Privacy policy

Privacy Policy

Updated: June 23

Basic Information on Data Protection
Data Controller HOTEL PIRINEOS PELEGRI, S.L.U. (hereinafter, HOTEL PIRINEOS)
Purpose Provision of online services
Management of website users
Marketing correspondence related to our services.
Manage data contributed by candidates in the recruitment processes
Legal Basis Express consent, execution of contract and legitimate interest

No data will be transferred to third parties, except:

 due to legal obligation.
 to companies specialised in personnel selection and profile analysis for
candidates for a job post.

Rights To access, rectify and erase the data, as well as other rights, as specified in the
additional information.
You can consult the additional and detailed information on Data Protection in the
Annexed Clauses found at:


HOTEL PIRINEOS PELEGRI, S.L.U. (hereinafter, HOTEL PIRINEOS) works to offer you the best
possible experience through our products and services. In some cases, it is necessary to gather
information to achieve this. We care about your privacy and believe that we should be transparent in this
For this reason, and for the purposes of the provisions of Regulation (EU) 2016/679 of the European
Parliament and of the Council of 27 April 2016 (hereinafter, “GDPR”) relating to the protection of natural
persons with regard to the processing of personal data and the free circulation of the said data, and
LAW 34/2002, of 11 July on Information Society Services and E-Commerce (hereinafter, “LSSI” in its
Spanish acronym), HOTEL PIRINEOS informs the user that, as the data controller, it will incorporate the
personal data provided by users into an automated file.

Our commitment begins with us providing you with the following explanation:
 Your data is collected in order to improve the user experience, according to your interests and
 We are transparent about the data we collect about you and the reason why we do so.

 Our intention is to provide you with the best experience possible. For this reason, when we are
going to use your personal information we will always do so in compliance with the regulations,
and when necessary, we will request your consent.
 We understand that your data belongs to you. Therefore, if you decide not to authorise us to
process your data, you can ask us to stop doing so.
 Our priority is to ensure your security and to process your data in accordance with European
If you would like more information on the processing of your data, please read the different sections of
the privacy policy below:

Who is the data controller responsible for the processing of your
personal data?

Registered address: Avda Salvador Dali, 68 - 17600- Figueres (Girona)
TAX CODE (C.I.F.): B17331190
HOTEL PIRINEOS has appointed an internal contact person as the adaptation coordinator within its
organisation. If you wish to make any queries regarding the processing of your personal data, you can
contact them through
What personal data do we collect?
The personal data that the user may provide us with:
 Name, address and date of birth.
 Phone number and e-mail address.
 Location.
 Information regarding payments and refunds.
 IP address, date and time when you accessed our services, the Internet browser used and data
about the operating system of the device.
 The data contained in Curriculum Vitae (CV) of candidates for a job post.
 Any other information or data you choose to share with us.
In some cases, it is mandatory to complete the registration form to access and enjoy certain services
offered on the website; thus, not providing the requested personal data or not accepting this data
protection policy means that it will be impossible to subscribe, register or participate in any of the
promotions in which personal data is requested.

Why do we process your data and what for?

At HOTEL PIRINEOS we process the information provided by data subjects for the following purposes:

 To manage the contracting of any of our services, either online or through our physical offices.
 To arrange to send you the information that you may request from us.
 To manage the data provided by candidates for a job post through their Curriculum Vitae (CV)
with the sole purpose of carrying out the personnel selection process.
 To develop marketing activities and carry out the maintenance and management of the
relationship with the user, as well as the management of the services offered through the
website and tasks related to information, being able to make automatic evaluations, obtaining
profiles and segmentation tasks regarding customers in order to customise the processing
according to their characteristics and needs as well as improving the online experience of the
 To develop and manage contests, raffles or other promotional activities that may be organised.
 In some cases, it will be necessary to provide information to the Authorities or third parties for
audit purposes, as well as handle the personal data contained in invoices, contracts and
documents to respond to complaints from customers or from Public Administrations.
We inform you that the personal data obtained as a result of your registration as a user will form part of
the Record of Processing Activities (RoPA), which will be updated periodically in accordance with the
provisions set forth in the GDPR.

What is the legal basis for the processing of your data?

The processing of your data may be based on the following legal bases:
 Consent from the data subject for contact forms, requests for information or registration for
 The execution of a contract for the contracting of services and products or the employment of
 Legitimate interest for the processing of our customers’ data in direct marketing actions and the
express consent of the data subject for everything related to automatic evaluations and profiling.
 Compliance with legal obligations for fraud prevention, communication with public authorities
and third-party claims.

