Last updated: January 2021.
1. USER INFORMATION
MIDNIGHT SAPHIRE S.L., como Responsable del Tratamiento, le informa que, según lo dispuesto en el Reglamento (UE) 2016/679, de 27 de abril, (RGPD) y en la L.O. 3/2018, de 5 de diciembre, de protección de datos y garantía de los derechos digitales (LOPDGDD), trataremos sus datos tal y como reflejamos en la presente Política de Privacidad.
This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you accept the measures in this Policy, you agree to our processing of your personal data as defined in this Policy.
Company name: MIDNIGHT SAPHIRE S.L.
Trade name: HOTEL TERMINUS
Address: Pl. de l’Estació, 1, 17520, Puigcerdà
3. KEY PRINCIPLES
We have always been committed to providing our services with the highest degree of quality, which includes treating your data securely and transparently. Our principles are:
- LegalityWe will only collect your Personal Data for specified, explicit and legitimate purposes.
- Data minimisationWe limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected.
- Purpose LimitationWe will only collect your personal data for the stated purposes and only in accordance with your wishes.
- AccuracyWe will keep your personal data accurate and up to date.
- Data SecurityWe implement appropriate technical and organisational measures proportionate to the risks to ensure that your data is not subject to damage, such as unauthorised disclosure or access, accidental or unlawful destruction or accidental loss or alteration and any other form of unlawful processing.
- Access and RectificationWe have the means for you to access or rectify your data when you consider it appropriate.
- ConservationWe retain your personal data in a lawful and appropriate manner and only for as long as is necessary for the purposes for which it was collected.
- International transferswhere your data is to be transferred outside the EU/EEA, it will be adequately protected.
- Third partiesAccess and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations and with appropriate contractual safeguards.
- Direct Marketing and cookiesWe comply with the applicable legislation on advertising and cookies.
4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA
The types of data that may be requested and processed are:
- Data of an identifying nature.
Whenever we request your Personal Data, we will inform you clearly what Personal Data we collect and for what purpose. In general, we collect and process your personal data for the purpose of:
- To provide information, services, products, relevant information and news in the sector.
- Sending communications.
In accordance with the applicable data protection legislation, your personal data may be processed insofar as:
- You have given us your consent for the purposes of processing. You may of course withdraw your consent at any time.
- By legal requirement.
- For there being a legitimate interest that is not undermined by your privacy rights, such as sending you commercial information either by subscribing to our newsletter or by your status as a customer.
- Because it is necessary for the provision of one of our services through a contractual relationship between you and us.
6. COMMUNICATION OF PERSONAL DATA
The data may be communicated to companies related to MIDNIGHT SAPHIRE S.L. for the provision of the various services in their capacity as Data Processors. The company will not make any transfer, except by legal obligation.
7. YOUR RIGHTS
In connection with the collection and processing of your personal data, you may contact us at any time to:
- Access your personal data and any other information referred to in Article 15.1 of the GDPR.
- Rectify your personal data that is inaccurate or incomplete in accordance with Article 16 of the GDPR.
- Delete your personal data in accordance with Article 17 of the GDPR.
- To restrict the processing of your personal data in accordance with Article 18 of the GDPR.
- Request the portability of your data in accordance with Article 20 of the GDPR.
- object to the processing of your personal data in accordance with Article 21 of the GDPR.
If you have given your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent prior to its withdrawal. hr.
Puede ejercer estos derechos enviando comunicación, motivada y acreditada, a Midnight Saphire S.L., Pl. de l’Estació, 1, 17520, Puigcerdà, o por e-mail a firstname.lastname@example.org
You also have the right to lodge a complaint with the competent supervisory authority (www.aepd.es) if it considers that the treatment does not comply with the regulations in force.
8. LEGAL INFORMATION
The requirements of this Policy supplement, and do not replace, any other requirements existing under applicable data protection law, which shall prevail in any event.
This Policy is subject to periodic review and may be amended by the Company at any time. When this happens, we will notify you of any changes and ask you to re-read the most recent version of our Policy and confirm your acceptance.