Privacy Policy

LEGAL REGULATIONS:

This website complies with Regulation (EU) 34 680 79 52 88 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), Organic Law (ES) 34 680 79 52 88 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), as well as with Organic Law (ES) 34 680 79 52 88, of 11 July, on Information Society Services and Electronic Commerce (LSSICE or LSSI).

CONTROLLER OF YOUR PERSONAL DATA: Fonda b12, SL. Tax ID: B 34 680 79 52 88 Address: C/ BARRANCO Nº12 – Postal Code: 11403 JEREZ DE LA FRONTERA (CÁDIZ) Telephone: 34 680 79 52 88 Email: info@lagitanilla.com

The purpose of this document is to establish and regulate the rules of use of the website www.lagitanilla.com, understanding by Site all pages and their contents owned by Fonda b12, SL. which are accessed through the domain www.lagitanilla.com and its subdomains.

Use of this website confers the status of User and implies acceptance of all the conditions included in the Legal Notice and this Privacy Policy. Whenever you use the platform and provide us with, or it becomes necessary for us to access, any type of information that, due to its nature, allows us to identify you, such as your name, surname, email address, physical address, telephone number, credit card number, debit card number, or equivalent payment method, etc. (hereinafter referred to as personal data), whether for browsing or using our services, this will be subject to this Privacy and Cookie Policy. You should review these documents to ensure you agree with them.

The Owner reserves the right to modify or adapt this Legal Notice and Privacy Policy at any time. We recommend that you review it periodically, and if you are registered and access your account or profile, you will be notified of any changes.

The Data Controller undertakes to treat your data with absolute confidentiality and exclusively for the purposes indicated. The Data Controller informs you that it has implemented the necessary technical and organizational security measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorized processing, and/or access, taking into account the state of technology, the nature of the data stored, and the risks to which it is exposed, whether arising from human action or the physical or natural environment. All of this is in accordance with current data protection regulations.

If you belong to any of the following groups, please consult the dropdown information:

  • CUSTOMERS AND RESERVATIONS What are the purposes for which we will process your personal data?
  • Manage reservations and provide accommodation services.
  • Billing for services and payment.
  • Budget preparation and monitoring through communication between both parties.
  • Information via electronic means, regarding your request.
  • Commercial or event information by electronic means, provided there is express authorization.
  • Manage the administrative, communications and logistics services performed by the Manager.
  • Carry out the corresponding transactions.
  • Access control and security. Video surveillance.
  • Control and recovery management.

For the sending of commercial communications, the user's express consent will be requested at the time of registration. In this regard, the user may revoke this consent by contacting Fonda b12, SL. using the means indicated above. In any case, each commercial communication will include the option to unsubscribe from receiving further communications, either via a link and/or email address.

What is the legal basis for processing your data?

  • Contract execution to provide you with our services
  • Compliance with legal obligations of the responsible party
  • Consent of the interested party
  • Legitimate interest of the controller (video surveillance)

How long will we keep personal data?

  • At least for the time limits established by consumer, commercial and tax regulations.
  • Traveler entry forms, three years.
  • Video surveillance, up to one month, except for data related to incidents or crimes.

To whom will your data be communicated?

  • Guest registration: competent authorities in compliance with the provisions of Organic Law 34 680 79 52 88 on the protection of public safety, Order INT/ 34 680 79 52 88.
  • In accordance with private security regulations, when necessary, video surveillance data will be made available to the Security Forces and competent authorities.
  • SUPPLIERS: For what purposes will we process your personal data?
  • Billing and filing of appropriate taxes.
  • Sending information electronically regarding your request.
  • Sending commercial or event information by electronic means, provided there is express authorization.
  • Manage the administrative, communications and logistics services performed by the Manager.
  • Carry out the corresponding transactions.

What is the legal basis for processing your data? The legal basis is the acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products through any means.

  • WEBSITE OR EMAIL CONTACTS What data do we collect through the Website? We may process your IP address, the operating system and browser you use, and even the duration of your visit, anonymously. If you provide us with data in the contact form, you will be identified so that we can contact you, if necessary.

