BASIC INFORMATION ON DATA PROTECTION Controller: 1881 HOTELS, S.L.U. (hereinafter 1881 Barcelona Gran Rosellón Hotel) Purpose: Provision of online reservation services, management of web users, commercial communications related to our services, management of data provided by job applicants in the personnel selection process. Legitimation: Consent of the data subject, Contractual performance, Legitimate interest, and Compliance with legal obligations. Recipients: Data will not be transferred to third parties, except: - For legal obligations. - To companies within the PREMIUM MIX group. - To companies managing the booking engine. - To specialized companies in personnel selection processes and profile analysis for job candidates. Rights: Access, rectification, and erasure of data, as well as other rights, as explained in the additional information. Additional Information: You can consult additional and detailed information on Data Protection in the Annexed Clauses found at: https://www.1881madridventashotel.com/privacy-policy. PRIVACY POLICY At 1881 HOTELS, S.L.U. (hereinafter 1881 Barcelona Gran Rosellón Hotel), we strive to provide you with the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this goal. We care about your privacy, and we believe that transparency is essential in this regard. Therefore, and for the purposes set forth in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27 (hereinafter "GDPR") on the protection of individuals with regard to the processing of personal data and the free movement of such data, Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), and Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (hereinafter "LSSI"), 1881 Barcelona Gran Rosellón Hotel informs the user that, as the data controller, it will incorporate the personal data provided by users into the corresponding record of processing activities (RAT). Our commitment begins by explaining the following: - We collect your data to improve the user experience, attending to your interests and needs. - We are transparent about the data we obtain about you and the reasons for doing so. - Our intention is to offer you the best possible experience. Therefore, whenever we use your personal information, we will do so in compliance with the regulations, and when necessary, we will request your consent. - We understand that your data belong to you. Therefore, if you decide not to authorize us to process them, you can request that we stop processing them. - Our priority is to ensure your security and treat your data in accordance with European regulations. If you want more information about the processing of your data, please consult the different sections of the privacy policy below: Who is the data controller of your personal data? Business name: 1881 HOTELS, S.L.U. Trade name: 1881 Barcelona Gran Rosellón Hotel Registered address: Calle Alcalá, 269, 28027 MADRID (Madrid) Tax Identification Number: B-64301708 Email: protecciondatos@pmg1881.com 1881 Barcelona Gran Rosellón Hotel, in accordance with article 37.1.a of the General Data Protection Regulation (EU) 2016/670 (GDPR), has appointed FORRELLAT CONSULTORS, S.L. as the Data Protection Officer (DPO). If you wish to make an inquiry regarding the processing of your personal data, you can contact them via the email dpo.pmg1881@forrellatconsultors.cat. What personal data do we collect? The personal data that the user may provide include: - Name, address, and date of birth. - National identity document, passport. - Phone number and email address. - Location. - Information related to payments and refunds. - Information related to reservations made by users. - Information related to basic health data to use specific thermal treatments offered by the spa. - IP address, date, and time of access to our services, internet browser used, and data about the device's operating system. - Any other information or data you choose to share with us. - In some cases, filling out the registration form is mandatory to access and enjoy certain services offered on the website; likewise, not providing the requested personal data or not accepting this privacy policy will make it impossible to subscribe, register, or participate in any of the promotions that require personal data. Why and for what purpose do we process your data? At 1881 Barcelona Gran Rosellón Hotel, we process the information provided by interested parties for the following purposes: - Manage reservations or contract our services, either online or by phone. - Manage the sending of information requested by users. - Manage data provided by job applicants through their Curriculum Vitae (CV) solely for the purpose of carrying out the personnel selection process. - Develop commercial actions and maintain and manage the relationship with the user, as well as the management of services offered through the website and information tasks, including the possibility of making automatic assessments, obtaining profiles, and customer segmentation to personalize the treatment according to their characteristics and needs and improve the customer's online experience. Develop and manage contests, raffles, or other promotional activities that may be organized. - In some cases, it will be necessary to provide information to authorities or third-party companies for audit purposes, as well as to manage personal data from invoices, contracts, and documents to respond to customer claims or Public Administrations. - We inform that the personal data obtained as a result of your registration as a user will be part of the Register of Activities and Processing Operations (RAT), which will be updated periodically in accordance with the provisions of the GDPR. What is the legal basis for processing your data? The processing of your data may be based on the following legal bases: - Consent of the data subject for contracting services and products, contact forms, requests for information, or subscribing to newsletters. - Legitimate interest for the processing of data from our customers in direct marketing actions and the express consent of the data subject for everything related to automatic assessments and profiling. - Existence of a contractual or pre-contractual relationship with the data subjects. - Compliance with legal obligations for fraud prevention, communication with public authorities, and claims from third parties. How long do we retain your data? The processing of data for the purposes described will be maintained for the time necessary to fulfill the purpose of their collection for the duration of the business relationship and to comply with the legal obligations arising from the data processing. The retention period for the CVs of job applicants not selected will be one year from receipt. To which recipients are your data communicated? In some cases, only when necessary, 1881 Barcelona Gran Rosellón Hotel will provide user data to third parties. However, data will never be sold to third parties. External service providers (e.g., payment providers or courier companies) with whom 1881 Barcelona Gran Rosellón Hotel works may use the data to provide the corresponding services, but they will not use this information for their purposes or disclose it to third parties. 