Who we are

At HOTEL GRAND LUXOR we have updated our Privacy Policy to bring it into line with the new regulations, both European (Regulation 2016/679) and national (L.O. 3/2018). Our contact details, as Data Controller of the data we collect through our website and our profiles on the various social networks are as follows:

Company Name: HOTEL MITICA, S.L.

VAT NO: B-54774088

Address: C/ Viena 2, 03503, Benidorm, Alicante(Spain)

All other companies acting as “Joint Controllers”, as provided for in art. 26 of the European Regulation 2016/679:

• AQUALANDIA, manager of the park of the same name, with which we share interests for the sending of commercial information by electronic means;
• TERRA MÍTICA, manager of the hotel of the same name, with which we share interests for the sending of commercial information by electronic means and, possibly, the management of hotel stays;
• MUNDOMAR, manager of the park of the same name, with which we share interests for the sending of commercial information by electronic means;
• HOTEL PALM BEACH BENIDORM, manager of the hotel of the same name, with which we share interests for the sending of commercial information by electronic means and, possibly, the management of hotel stays;
• APARTAMENTOS TURÍSTICOS DON JORGE, manager of the tourist flats of the same name, with which we share interests for the sending of commercial information by electronic means and, eventually, the management of tourist stays.

In all cases, the interested parties can exercise all their rights (seeinfra) and/or simply request more information about our data privacy policy by sending a simple email todpo@grandluxorhotel.comour unified address for these matters.

What data we collect

The data provided to us by users of our website or of the various social networks on which we maintain a professional profile may meet different needs, all of which are easily identifiable depending on the context. For example: if a user fills in a contact form and/or participates in a specific promotion, their data will obviously be used for these purposes and to keep them informed, subsequently, of any news related to our services and/or the promotion offered. In no case will we collect more data than is strictly necessary for the fulfilment of the purposes expressed at any given time. Generally, we will always limit ourselves to collecting the following types of data:

• Identifiers: name, surname, e-mail address and contact telephone number;
• Data relating to navigation or tastes: for example, in some cases, we will use the data expressed in “Navigation data”likes“or similar, to assess the degree of acceptance of our initiatives. Likewise, in some cases, we will ask you to tell us how you heard about us. In any case, this type of dataneverwill be necessary in cases where the user simply browses our website, fills in a contact form or visits our profiles on social networks. Provided that technical measures allow it, the user will always find a link to our Privacy Policy.
• Curricular data: this data will be used exclusively to assess the incorporation of different professional profiles to the entity. Under no circumstances will this data be used for other purposes, nor will it be communicated to third parties.
• Contractual data: for example, if the user contracts and/or buys online (the same applies to any telephone contracts initiated by the customer), we will collect the data to formalise the purchase contract (park tickets, hotel stays or both services together). It is important to remember that the companynostores the data of the means of payment used (debit or credit cards), because these are used by the banks’ payment gateways, which will only inform us of the acceptance of the transaction (the completion of the payment).
•  

For what purposes do we process/use personal data?

The purposes for which we collect personal data from users of our website and social networks will always be stated in a clear and transparent manner. For example: in the case of contact forms, the data will be processed exclusively to respond to requests for information and to keep the interested party informed about future activities, services and products related to their request. In any case, at any time and always free of charge, the interested party may exercise any of the rights provided for in current legislation (seeinfra), by simply sending an email to our Data Protection Officer:dpo@grandluxorhotel.com.

In cases where the HOTEL GRAND LUXOR would like to use your data for more than one purpose, it will always seek consent for each of them. Example: the user will be free to give their consent to participate in a promotion of services linked to a certain seasonality (summer), opting (or not) to participate in a promotion, or to opt (or not) to participate in a promotion.newsletterthat has a different and/or continuous periodicity in time. In no case will the entity oblige to provide a linked or block consent: our users will always be able to choose at any time what information they receive, how and when.

The Legal Basis

Technically, “Legal Basis” is identified as the authorization that protects us in the processing of personal data of our users. Example: if a user decides to purchase certain services or products through our website, the legal basis for the processing of personal data will obviously be the contract. Through a contract, HOTEL GRAND LUXOR will manage the preparation of the order, shipping, receipts, tickets, collection, returns, warranties, etc..

In other cases, the legal basis for processing the user’s personal data is the user’s consent. This is the case for the processing of curriculum vitae data of persons applying for employment with us.

The user can find a summary of the legal bases for the processing of the various data at the beginning of this section.

In case of doubt, as always, you can contact our Data Protection Officer directly, via email:dpo@grandluxorhotel.com.

Withdrawal of Consent

In cases where the legal basis for the processing of our users’ personal data has been consent (as in the example of CVs), consent may be withdrawn at any time and in the simplest way. If it was easy to send us a CV by email, it will be equally easy to withdraw your consent by the same means: an email addressed to our Data Protection Officer.

The withdrawal of consent, obviously, cannot have retroactive effects and will come into effect at the same time as the user gives us his or her wish to no longer consent to the processing of his or her data.

Conservation period

Here we will indicate for how long it is the intention of HOTEL GRAND LUXOR to store the personal data of the users of our online services.