For what purposes will we process your personal data?

  • To answer your questions, requests, or petitions.
  • Manage the requested service, answer your request, or process your petition.
  • Information via electronic means, regarding your request.
  • Commercial or event information by electronic means, provided there is express authorization.
  • Perform analysis and improvements on the Web, regarding our services.
  • Improve our business strategy.

What is the legal basis for processing your data? The acceptance and consent of the data subject: In cases where completing a form and clicking the "submit" button is necessary to make a request, doing so will necessarily imply that you have been informed of and have expressly given your consent to the content of the clause attached to said form or the privacy policy. All our forms have mandatory fields. If you do not provide this information, or do not check the box to accept the privacy policy, you will not be able to submit the information.

  • SOCIAL MEDIA CONTACTS What are the purposes for which we will process your personal data?
  • To answer your questions, requests, or petitions.
  • Manage the requested service, answer your request, or process your petition.
  • Connecting with you and building a community of followers.

What is the legal basis for processing your data? The acceptance of a contractual relationship within the relevant social network, and in accordance with its Privacy Policy: Facebook http://www.facebook.com/policy.php?ref=pf Twitter http://twitter.com/privacy YouTube http://www.google.com/intl/es/policies/privacy/

How long will we keep your personal data? We can only access or delete your data in a limited way, as it is tied to your specific profile. We will process it for as long as you continue to follow us, are friends, or have clicked "like," "follow," or similar buttons. Any corrections to your data or restrictions on information or posts must be made through your profile or user settings on the social network itself.

  • VIDEO SURVEILLANCE: For what purposes will we process your personal data?
  • Video surveillance of our facilities.
  • Control of our employees.
  • Sometimes they can be handed over to the courts and tribunals for the exercise of legitimate actions.

What is the legal basis for processing your data? The unambiguous consent of the interested party upon accessing our facilities after viewing the information sign in the video-monitored area.

  • EMPLOYEES: For what purposes will your personal data be processed?
  • Management of the relationship with the worker/collaborator (whether employment, provision of services or collaboration, internship contract, trainees, etc.) and where applicable the worker's file.
  • Carry out all the necessary administrative, tax and accounting procedures to comply with contractual commitments, obligations in matters of labor regulations, Social Security, occupational risk prevention, tax and accounting.
  • Payroll payment management through a financial institution.
  • Collection of the employee's dues and transfer of the same to the Union.
  • In their case, to carry out training activities, both subsidized and non-subsidized.
  • Timekeeping through the control system that is enabled.
  • Use of video surveillance systems for: security of both customers and employees/collaborators, control of access to the facilities, and monitoring of employee/collaborator compliance with obligations. Monitored areas will be clearly marked.
  • Regarding the purposes of monitoring compliance with the obligations of the worker/collaborator, we inform you that the information obtained through the control system may be used for the imposition of disciplinary sanctions for breaches of the employment contract or the service provision relationship.
  • Management of group insurance / company pension plan.

What is the legal basis for processing your data? Contract performance: The legal basis for processing your data is the performance of an employment contract.

Compliance with a legal obligation:

  • Data processing arising from employment relationships is legitimized by Royal Legislative Decree 34 680 79 52 88, of October 23, which approves the consolidated text of the Workers' Statute Law.
  • Royal Decree-Law 8/2019, of March 8, on urgent measures for social protection and the fight against job insecurity during working hours.
  • Obligation of protection in matters of Occupational Risk Prevention, by virtue of Law 34 680 79 52 88, of November 8, on Occupational Risk Prevention.
  • Provision of information to the managing entities of the economic benefits of the Social Security in accordance with the General Law of Social Security.
  • Communication of your data when requested by the Labor Inspectorate. Law 34 680 79 52 88, of November 14, regulating the Labor Inspectorate.
  • Tax obligations of the entity, in accordance with the General Tax Law.

To whom will your data be communicated?

