Hotel Balneari Prats' privacy policy

Updated: June 23

Basic information on Data Protection

• Responsible: BALNEARI PRATS, SA (hereinafter BALNEARI PRATS)
• Purpose:
• Online service provision
• Web user management: Commercial communications related to our services.
• Manage data provided by candidates to the personnel selection process
• Legitimation: Express consent, execution of contract and legitimate interest
• Recipients: No data will be transferred to third parties, except:
• To companies specialized in personnel selection and profile analysis for workplace candidates.
• To reservation centers
• Due to legal obligation
• Rights: Access, rectify and delete data, as well as other rights, as specified in the additional information.
• Additional information: You can consult additional and detailed information on Data Protection in the attached Clauses found at: https://www.balneariprats.com/politica-de-privacidad/

BALNEARI PRATS, SA (hereinafter BALNEARI PRATS) we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe we should be transparent about it.

Therefore, and for the purposes of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter, “GDPR”) regarding the protection of natural persons with regard to processing of personal data and the free circulation of these data, and LAW 34/2002, of July 11, on Information Society Services and electronic commerce (hereinafter, “LSSI”), BALNEARI PRATS informs the user which, as data controller, will incorporate the personal data provided by users into an automated file.

Our commitment begins by explaining the following:

• Your data is collected so that the user experience improves, taking into account your interests and needs.
• We are transparent about the data we collect about you and why we do it.
• Our intention is to offer you the best experience possible. Therefore, when we are going to use your personal information we will always do so in compliance with the regulations, and when necessary, we will request your consent.
• We understand that your data belongs to you. Therefore, if you decide not to authorize us to process them, you can ask us to stop processing them.
• Our priority is to guarantee your security and process your data in accordance with European regulations.

If you would like more information about the processing of your data, please consult the different sections of the privacy policy below:

Who is responsible for the processing of your personal data?

Company name: BALNEARI PRATS, SA

Commercial name: BALNEARI PRATS

Registered office: Plaça Sant Esteve, 7 – 17455 -Caldes de Malavella (Girona)

CIF: A17143413

e-mail: info@balnearprats.com

BALNEARI PRATS has appointed an internal contact person as adaptation coordinator within its organization. If you wish to make a query regarding the processing of your personal data, you can contact him at info@balnearprats.com

What personal data do we collect?

The personal data that the user may provide:

• Name, address and date of birth.
• Telephone number and email address.
• Location.
• Information regarding payments and returns.
• IP address, date and time you accessed our services, internet browser you use and data about the device's operating system.
• Curriculum Vitae (CV) data of job candidates.
• Any other information or data that you choose to share with us.

In some cases, it is mandatory to complete the registration form to access and enjoy certain services offered on the website; Likewise, not providing the requested personal data or not accepting this data protection policy means the impossibility of subscribing, registering or participating in any of the promotions in which personal data is requested.

Why and for what purpose do we process your data?

At BALNEARI PRATS we process the information provided to us by interested parties for the following purposes:

• Manage the contracting of any of our services, whether online or in our physical offices.
• Manage the sending of the information requested from us.
• Manage the data provided by candidates to a workplace through their Curriculum Vitae (CV) with the sole purpose of completing the personnel selection process.
• Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and information tasks, being able to carry out automatic assessments, obtaining profiles and customer segmentation tasks. in order to personalize the treatment according to their characteristics and needs and improve the customer's online experience. Develop and manage contests, raffles or other promotional activities that may be organized.
• In some cases it will be necessary to provide information to Authorities or third companies for audit reasons, as well as handle personal data from invoices, contracts and documents to respond to complaints from clients or Public Administrations.

We inform you that the personal data obtained as a result of your registration as a user will form part of the Register of Processing Activities and Operations (RAT), which will be updated periodically in accordance with the provisions of the RGPD.

What is the legitimacy for the processing of your data?

The processing of your data may be based on the following legal bases:

• Consent of the interested party for contact forms, requests for information or registration for newsletters.
• Execution of contract for the contracting of services and products or the hiring of personnel in the workplace.
• Legitimate interest in the processing of our clients' data in direct marketing actions and express consent of the interested party for everything related to automatic assessments and profiling.
• Compliance with legal obligations to prevent fraud, communication with public authorities and claims from third parties.

How long do we keep your data?

The processing of data for the purposes described will continue for the time necessary to fulfill the purpose of its collection (for example, for the duration of the commercial relationship), as well as for compliance with the legal obligations arising from the processing of the data. data.

The retention period for the CVs of candidates for personnel selection processes, who are not selected, will be one year from their receipt.

To which recipients are your data communicated?