There is no uniform retention period, because the processing and purposes are different and varied. In any case, the entity will always follow the following rules:

• For curriculum vitae data: the maximum time allowed will betwo yearsthe Commission has been working on this issue since it received the CV of the person concerned. In reality, thethe ordinary time limit shall always be less than one yearthe above period is a conservative estimate, due to the seasonal nature of the company. In the case of professional profiles linked to seasonality and workloads that vary throughout the year, the period may be slightly longer. For example: if a CV is received in October, it will normally remain in the company’s custody until the end of the following two solar years;
• For contractual data: the time limit in this case is determined by the applicable law. Generally, the entity will keep the user’s data until the eventual prescription of the contractual liability actions (generally ten years);
• For contact details: the deadline shall be10 yearsthe time period of the last interaction between the user and the entity. Example: if the user requests information about the services and products of the entity and subscribes to thenewsletterthe entity will store the data until the user requests to unsubscribe from thenewsletterblocking the data for destruction after the above-mentioned period for contractual liability.

Again, please do not hesitate to contact our Data Protection Officer for details of our personal data retention policy.

Automated Decisions

Automated Decisions” means those decisions taken by the Data Controller, without human intervention and based on personal data provided by the user, either manually (for example, by filling in a form) or through the study of the user’s browsing habits.

HOTEL GRAND LUXOR informs thatnomakes any automated decision, through the analysis of user browsing, both on the Web, as well as on social network profiles.

Recipients of the information

HOTEL GRAND LUXOR inno casetransfers the data of the users of the Website and their social network profiles to any company other than those mentioned in the “About us” section. The entity may, from time to time, rely on external collaborators, and these relationships are always covered by a data processing contract.

Stakeholder Rights

HOTEL GRAND LUXOR informs about the rights of data subjects. As always, in case of doubt, you can consult our Data Protection Officer. This is where data subjects may exercise their rights, by sending a simple email to:dpo@grandluxorhotel.com.

Right of accessthe user may request the entity to know what information the user holds, both in relation to his online relationship and, possibly, his offline relationship. For example, the user may request access to his or her newsletter subscription data or to his or her medical history. In any case, the entity will request proof of the identity of the applicant, depending on the importance of the data to which access is required. More specifically, the user has the right to know:

• The purposes of the processing of personal data;
• The categories of data included in the processing operations;
• The possible recipients/assignees of data;
• Conservation periods;
• The existence of a right to lodge a complaint with the supervisory authority (the Spanish Data Protection Agency);

Right of rectificationin the event that the entity has wrongly entered some data or also in cases in which the user changes all or part of his data (for example, changes the e-mail address where he wants to receive our information), he will only have to send us an e-mail, stating which data he wants to rectify and how.

Right of suppressionin this case, the data subject may exercise the so-called “Right to be Forgotten”. The entity, once the legally established deadlines for the conservation of the different data held on the interested party have expired, will proceed to their definitive elimination. In any case, until the aforementioned deadlines expire, the data subject to this request will be blocked and will not be used in any way, beyond their mere conservation.

Right to restrict processingthe data subject may request the restriction of the processing of his or her data in the following cases:

• When the accuracy of the data of the same data subject is disputed;
• Where the processing is unlawful;
• When the entity no longer needs the data for the fulfilment of the purposes for which the data were originally collected;
• As long as the prevalence of the entity’s legitimate interest in the use of data is verified.

Right to portabilitythe data subject may request a copy of his or her data in a structured, commonly used and machine-readable format. This copy may be sent directly to the data subject or to the data subject’s choice, provided that this is technically possible.

Right to objectthe data subject may request that the entity processes his or her data on the basis of the legitimate interest of the entity. Similarly, he or she may exercise this right by objecting to processing for direct marketing and profiling purposes.

Right not to be subject to automated decisionsin the event that the entity carries out such activities (making automated decisions that affect in any way the rights or interests of the data subject without human intervention), the data subject may request, at any time, not to be subjected to these practices.

Legitimate interest

By legitimate interest, we mean the interest of Hotel Grand Luxor to use the personal data of the data subjects for legitimate purposes related to the initial purposes. For example: when we collect data from customers who purchase tickets, stays or both packages together, we will use this data for the formalisation of the contract, but we will not use it for any other purpose.alsoto send relevant information of a commercial nature related to the theme parks and hotels included in the “About us” section.

We do not consider that the legitimate interest in any way violates the fundamental rights and freedoms of the data subjects who, on the other hand, are always guaranteed all the rights provided for in current legislation, by means of a simple email to the Data Protection Officer.

Closing Rules

Users of this website understand that all information provided through social networks (post, mentions, comments, links, chat, videos, photos, etc.) may be public and, as such, used by third parties on which the entity has no technical possibilities of restriction. These third parties, without the authorisation of HOTEL GRAND LUXOR, may use these data published by users, for purposes not directly related to the interests of the company, without, therefore, deriving authorisation, concession, consent or mere knowledge of these facts. Therefore, users should be aware of this fact, connatural to the use of the information published through Social Networks.

All opinions and, in general, information posted by users only represent the opinion of the contributor and do not indicate any involvement on the part of our company.

With regard to the identification of users who link, comment or make posts and contributions (texts, videos, photos, etc.) by the companies managing and owning the platforms known as “Social Networks”, the entity cannot ensure compliance with the legislation in force at any given time on data protection and refers users to the Privacy Policies of each social network.

With regard to the content published in the Social Networking spaces used by HOTEL GRAND LUXOR, users are referred to follow the rules set out above.