  • Your data will be communicated to the entities and organizations detailed below: To the relevant banking entities, to keep payments up to date.
  • To the Tax Administration.
  • Social Security Organizations, Mutual Insurance Company for Work Accidents and Occupational Diseases of the Social Security System.
  • If requested, your data will be shared with the Labor Inspectorate.
  • To the entities involved in managing training courses that the employee wishes to attend, for the purpose of participating in the organized courses. In the case of receiving subsidized training, as established by Organic Law 34 680 79 52 88 of June 19, on Qualifications and Vocational Training, as well as in the case of training and apprenticeship contracts provided for by Royal Decree 34 680 79 52 88, all the information required for the monitoring and control of the training activities carried out must be provided to the competent public administrations.
  • JOB SEEKERS: For what purposes will we process your personal data?
  • Organization of selection processes for hiring employees.
  • To schedule job interviews and evaluate your application.

How long will we keep personal data? Under the retention policy of LA GITANILLA ALOJAMIENTO Y ENCANTO, personal data will be kept for a maximum period of one year from receipt of CVs.

What is the legal basis for processing your data? The legal basis is your unambiguous consent, given when you submit your CV to us.

To whom will your data be communicated?

  • The data will not be transferred to third parties without the consent of the interested party.
  • Legal obligations that apply to us.

Do we include personal data of third parties? No, as a general rule we only process the data provided to us by the data subjects. If you provide us with data of third parties, you must first inform them and obtain their consent, or you release us from any liability for failure to comply with this requirement.

What about data from minors? We do not process data from children under 14 years of age, therefore, please refrain from providing it if you are not that age.

Will we be communicating electronically?

  • They will only be used to process your request, if it is one of the contact methods you have provided to us.
  • If we send you commercial communications, they will have been previously and expressly authorized by you.

What security measures do we apply? You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle, and we have installed all the technical means and measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorized access and theft of Personal Data.

To whom will your data be disclosed? Your data will not be transferred to third parties, except where legally required. Specifically, it will be shared with the Spanish Tax Agency (Agencia Estatal de la Administración Tributaria) and banks and financial institutions for the collection of payment for the service provided or product purchased, as well as with the data processors necessary for the execution of the agreement. In the case of a purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed within its environment, always with the highest security. When instructed by us, the web development and maintenance company, or the hosting company, will have access to our website. These companies will have signed a service agreement that obliges them to maintain the same level of privacy as we do. Any international data transfer when using American applications will adhere to the Privacy Shield framework, which guarantees that American software companies comply with European data protection policies regarding privacy.

What rights do you have?

  • To find out whether we are processing your data or not.
  • To access your personal data.
  • To request the correction of your data if it is inaccurate.
  • To request the deletion of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw the consent you have given us.
  • You may request the limitation of the processing of your data in some cases, in which case we will only keep them in accordance with current regulations.
  • You have the right to data portability, meaning your data will be provided to you in a structured, commonly used, and machine-readable format. If you prefer, we can send it to the new data controller you designate. This right is only valid in certain circumstances.
  • To file a complaint with the Spanish Data Protection Agency if you believe we have not treated you correctly.
  • You can withdraw your consent for any treatment you have previously given consent for, at any time. If you change any of your information, please let us know so we can keep it up to date.

Do you want a form for exercising your rights?

  • We have forms for exercising your rights; request them by email, or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
  • These forms must be signed electronically or accompanied by a photocopy of the ID card.
  • If you are represented by someone, you must attach a copy of their ID, or have them sign it with their electronic signature.
  • Forms can be submitted in person, sent by mail, or emailed to the address of the Data Controller at the beginning of this text.

How long does it take us to respond to your request to exercise your rights? It depends on the right, but at most one month from your request, and two months if the issue is very complex and we notify you that we need more time.

Do we use cookies? We use cookies, which are small files containing information about your browsing on this platform, to facilitate your navigation. You can consult our cookie policy via the link at the bottom of our website.

How long will we keep your personal data?

  • Your personal data will be kept as long as you remain associated with us.
  • Once you unsubscribe, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a judge or court may require them taking into account the statute of limitations for legal actions.
  • The data processed will be kept until the aforementioned legal deadlines expire, if there is a legal obligation to maintain it, or if there is no such legal deadline, until the interested party requests its deletion or revokes the consent given.