We inform you that the website
www.hotelkivir.com (the “Website”) is operated by Amadora Hoteles, S.L. (hereinafter, “Hotel Kivir”), with Tax ID (CIF) B90140377 and registered office at Calle Reyes Católicos, 4, 41001 Seville, Seville. You can obtain more information about Hotel Kivir in the “Who we are” and “What we do” sections of the Website or by sending an email to the following address: lopd@hotelkivir.com. “You” and “Your” refers to you as a user of our Website.
This privacy policy (“Privacy Policy”) is intended to inform you of how we collect, define, and use Your Information. This Privacy Policy, our Legal Notice, and our Cookies Policy constitute the “Terms and Conditions” of our website.
Access to and use of the Website by You implies your full acceptance of the Terms and Conditions of the Website. In this regard, if You access and use the Website, you undertake to comply with the provisions indicated in the aforementioned legal documents. The provision of the Website service is limited to the period during which You are connected to the Website or to any of the services provided through it. Therefore, You must read this Privacy Policy carefully each time you intend to use the Website, as it may undergo changes.
1. DEFINITIONS
| Term |
Definition |
|
Personal data |
Any information relating to an identified or identifiable natural person, such as: first name and surname, ID number, postal address, email address, images, data regarding tastes and hobbies, interests. |
|
Data Controller |
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing. In the present case, and unless otherwise stated, Amadora Hoteles, S.L. is the controller of the data processed at www.hotelkivir.com. |
|
Data Processor |
The natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller. That is to say, these are service providers of Amadora Hoteles, S.L., who may have access to certain personal data for the provision of their services. |
|
Recipient |
A natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. |
|
Data subject’s consent |
Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. |
2. WHAT INFORMATION DO WE PROCESS AT WWW.HOTELKIVIR.COM?
When you browse our website, you may provide us with data through various means, including:
1. Data provided when using data forms on the website or when communicating with us through means such as email.
The data will be processed for the purpose specified in each form. In the event that you send us a message, we will process it for the purpose of managing any communications that may be established, based on your request.
We may seek your express consent for the purpose of sending you commercial communications through each data collection form, or through a request in an email message. In these cases, we will always inform you beforehand of all the aspects required by the applicable regulations regarding data protection.
Likewise, if you have provided consent but no longer wish to receive commercial communications, you may revoke your authorisation by sending an email to the address lopd@hotelkivir.com.
2. Data that the website collects automatically during your browsing, provided that you have previously given your consent under the terms specified in this privacy policy.
Like most commercial websites, our website uses a technology called “cookies” (small fragments of data that your browser stores on your terminal’s hard drive) and web server logs to collect information about how our website is used.
For more information on how we use cookies, please see our Cookies Policy.
3. WHO IS THE DATA CONTROLLER?
Information on the entity responsible for data processing.
The data controller is Hotel Kivir; current regulations define the “controller” as the entity that defines the purposes and means of processing. Below we provide the necessary details for you to properly identify our company:
| Information on the Data Controller |
| Data Controller |
Amadora Hoteles, S.L. |
| Address |
Calle Reyes Católicos, 4, 41001 Seville, Seville |
| Email |
kivir@hotelkivir.com |
| Telephone |
954591343 |
| Data Protection Contact |
lopd@hotelkivir.com |
4. DATA PROCESSING UNDER THE RESPONSIBILITY OF AMADORA HOTELES, S.L.
A. MANAGEMENT OF COMMUNICATIONS THROUGH CONTACT FORMS.
Summary: the entity will process your data to send a response to your request or the comments you send us through the website’s contact forms.
- Data subject to processing: we will process the data you provided in the website’s contact form.
- Purpose of processing: Our website has contact forms in various areas. The purpose of the data processing is to manage the communications that may be established with website users who send us messages through them.
In the event that you have expressly requested it, we will use your data to send you information about hotel and catering products and services.
- Automated decisions: profile segmentation is not performed, and no automated decisions are made.
- How long will we keep your data?
- The data will be processed for the time necessary to manage your request or comment. Subsequently, the data will be deleted if no further conversation or interaction occurs between the parties within a period of one year.
- In the event that you have authorised the receipt of commercial information, we will process your data until you revoke your consent.
-
- Legal basis for processing: the legal basis for processing your data is the unambiguous consent you manifest by accepting the privacy policy associated with each data processing form.
- Obligation to provide data and consequences of not providing it: completing the form is entirely voluntary. In any case, if you wish to communicate with us through this medium, you must provide the data marked as “mandatory”, otherwise we will not be able to contact you to manage your request or comment.
