PRIVACY POLICY

This Privacy Policy governs the processing of personal data provided through this website, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation), Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, and any other applicable regulations.

1. Data Controller

• EBOLITEL 2023 SL
• Tax ID (NIF): B70929757
• Registered address: Calle Madrid, 15, 09002, Burgos, España
• Email: comercial@hotelprincesadeeboli.com

2. Purpose of the processing and legal basis

Your personal data may be processed for the following purposes:

• Handling enquiries and contact requests

We process the data you provide through the contact forms or other contact channels available on the website in order to respond to enquiries, questions, requests for information, suggestions, incidents or complaints. The legal basis for this processing is the legitimate interest of the controller in responding to communications received and properly managing the relationship with people who contact the establishment. When the enquiry is linked to a possible booking or a specific request for services, the processing may also be based on pre-contractual measures taken at the request of the data subject.

2. Booking management

We process your data to manage bookings made through the website or the available channels, process payment, provide the contracted services, and carry out the administrative, accounting and tax procedures arising from the contractual relationship. The legal basis for this processing is the performance of a contract to which the data subject is party and compliance with applicable legal obligations.

3. Management of requests for quotations, meeting rooms, meetings, events and celebrations

We process the data provided through the forms available on the website in order to manage requests for quotations, availability or commercial proposals related to meetings, events, weddings, celebrations, room hire or other hotel services. The legal basis for this processing is the application of pre-contractual measures at the request of the data subject.

3. Data retention

Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the legally required retention periods and limitation periods for liabilities. In general terms:

• Data processed to respond to enquiries or requests for information will be kept for as long as necessary to handle them. 
• Data related to requests for quotations or commercial proposals will be kept for as long as necessary to deal with the request and follow it up. 
• Data related to bookings and provision of services will be kept for the duration of the contractual relationship and, thereafter, for the periods required by applicable tax, commercial and other relevant regulations.

4. Mandatory nature of the data

The website forms will indicate which fields must be completed as mandatory. Failure to provide the required mandatory data may prevent us from responding to your enquiry, preparing a quotation, managing a request for an event or meeting room, or completing a booking.

5. Recipients of the data

Your data may be disclosed to:

• Public administrations and competent authorities, where there is a legal obligation to do so. 
• Financial institutions and payment gateways, only when necessary to process collections and payments. 
• Consultants, lawyers, legal representatives, courts and tribunals, where necessary for the establishment, exercise or defence of legal claims.
• Service providers acting as data processors, such as technology providers, web hosting providers, technical support providers, booking engine providers or other suppliers necessary for the operation of the business.

6. International data transfers

As a general rule, no international data transfers are expected to take place. However, if the provision of any service requires the use of providers located outside the European Economic Area or with access from third countries, such transfers will be carried out with the appropriate safeguards required by data protection regulations.

7. Automated decisions

As a general rule, no automated decisions are made and no profiling is carried out that produces legal effects on the user or similarly significantly affects them, unless expressly informed otherwise at the appropriate time.

8. Rights of data subjects

You may exercise the following rights in relation to data protection:

• Access, to know whether we process your data and to obtain information about such processing. 
• Rectificación, to amend inaccurate or incomplete data. 
• Erasure, to request the deletion of your data where appropriate. 
• Objection, to object to the processing in certain circumstances. 
• Restriction of processing, to request restriction of processing in the cases provided by law. 
• Data portability, to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller where applicable. 

9. Exercising your rights

You may exercise your rights by sending a written request to:

• EBOLITEL 2023 SL
• Calle Madrid, 15, 09002, Burgos, Spain
• Email: comercial@hotelprincesadeeboli.com

The request must sufficiently identify the applicant and specify the right they wish to exercise.

10. Complaint to the supervisory authority

If you believe that the processing of your personal data does not comply with the applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) through the channels made available by such authority.