With this privacy policy we inform you of the processing we do of the personal data that you provide or will provide during your browsing, in the event that you continue browsing. Likewise, it includes our data protection policy, for cases in which an express reference is made to it.

1. RESPONSIBLE FOR THE TREATMENT

• The person responsible for the treatment and the entity that owns the domain https://www.hostalmarissal.com (hereinafter, the Website) is Dorobe Hotels SLU with address at Av. Manuel Fraga Iribarne, number 15. Block 4, floor 1, door A. 29620 - Torremolinos (Málaga), with CIF no: B93503811

Contact information:

• Telephone: (+34) 952 52 01 99

• Email: reserva@hostalmarissal.com

• Data protection email: support@dorobe.com

2. PURPOSE OF THE TREATMENT AND LEGITIMATION

The purpose of the data you provide us is:

a) Send you the requested information and resolve any queries you make to us through the contact section made available to you on the website.

The basis of legitimation is the consent given.

b) Respond to the queries you make to us regarding the exercise of the rights about which we inform you below.

The basis of legitimation is compliance with legal obligations on our part.

c) By sending us your resume you authorize us to analyze the data and documents contained therein. They will be kept for a maximum period of six months, unless you tell us otherwise.

The basis of legitimation is the consent given.

d) The data collected through the contact forms have the purpose that is explicitly stated therein.

The basis of legitimation is the consent given.

e) Register and respond to requests made by users through the forms on the Website. The basis of legitimation is the consent given.

f) The provision and administration of hotel services, the processing of reservations and collection. The basis of legitimacy is the execution of our services

g) Prepare internal statistics to improve our services. The personal data provided will only be kept as long as our commercial relationship is maintained, and will be blocked once it has expired, during the period established by the legal requirements, available only to Courts and Tribunals to address possible claims.

h) Include functions provided by third parties (Google Maps, etc.). The basis of legitimation is the consent given.

i) If you expressly authorize us, we may send you information related to our activity, through any electronic means, including sending newsletters. This information will be kept as long as you do not request its deletion or opposition.

The basis of legitimation is the consent given.

Additional information: You can request additional and detailed information on Data Protection of our Treatment Records by sending us an email to support@dorobe.com

3. CONSERVATION PERIODS.

The data you provide us will be kept as a general rule, as long as there is a contractual relationship that binds us or you do not exercise your right to deletion, opposition and/or limitation of processing, in which case, the information will be blocked without use beyond its conservation, as long as it may be necessary for the exercise or defense of claims or some type of liability may arise that must be addressed. They will remain at the exclusive disposal of Judges and Courts, the Public Prosecutor's Office and the competent Administrations, in particular the Data Protection Administration, for the attention of responsibilities arising from the processing, during their prescription period. Once the indicated period has passed, they will be destroyed with appropriate security measures to guarantee their pseudonymization or total destruction.

In addition to the general treatment of the previous point, the conservation period of four years will be observed (Art. 66 et seq. of the General Tax Law), and six for accounting books and invoices (Art. 30 of the Commercial Code).

4. YOUR DATA PROTECTION RIGHTS

Data protection regulations give you the following rights in relation to the processing of personal data:

• Right of access: You have the right to access your personal data to know which data is being processed and the processing operations carried out with them.

• Right to rectification: Be able to request the modification of your data because it is inaccurate or not truthful.

• Right to portability: Being able to obtain a copy in an interoperable format of the data being processed.

• Right to limit processing: In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

• Right to deletion: Request the deletion of your data when the processing is no longer necessary.

• Right to object: Request the cessation of sending communications in the indicated terms.

• Right to revoke the consent given.

To exercise these rights, you must send an express request, along with a copy of your

DNI/NIF or equivalent and valid accreditation document, through the following means:

• EMAIL addressed to support@dorobe.com with the subject Data Protection. This submission must be made from the email address you included in the form/s. Otherwise, they will not be shown to you, as your identity is not considered sufficiently proven.

• BY POSTAL MAIL: Addressed to the address Av. Manuel Fraga Iribarne, num 15. Block 4, floor 1, door A. 29620 - Torremolinos (Málaga). If you do not receive a response in a timely manner from the Provider to your request, or you do not find it satisfactory, you are informed that the competent control authority is the Spanish Data Protection Agency (www.aepd.es). On its website you can find a series of models that will help you exercise your rights.

5. NO TRANSFER OF DATA / TRANSFER OF DATA

Users are expressly informed that their personal data will not be transferred in any case to third parties, except under legal obligation. Any exception to this rule will require your prior express, informed and unequivocal consent.

In compliance with our obligations, we may communicate your data to Public Administrations and courts, whenever such information is required in accordance with established legal processes.

If you contact our team through any of the social network profiles that DOROBE HOTELS SLU makes available to users, in addition to transferring the data you provide to us, you will also be transferring it to the entities responsible for that social network itself. To know the use and treatment that these entities make of your data, we advise you to carefully read the privacy policies of the social networks that you have active.

6. SECURITY MEASURES

In accordance with the provisions of current regulations on the protection of personal data, Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, the Provider complies with all the provisions of the RGPD and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in article 5 of the RGPD, by which they are treated lawful, loyal and transparent manner in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Appropriate technical and organizational policies have been implemented in order to protect your rights and freedoms, providing you with all the necessary information so that you can exercise your rights. However, you should be aware that Internet security measures are not impregnable.

This website uses HTTPS (secure connection). It is a security protocol that ensures that your data travels completely and safely, that is, the transmission of data between a server and a web user, and in feedback, is completely encrypted or encrypted.

7. MINORS

Minors (14 years old) may not use the services available through the Website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all acts carried out through the Website by minors. at their expense, including completing the forms with the personal data of said minors and marking, where appropriate, the boxes that accompany them. At NERJA CLUB 2088 SL we are not responsible for the veracity and accuracy of the data you provide.

The processing of personal data of a minor may only be based on their consent when they are over fourteen years of age.

Exceptions are cases in which the law requires the assistance of the holders of parental authority or guardianship for the celebration of the legal act or business in the context of which consent for the treatment is obtained.

The processing of data of minors under fourteen years of age, based on consent, will only be lawful if the consent of the holder of parental authority or guardianship is established, with the scope determined by the holders of parental authority or guardianship.

8. DURATION AND MODIFICATION OF THE PRIVACY POLICY

The Provider reserves the right to modify this Privacy Policy, in whole or in part, by publishing the changes on the Website. Likewise, the content and services provided, as well as the way in which they are presented, may be changed, deleted or added, without prior notice. Consequently, the Policies that are published at the time you access will be understood as current, so you must read them periodically.

Regardless of the provisions, access to the contents of the Website may be terminated, suspended or interrupted at any time without prior notice, without the User being able to demand any compensation.