- Source of the data: the data subject themselves.
- No data transfers will be made.
- Amadora Hoteles, S.L. has the collaboration of information technology service providers who process data on behalf of our entity. In these cases, after conducting a strict selection control of the provider based on guarantees of compliance with data protection regulations, we will sign the relevant data processing contract with these entities.
- International data transfers will not be made.
B. RECEIPT OF CURRICULUM VITAE AND PARTICIPATION IN RECRUITMENT PROCESSES
Summary: in the event that you send us your curriculum vitae, it will be included in future recruitment processes provided that you send us a formal reply indicating that you expressly accept all terms relating to data processing.
-
- Data subject to processing: we will process the data provided in your curriculum vitae.
- Purpose of processing: Should you send us your curriculum vitae, your data will be processed for the purpose of managing your participation in recruitment processes at our entity. The data will not be used for any other purpose.
- Automated decisions: Profile segmentation is not performed, and no automated decisions are made.
- How long will we keep your data? The data will be processed for one year; subsequently, the data will be deleted.
- Legal basis for processing: the legal basis for processing your data is the unambiguous consent you manifest by accepting the privacy policy.
- Obligation to provide data and consequences of not providing it: submitting data is entirely voluntary. However, if you provide your data through a specific data form, you may be required to provide a minimum set of data to properly identify you for participation in recruitment processes.
- Source of the data: the data must be provided by the data subject themselves.
- Data disclosures: no data transfers will be made.
- Processing on behalf of third parties: Amadora Hoteles, S.L. has the collaboration of service providers who process data on behalf of our entity. In these cases, after conducting a strict selection control of the provider based on guarantees of compliance with data protection regulations, we will sign the relevant data processing contract with these entities.
- International data transfers: no international data transfers are made.
C. HOTEL BOOKINGS
Summary: the entity will process your data to manage your booking at the establishment.
-
- Data subject to processing: We will process the data you provided in the registration form.
- Purpose of processing: If you book a place at our establishment through the booking engine, your data will be processed to facilitate the aforementioned booking process.
- Automated decisions: Profile segmentation is not performed, and no automated decisions are made.
- How long will we keep your data? Data will be processed for the period during which liabilities may arise between the parties, with a minimum of 5 years.
- Legal basis for processing: The legitimacy of the processing for the booking is based on the performance of a contract between the parties.
- Obligation to provide data and consequences of not providing it: The requested data is mandatory, as the booking process cannot be completed otherwise.
- Source of the data: the data subject themselves.
- Data communications: no data is communicated to third parties unless there is a legal obligation.
- Processing on behalf of third parties: Amadora Hoteles, S.L. belongs to a business group in which the various constituent companies may provide different corporate services that involve access to personal data. The provision of these services is covered by the signing of data processing contracts as determined by the applicable legislation on data protection.
Likewise, Amadora Hoteles, S.L. has the collaboration of other service providers who process data on behalf of our entity. In these cases, and as in the previous instance, after conducting a strict selection control of the provider based on guarantees of compliance with data protection regulations, we will sign the relevant data processing contract with these entities.
- International data transfers: no international data transfers are made.
5. EXERCISE OF RIGHTS
You have the right to obtain confirmation as to whether or not we are processing personal data concerning you. As a data subject, you have the right to access your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may request the restriction of the processing of your data, in which case we will only keep it for the exercise or defence of claims. In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. We will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
In those cases where the processing of your data is based on your consent, you may revoke it at any time.
In those cases where it is legally appropriate, you will have the right to data portability, which implies that you have the right to receive the personal data relating to you that we are processing, and store it on your own device; this right also allows you to request that we communicate your data to another controller.
Likewise, if you consider that there is a problem or an incident in relation to the data processing, you can contact the entity through the contact address indicated in this document, and in any case, you have the right to lodge a complaint with the Supervisory Authority regarding the protection of personal data, which in the case of Spain is the Spanish Data Protection Agency (AEPD).
To exercise your rights, you must send us a request to the email address kivir@hotelkivir.com attaching a copy of your ID or another document that legally identifies you.
6. SECURITY
Amadora Hoteles, S.L. has implemented security measures in line with the risks inherent in the processing of personal data.
The security measures implemented are aimed at providing an adequate level of security, including confidentiality, taking into account the state of the art and the cost of its application with respect to the risks and the nature of the personal data subject to processing.
When evaluating the risk in relation to data security, the risks arising from the processing of personal data have been taken into account, such as accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorised communication of or access to such data, which could in particular lead to physical, material, or non-material damage.