1881 Barcelona Gran Rosellón Hotel ensures the security of personal data when sent outside the company and ensures that third-party service providers respect confidentiality and have adequate measures to protect personal data. These third parties are required to ensure that the information is processed in accordance with data privacy regulations. In some cases, the law may require the disclosure of personal data to public bodies or other parties; only the strictly necessary information will be disclosed to comply with such legal obligations. The personal data obtained may also be shared with other companies within the PREMIUM MIX group. Where are your data stored? As a general rule, data is stored within the European Union. Data sent to third parties outside the EU will ensure they offer a sufficient level of protection, either through Binding Corporate Rules (BCR) or Standard Contractual Clauses. What rights do you have, and how can you exercise them? You can direct your communications and exercise your rights through a request to the following email address: protecciondatos@pmg1881.com. In accordance with the GDPR, you can request: - Right of access: You can ask for information about the personal data we have about you. - Right of rectification: You can communicate any changes to your personal data. - Right to erasure and the right to be forgotten: You can request the deletion, subject to blocking, of personal data. - Right to restriction of processing: It involves restricting the processing of personal data. - Right to object: You can withdraw your consent for the processing of data, objecting to further processing. - Right to data portability: In some cases, you can request a copy of the personal data in a structured, commonly used, and machine-readable format for transmission to another controller. - Right not to be subject to automated individual decision-making: You can request that decisions based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, not be made. In some cases, the request may be refused if it requests the deletion of data necessary to comply with legal obligations. Likewise, if you have any complaints about the processing of data, you can file a complaint with the data protection authority. Who is responsible for the accuracy and truthfulness of the provided data? The user is solely responsible for the accuracy and correctness of the data included, exempting 1881 Barcelona Gran Rosellón Hotel from any liability in this regard. Users guarantee and respond, in any case, to the accuracy, validity, and authenticity of the personal data provided and undertake to keep them properly updated. The user agrees to provide complete and correct information in the registration or subscription form. 1881 Barcelona Gran Rosellón Hotel reserves the right to terminate services contracted with users if the data provided are false, incomplete, inaccurate, or not updated. 1881 Barcelona Gran Rosellón Hotel is not responsible for the truthfulness of information that is not of its own creation and for which another source is indicated, so it does not assume any responsibility for any hypothetical damages that may arise from the use of such information. 1881 Barcelona Gran Rosellón Hotel reserves the right to update, modify, or delete the information contained on its web pages, even limiting or denying access to such information. 1881 Barcelona Gran Rosellón Hotel is exempt from any responsibility for damages or losses that may be caused by errors, defects, or omissions in the information provided by 1881 Barcelona Gran Rosellón Hotel, provided that it comes from external sources. Likewise, the user certifies that they are over 14 years of age and have the legal capacity necessary for the consent to the processing of their personal data. How do we treat the personal data of minors? In principle, our products or services are not specifically aimed at minors. However, in the event that any of them are directed at minors under the age of fourteen, in accordance with article 8 of the GDPR and article 7 of Law 3/2018, of December 5 (LOPDGDD), 1881 Barcelona Gran Rosellón Hotel will require valid, free, unambiguous, specific, and informed consent from their legal guardians to process the personal data of minors. In this case, the ID or other form of identification of the person providing consent will be required. In the case of minors over the age of fourteen, data processing may proceed with the user's consent, except in cases where the law requires the assistance of parents or legal guardians. What security measures do we apply to protect your personal data? 1881 Barcelona Gran Rosellón Hotel has implemented the legally required security levels for the protection of Personal Data and endeavors to install additional technical means and measures at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the Personal Data provided to 1881 Barcelona Gran Rosellón Hotel. 1881 Barcelona Gran Rosellón Hotel is not responsible for hypothetical damages or losses that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns, or disconnections in the operational functioning of this electronic system, motivated by causes beyond 1881 Barcelona Gran Rosellón Hotel's control; delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines, overloads in the Data Processing Center, the Internet system, or other electronic systems, as well as damages that may be caused by third parties through illegitimate intrusions beyond 1881 Barcelona Gran Rosellón Hotel's control. Nevertheless, the user should be aware that security measures on the Internet are not impregnable. Links to other websites On the website https://www.1881madridventashotel.com, there may be links to other web pages. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of that website, and 1881 Barcelona Gran Rosellón Hotel will be disassociated from any liability regarding its privacy policy. How do we use cookies? Cookies are used on 1881 Barcelona Gran Rosellón Hotel websites and social media platforms to optimize and personalize your navigation. Cookies are physical information files stored