Privacy Policies

Portada » Privacy Policies

The Privacy Policy is part of the General Conditions that govern this website.

Who is responsible for processing your data?

HOTEL ORFILA (SOCIEDAD ANDALUZA DE TRANSMISIONES ELECTRICAS, S.A.)

Address: Calle Orfila, 6 (28010 Madrid)

Tax ID: A79076873

Telephone: 91 702 77 70

You can contact us in any way to communicate with us.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of the modifications.

If you belong to any of the following groups, please consult the drop-down information:

+ GUESTS

For what purposes are we going to process your personal data?

We inform you that your data will be processed for the purpose of managing your reservation, your stay at the hotel, and guaranteeing the payment of expenses derived from said stay.

Your data will be communicated to the Security Forces and Corps in compliance with the provisions of current legislation, as well as to the agencies or travel operators involved.

What is the legitimacy for the processing of your data?

The legal basis is your consent and compliance with the legal obligations established by Royal Decree 393/1974, of August 18, and by Order INT/1922/2003 of July 3.

For how long are we going to keep personal data?

The data will be kept for a minimum of 6 years in compliance with tax, commercial, consumer, and traveler record-book regulations.

+CLIENTS

For what purposes are we going to process your personal data?

Preparation of the budget and monitoring thereof through communications between both parties.
Information by electronic means, relating to your request.
Commercial or event information by electronic means
Manage the administrative, communication, and logistics services carried out by the Controller.
Invoicing and declaration of the appropriate taxes.

What is the legitimacy for the processing of your data?

The existence of a contractual relationship between the parties. The processing is necessary for the execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures.

For how long are we going to keep personal data?

During the term of the relations between the parties and for the limitation periods derived from them.

+SUPPLIERS

For what purposes are we going to process your personal data?

Information by electronic means, relating to your request.
Commercial or event information by electronic means, provided that there is express authorization.
Manage the administrative, communication, and logistics services carried out by the Controller.
Carry out the corresponding transactions.
Invoicing and declaration of the appropriate taxes.
Control and collection management.

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products by some means.

For how long are we going to keep personal data?

During the term of the relations between the parties and for the limitation periods derived from them.

+SOCIAL NETWORK CONTACTS

For what purposes are we going to process your personal data?

Answer your queries, requests, or petitions.
Manage the requested service, answer your request, or process your petition.
Relate to you and create a community of followers.

What is the legitimacy for the processing of your data?

The bases that legitimize the processing is the voluntary consent of the interested party to get in contact and, where appropriate, the acceptance of a contractual relationship in the environment of the corresponding social network. The processing of data within the Social Network will be carried out in accordance with its Privacy policies.

For how long are we going to keep personal data?

We can only consult or unsubscribe your data in a restricted way by having a specific profile. We will process them as long as you let us follow you, being friends or clicking on “like”, “follow” or similar buttons.

Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.

+JOB APPLICANTS

For what purposes are we going to process your personal data?

Organization of selection processes for the hiring of employees.
Quote you for job interviews and evaluate your application.

Likewise, we inform you that after one year from the receipt of your curriculum vitae, we will proceed to its secure destruction.

What is the legitimacy for the processing of your data?

The legal basis is the need for processing for the execution of a contract.

For how long are we going to keep personal data?

For a minimum period of 1 year or until the revocation of the consent granted.

+ RESTAURANT RESERVATIONS

For what purposes are we going to process your personal data?

Manage your reservation.

What is the legitimacy for the processing of your data?

The legal basis is the need for processing for the execution of a contract.

For how long are we going to keep personal data?

Until the termination of the contractual relationship, being kept duly blocked during the legal limitation periods established for the exercise of actions.

+ OTHERS

Do we include personal data of third parties?

No, as a general rule we only process the data provided by the owners. If you provide us with data from third parties, you must, in advance, inform and request their consent from said persons, or otherwise you exempt us from any responsibility for the breach of this requirement.

And data of minors?

We do not process data of children under 14 years. Therefore, refrain from providing them if you are not of that age or, where appropriate, from providing data of third parties who are not of that age. HOTEL ORFILA (SOCIEDAD ANDALUZA DE TRANSMISIONES ELECTRICAS, S.A.) is exempt from any responsibility for the breach of this provision.

What security measures do we apply?

You can rest assured: We have adopted an optimal level of protection of the Personal Data we handle, and we have installed all the means and technical measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorized access, and theft of Personal Data.

To which recipients will your data be communicated?

Your data will not be transferred to third parties, except for legal obligation. Specifically, they will be communicated to the State Agency of the Tax Administration and to banks and financial entities for the collection of the service provided or product acquired, as well as to the processors necessary for the execution of the agreement.

In case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or will be processed in its environment, always with maximum security.

When we order it, the web development and maintenance company, web hosting/hosting will have access to our website. They will have signed a service provision contract that obliges them to maintain the same level of privacy as us.

What rights do you have?

To know if we are processing your data or not.
To access your personal data.
To request the rectification of your data if they are inaccurate.
To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent granted.
To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with current regulations.
To port your data, which will be provided to you in a structured format, of common use or mechanical reading. If you prefer, we can send them to the new controller you designate. It is only valid in certain cases.
To file a claim with the Spanish Data Protection Agency or competent control authority, if you believe that we have not attended to you correctly.
To revoke consent for any treatment for which you have consented, at any time.

If you modify any data, we thank you to communicate it to us to keep them updated.

Do you want a form for the exercise of Rights?

We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
The forms can be presented in person, sent by letter or by mail to the address of the Controller at the beginning of this text.

How long do we take to answer you to the Exercise of Rights?

It depends on the right, but at most in one month from your request, and two months if the issue is very complex and we notify you that we need more time.

Do we treat cookies?

If we use another type of cookies that are not necessary, you can consult the cookie policy in the corresponding link from the beginning of our website.