In some cases, only when necessary, BALNEARI PRATS will provide user data to third parties. However, data will never be sold to third parties. External service providers (for example, payment providers or delivery companies) with whom BALNEARI PRATS works may use the data to provide the corresponding services, however, they will not use such information for their own purposes or for transfer to third parties.

BALNEARI PRATS seeks to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have appropriate measures to protect personal data. These third parties have the obligation to ensure that the information is treated in accordance with data privacy regulations.

In some cases, the law may require the disclosure of personal data to public bodies or other parties, only what is strictly necessary for compliance with such legal obligations.

The personal data obtained may also be shared with other current or future BALNEARI PRATS companies.

Where is your data stored?

Generally, data is stored within the EU. For data sent to third parties that do not belong to the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCR) or because they have adhered to the “Privacy Shield” or the agreement that be valid at all times.

What rights do you have and how can you exercise them?

You can direct your communications and exercise your rights by submitting a request to the following email info@balnearprats.com

Under the provisions of the GDPR, you can request:

• Right of access: you can request information about the personal data that we have about you.
• Right to rectification: you can communicate any changes to your personal data.
• Right to deletion and to be forgotten: you can request deletion after blocking personal data.
• Right to limit processing: implies the restriction of the processing of personal data.
• Right to object: you can withdraw your consent to the processing of data, opposing further processing.
• Right to portability: in some cases, you can request a copy of personal data in a structured, commonly used and machine-readable format for transmission to another controller.
• Right not to be subject to individualized decisions: you can request that decisions not be made that are based solely on automated processing, including profiling, that produce legal effects or significantly affect the interested party.

In some cases, your request may be rejected if you request that data necessary to comply with legal obligations be deleted.

Likewise, if you have any complaints about the processing of your data, you can file a complaint with the data protection authority.

Who is responsible for the accuracy and veracity of the data provided?

The user is solely responsible for the veracity and correctness of the data included, exonerating BALNEARI PRATS from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information in the registration or subscription form. BALNEARI PRATS reserves the right to terminate the contracted services that have been concluded with users, in the event that the data provided is false, incomplete, inaccurate or not updated.

BALNEARI PRATS is not responsible for the veracity of information that is not its own creation and for which another source is indicated, and therefore does not assume any responsibility for hypothetical damages that may arise from the use of said information.

BALNEARI PRATS reserves the right to update, modify or delete the information contained on its web pages, and may even limit or not allow access to said information. BALNEARI PRATS is exonerated from liability for any damage or harm that the user may suffer as a result of errors, defects or omissions in the information provided by BALNEARI PRATS, provided that it comes from sources other than the same.

Likewise, the user certifies that they are over 14 years of age and that they have the necessary legal capacity to provide consent regarding the processing of their personal data.

How do we process the personal data of minors?

In principle, our products or services are not specifically aimed at minors. However, in the event that any of them are directed to minors under fourteen years of age, in accordance with article 8 of the RGPD and article 7 of LO 3/2018, of December 5 (LOPDGDD), BALNEARI PRATS will require the valid, free, unequivocal, specific and informed consent of their legal guardians to process the personal data of minors. In this case, the DNI or other form of identification of the person providing consent will be required.

In the case of those over fourteen years of age, the data may be processed with the user's consent, except in those cases in which the Law requires the assistance of the holders of parental authority or guardianship.

What security measures do we apply to protect your personal data?

BALNEARI PRATS has adopted the legally required security levels for the protection of Personal Data, and seeks to install any other additional means and technical measures at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of the Personal Data provided. to BALNEARI PRATS.

BALNEARI PRATS is not responsible for hypothetical damages or losses that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational functioning of this electronic system, caused by causes beyond the control of BALNEARI PRATS; of delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Center, in the Internet system or in other electronic systems, as well as damages that may be caused by third parties. people through illegitimate interference beyond the control of BALNEARI PRATS. However, the user must be aware that Internet security measures are not impregnable.

Links to other websites

On the website https://www.balnearprats.com/ there may be links to other web pages. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of said website, leaving BALNEARI PRATS disassociated from any type of responsibility regarding its privacy policy.

How do we use cookies?

The BALNEARI PRATS website and social networks use cookies in order to optimize and personalize your navigation. Cookies are physical information files that are hosted on the user's own terminal. The information collected through cookies serves to facilitate the user's navigation through the portal and optimize the browsing experience. The data collected through cookies can be shared with their creators, but in no case will the information obtained by them be associated with personal data or data that can identify the user.

However, if the user does not want cookies to be installed on their hard drive, they have the option of configuring the browser in such a way as to prevent the installation of these files. For more information see our Cookies Policy https://www.balnearprats.com/politica-de-cookies/

Can the privacy policy be modified?

This privacy policy may be modified, we recommend that you review it periodically.