDIA S.L. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. You may exercise your rights of necessary form as follows: You have the right to access, rectify and delete the data, as well as other rights, indicated in the additional information, which you can exercise by directing to this effect at the address of HOTEL INTXAURDIA S.L. located at CALLE INTXAURDIA 4 31620 HUARTE NAVARRA or at the email address hoteliriguibel@hoteliriguibel.com properly identifying yourself and expressly indicating the specific right you want to exercise If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without this affecting the legality of the processing based on the consent prior to its withdrawal. In case you feel your rights have been violated concerning the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you can file a claim with the competent Data Protection Control Authority through its website: www.agpd.es.

What Rights do you have?

To know whether we are processing your data or not. To access your personal data. To request rectification of your data if they are inaccurate. To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent given. To request the limitation of processing of your data, in certain cases, in which case we will only keep them according to current regulations. To bring your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new responsible you designate. This is only valid in certain cases. To file a complaint with the Spanish Data Protection Agency, if you believe that we have not attended to you properly. To revoke consent for any processing for which you have consented, at any time. If you modify any data, we appreciate you communicating it to us to keep them updated.

Do you want a form for the Exercise of Rights?

We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties. These forms must be electronically signed or be accompanied by a photocopy of the ID. If it is represented by someone, you must attach a copy of their ID, or they must sign it with their electronic signature. The forms can be presented in person, sent by letter or by email to the Controller’s address at the beginning of this text.

How long will we take to respond to the Exercise of Rights?

It depends on the right, but at most within a month from your request, and two months if the topic is very complex and we notify you that we need more time.

How have we obtained your data?

The personal data that we treat at HOTEL INTXAURDIA S.L. come from the data subject themselves or their legal representative and from private entities. The categories of data that are treated are:
  • Identifying data
  • Postal and electronic addresses
  • Commercial information
  • Economic data
Special categories of personal data are not processed (these are data that reveal ethnic or racial origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data aimed at uniquely identifying a physical person, health data, or data relating to a person’s sexual life or sexual orientation).