Privacy Policy
Below we describe how your personal data is processed and the rights you have under current data protection regulations – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and its developing regulations, hereinafter, “data protection regulations” or “GDPR”.
-
Who is responsible for processing your data?
The data controller is MARENY SOL S.L.U. (hereinafter in this document, “the company”) with registered office at Calle Gambo 2 03503 Benidorm. If you have any queries related to data protection, you can contact the email address administracion3@marenysol.es.
II . For what purpose and lawful basis do we process your data?
The company informs the data subject that their data will be processed for the following purposes:
- Contact Form: If your data has been collected via the contact form, it will be processed to respond, in the first instance, to the queries, requests, comments, doubts, complaints, or any other concerns you have submitted to us through it.
Lawful Basis: This processing is lawful based on the data subject’s consent. The data subject may withdraw their consent by following the instructions set out in section V.
- Requests received via email or social media: If your data has been collected via email or social media, it will be processed to respond, in the first instance, to the queries, requests, comments, doubts, complaints, or any other concerns you have submitted to us through them.
Lawful Basis: This processing is necessary for the satisfaction of the company’s legitimate interests. The customer may object at any time to their data being processed for this purpose by following the instructions set out in section V.
- “Subscribe” Form. If your data has been collected via the “Subscribe” forms, it will be processed to keep the customer informed via the Newsletter and Blog about news regarding our hotels.
Lawful Basis: This processing is lawful based on the data subject’s consent. The data subject may withdraw their consent by following the instructions set out in section V.
- “Work with us” Form: If your data has been collected via the “Work with Us” form, it will be processed to manage your application and your participation in current and future selection processes.
Lawful Basis: This processing is lawful based on the data subject’s consent. The data subject may withdraw their consent by following the instructions set out in section V.
- Management of the booking and contracted services. In order to manage and formalise the purchase of products and provision of services offered by the company, the customer has two direct channels: the website (http://www.marenysol.com), or by telephone, as well as indirect channels through various intermediaries (tour operators, online travel agencies, agencies, etc.).
If the contract is made by telephone, the company may proceed to record the call with the aim of proving and verifying the contract made by the customer. The company will always inform about the recording of the call, with the customer understanding that continuing with the call implies their agreement to said recording, and bearing in mind that non-agreement will imply the inability to manage the booking request the customer intends to make.
To manage the booking requested by the customer, the company must process the personal data that the customer provides through the data collection forms.
Similarly, the company will process the information necessary to manage requests for modification or cancellation of bookings requested by the customer.
Should the customer provide data relating to their health in free-text fields or by express request to the tour operator or by telephone to manage specific services, the company understands that such data is voluntarily communicated by the customer, since there is no prior request for this information, and it will only be processed to manage the customer’s request (for example, adapted rooms based on special needs).
Lawful Basis: This processing is necessary for the performance of the contract.
- Compliance with accounting, legal, tax, and administrative obligations.
Lawful Basis: This processing is necessary due to a legal obligation.
- Sending commercial communications by any means relating to products, services, promotions, events, or any other news relevant to the user that may be attractive to the customer.
Lawful Basis: This processing is necessary for the satisfaction of the company’s legitimate interests. The customer may object at any time to their data being processed for this purpose by following the instructions set out in section V.
- Sending corporate communications: the company may send the customer corporate communications via any type of communication (email, Newsletter, etc.) to keep them informed about news regarding our hotels.
Lawful Basis: This processing will only be carried out if the company has the customer’s consent. The customer may withdraw their consent by following the instructions set out in section V.
- Management of customer complaints. To manage complaints submitted by the customer regarding services contracted at our hotels, the company will receive the information relating to the complaint generated, with the aim of processing said complaint. Thus, the company needs to access the information generated by the customer at the hotel to adequately address the complaint lodged.
Lawful Basis: This processing is necessary for the satisfaction of the company’s legitimate interests. The customer may object at any time to their data being processed for this purpose by following the instructions set out in section V.
- Customer Information. The company has a customer information service for resolving requests generated by customers or potential customers, both in relation to providing information prior to booking and concerning issues that may arise about the booking made or the services offered by the hotel.
Lawful Basis: This processing is necessary for the satisfaction of the company’s legitimate interests. The customer may object at any time to their data being processed for this purpose by following the instructions set out in section V.
