DETAILED INFORMATION ON DATA PROTECTION

At IBERSOL 93 S.L., we have requested some of your personal data in order to process the relationship we have with you and to carry out related tasks. As established by the General Data Protection Regulation (GDPR), we provide you with the following detailed information regarding our Privacy and Data Protection Policy:
Who is responsible for the processing of your data?

Company Name: IBERSOL 93 S.L.

TIN: B-43400217

Address: C/ Vendrell, 2,
43840 Salou, Tarragona – Spain

Phone: 977 38 04 05

Email: dpd@ibersol.es

Source of Data: From the data subject.

Companies currently operating Hotels and Apartments under IBERSOL 93:

• BUDA SORRA S.L. (TIN: B-16765588)
Address: C/ Vendrell, 2, 43840 Salou, Tarragona
Hotels operated:
1. Hotel Ibersol Almuñécar Beach & Spa 4*
2. Hotel Ibersol Sorra d'Or 3*
3. Hotel Ibersol Torremolinos Beach 4*

• CATERING BUQUET S.L. (TIN: B-43503077)
Address: C/ Vendrell, 2, 43840 Salou, Tarragona
Hotel operated:
1. Hotel Ibersol Playa Dorada 3*

• CHE PRENDI S.L. (TIN: B-64515695)
Address: C/ Enric Morera 16-18, 08870 Sitges, Barcelona
Hotel operated:
1. Hotel Ibersol Antemare 4*

• HOTEL ATRIO DEL MAR S.L. (TIN: B-05376850)
Address: C/ Los Lluisos, 11, 30710 Los Alcázares, Murcia
Hotel operated:
1. Hotel Ibersol Atrio del Mar 4*

• NEW ARDEIT S.L. (TIN: B-47526355)
Address: C/ Vendrell, 2, 43840 Salou, Tarragona
Hotel operated:
1. Hotel Ibersol Siurell 4*

• TARRACO TOUR S.L. (TIN: B-43372796)
Address: C/ Vendrell, 2, 43840 Salou, Tarragona
Apartments operated:
1. Ibersol Spa Aqquaria Apartments
2. Ibersol Spa Aqquaria Suites Apartments

Why do we process your personal data?

At IBERSOL 93 S.L., we process your personal data to manage the relationship established between you and our companies. The explicit and specific purposes refer to the management of your reservations, stays, services requested, billing, resolution of queries, suggestions and incidents. We also do this to send you information that you request.

To improve and facilitate this relationship and its management, it is possible that we may generate some kind of profile with your data that is deemed appropriate for the aforementioned purpose. Under no circumstances will automate decisions be made about the data processed.

In accordance with Royal Decree 933/2021 regarding traveller registration, the following data is required:

Identifying data: Full name, gender, Spanish ID/passport/Foreign ID, phone numbers, email, nationality, date of birth, full address (address, city, country).
Other data: Number of travellers, relationship between travellers (in case of minors).
Contract data: Contract reference, date, and signatures.
Check-in/out: Date and time.
Payment data: Type of payment (cash, credit card, etc.), cardholder, expiration date, and payment date.
We inform you that the system of capturing data from the ID card or passport document that is carried out at check-in does not in any case imply that the hotel keeps a copy of the ID card or passport, as per the principle of data minimisation of the GDPR.
Sensitive data is not processed unless specifically required to meet client needs or preferences.
For recruitment purposes, the legitimation for the processing is the consent you have given us, and the data will be deleted after one year.
If the data are processed for the purpose of sending communications, the legitimacy for the processing is based on legitimate interest and will be deleted upon request

How long do we keep your data?
IBERSOL 93 S.L. will keep your data for as long as the relationship established between both parties remains in force. Once the relationship is terminated, our organisation will keep your data for as long as there are legal obligations that oblige us to do so. Once these legal periods have expired, your information will be deleted.

What legal basis do we have for processing your data?
The legal bases that legitimise the processing of your data by our organisation are:
• Consent of the data subject for one or more specific purposes. (GDPR Art. 6.1.a)
• Execution of a contract for the tax, accounting and administrative management of clients. (GDPR Art. 6.1.b)
• The processing is necessary for compliance with a legal obligation applicable to the controller. (GDPR Art. 6.1.c)
• Legitimate interest of the data controller: video surveillance cameras and sending of commercial communications, including by electronic means. GDPR Recital. LSSICE Art. 21.2)

Who will your data be shared with?
Data is shared based on the legal grounds that legitimise the processing for proper service delivery and which we have listed in the previous section. No additional transfers occur unless legally required.
The data is processed by the companies that manage the Ibersol Group hotels, as indicated in the list of companies in the section on data controllers.

What are your rights regarding your data?
Any person has the right to obtain confirmation as to whether IBERSOL 93 S.L. is processing personal data concerning them. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only keep it for the exercise or defence of claims. In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. IBERSOL 93 S.L. will cease to process the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
Where commercial communications are sent using as a legal basis the legitimate interest of the data controller, the data subject may object to the processing of his or her data for this purpose or may use the possibility of unsubscribing from the distribution list.

If you have given your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent prior to its withdrawal.

If you feel that your rights regarding the protection of your personal data have been violated, especially if you have not received a satisfactory response in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority through its website: www.agpd.es.
As a user, we also provide you with the dispute resolution platform made available by the European Commission at the following link:
https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=ES

How did we obtain your data?
The personal data that we process at IBERSOL 93 S.L. have been freely provided by you and come from various sources, all directly related to the provision of the services that you have asked us to provide and for the normal maintenance of fluid communication between both parties.