- Judicial or administrative proceedings. In the event of possible judicial or administrative proceedings that may arise as a result of services offered or provided by the hotel, the company will process the necessary information to submit appropriate representations, exercise its right of defence, or lodge claims it deems appropriate based on the facts that occurred.
Lawful Basis: This processing is based on legal obligations, set out by administrative regulations (mainly, the Law on Common Administrative Procedure) or is necessary for the company to exercise its legitimate right to effective judicial protection, both in its right of defence and in lodging judicial claims it deems appropriate, based on the Civil Procedure Law or the Criminal Procedure Law.
- Management of system incidents. The company will process the necessary information of its customers to manage any incident reported or detected by the company through its own means. This data processing will only be carried out with the aim of solving the incident and resolving problems arising from it. The company understands that it has a legitimate interest in ensuring the security of its computer assets, as well as in solving incidents that endanger said security or the continuity of the provision of services offered to its customers.
Lawful Basis: This processing is necessary for the satisfaction of the company’s legitimate interests. The customer may object at any time to their data being processed for this purpose by following the instructions set out in section V.
- Data processing in the “Club Mareny Sol” loyalty programme The company will process the necessary information of its customers so that they can enjoy the “Club Mareny Sol” loyalty programme and be informed about the programme’s advantages such as promotions and commercial communications.
Lawful Basis: This processing will only be carried out if the hotel has the consent of the data subject. The data subject may withdraw their consent by following the instructions set out in section V.
- Processing of data relating to access to the Wi-Fi network provided by the company.The company will process the necessary information of its customers in order to offer the Wi-Fi service.
Lawful Basis: This processing is necessary for the performance of the contract.
-
How long will we keep your data?
The personal data accessed will be processed while the contractual relationship or the purpose for which it was collected is maintained. After that, the company will keep the personal data, once the contractual relationship has ended or when it is no longer relevant for the purposes collected, duly blocked, to be made available to the competent Public Administrations, Judges and Courts, or the Public Prosecutor’s Office during the limitation period for actions that may arise from the relationship maintained with the customer and/or the legally established retention periods. The company will proceed to the physical deletion of your data once these periods have elapsed.
Furthermore, if the customer has not objected to receiving commercial communications, the company may process their personal data as described in this information clause. You may unsubscribe from receiving these communications if you deem it appropriate through the means indicated in section V.
-
To whom will we disclose your data?
The company may disclose the data to:
- Competent Public Bodies, Judges, and Courts.
- The company relies on the collaboration of some third-party service providers who have access to customers’ personal data and who process said data on behalf of and for the company as a result of their service provision. Specifically, the company will contract the provision of services from third-party providers who carry out their activity, including but not limited to, in the following sectors: legal advice, multidisciplinary professional services companies, technology service providers, IT service providers.
-
What are your rights when you provide us with your data?
Data subjects may exercise, if they wish, the rights of access, rectification, and erasure of data, as well as request that the processing of their personal data be restricted, object to it, request the portability of their data, and not be subject to automated individual decision-making, through the following means:
- By sending a written request to the postal address indicated above, providing the necessary documentation that allows us to verify your identity (copy of DNI, passport, legal representation power of attorney, NIE, etc.).
- By email to the following address administracion3@marenysol.es
- In person.
Data subjects may, in relation to processing based on obtaining their consent, withdraw their consent through the procedure detailed in the previous paragraph.
Data subjects may request to object to processing based on the company’s legitimate interest, especially the receipt of commercial communications, commercial profiling, and the receipt of surveys.
-
How did we obtain your data?
The personal data processed by the company is the personal data collected through:
- Our direct channels:
- Website (https://www.marenysol.com).
- Requests made by telephone.
- In person.
- Via email.
- Our indirect channels:
- Through intermediaries (tour operators, online travel agencies, etc.).
- Through social media messaging.
-
To which authority can you address your complaints?
Should you believe that your data protection rights have been violated or have any complaint regarding your personal information, you may send an email to the address administracion3@marenysol.es, attaching a copy of your DNI, NIF, or official identifying document to this request.
In any case, data subjects can always turn to the Spanish Data Protection Agency, the control authority for data protection matters, http://www.agpd.es., C/Jorge Juan número 6, 28001, Madrid.