How long do we keep your data?

The processing of the data for the purposes described will be kept for the time necessary to fulfil the
purpose of its collection (for example, for the duration of the commercial relationship), as well as for the
fulfilment of the legal obligations that may arise from the processing of the data.
The conservation time for the CVs of unselected candidates in personnel selection processes, will be
one year from the date they were received.

Which recipients is your data communicated to?

In some cases, only when necessary, HOTEL PIRINEOS will provide user data to third parties.
However, the data will never be sold to third parties. External service providers (e.g., payment providers
or delivery companies) which HOTEL PIRINEOS works with may use the data to provide the
corresponding services, however, they will not use this information for their own purposes or transfer it
to third parties.
HOTEL PIRINEOS strives to ensure the security of personal data when it is sent outside the company
and ensures that third-party service providers respect confidentiality and have the appropriate measures
in place to protect personal data. These third parties are obliged to ensure that the information is
processed in accordance with data privacy regulations.
In some cases, the law may require that personal data is disclosed to public bodies or other parties, only
information which is strictly necessary to comply with the said legal obligations will be disclosed.
The personal data obtained may also be shared with other current or future companies of HOTEL

Where is your data stored?

In general, the data is stored within the EU. As regards data sent to third parties outside the EU, we will
ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules
(BCRs) or because they have adhered to the “Privacy Shield” or the agreement that is in force at any
given time.

What rights do you have and how can you exercise them?
You can address your correspondence and exercise your rights by sending a request to the following e-
mail address:

Under the provisions set forth in the GDPR you can request:
 Right of access: you can request information about the personal data we have about you.
 Right to rectification: you can communicate any change to your personal data.

 Right to erasure and to be forgotten: you can request the erasure of your personal data prior to
it being blocked.
 Right to restrict the processing: this means the processing of personal data will be limited.
 Right of objection: you can withdraw the consent to process the data, objecting to its continued
 Right to portability: in some cases, you can request a copy of the personal data in a structured,
commonly used and machine-readable format for its transfer to another controller.
 Right not to be the subject of automated decision-making: you can request that decisions not be
made based solely on automated processing, including profiling, which produces legal effects or
significantly affects the data subject.

In some cases, the request may be rejected if you request the erasure of data necessary for compliance
with legal obligations.
Similarly, if you have any complaints about the processing of the data you can file a complaint with the
data protection authority.

Who is responsible for the accuracy and veracity of the data

The user is solely responsible for the veracity and accuracy of the data included, exonerating HOTEL
PIRINEOS of any liability in this regard. In any case, users guarantee and are responsible for the
accuracy, validity and authenticity of the personal data provided, and they undertake to keep them duly
updated. The user agrees to provide complete and correct information in the registration or subscription
form. HOTEL PIRINEOS reserves the right to terminate the contracted services that have been
concluded with users, in the event that the data provided is false, incomplete, inaccurate or not updated.
HOTEL PIRINEOS is not responsible for the veracity of the information that it has not elaborated itself
and for which another source is indicated: For this reason, it does not accept liability for any hypothetical
damages that might be caused from the use of the said information.
HOTEL PIRINEOS reserves the right to update, modify or delete the information contained in its website
and may even limit or deny access to the said information. HOTEL PIRINEOS is held harmless for any
damage or harm that the user may suffer as a result of errors, defects or omissions in the information
provided by HOTEL PIRINEOS whenever it comes from external sources.
Similarly, the user certifies that they are over 14 years of age, and that they have the necessary legal
capacity to provide consent regarding the processing of their personal data.

How do we process the personal data of minors?

In principle, our products or services are not specifically aimed at minors. However, in the event that any
of them is addressed to minors under fourteen years of age, in accordance with Article 8 of the GDPR
and Article 7 of OL 3/2018, of 5 December on Data Protection (LOPDGDD in its Spanish acronym),
HOTEL PIRINEOS will require valid, free, unequivocal, specific and informed consent from the legal

guardians to process the personal data of minors. In this case, the National ID No. (DNI) or other form of
identification of the person who gives the consent will be required.
In the case of those over 14 years of age, the data may be processed with the consent of the User,
except for cases in which the Law requires the attendance of the holders of the parental authority or

What security measures do we apply to protect your personal data?

HOTEL PIRINEOS has adopted the legally required data protection security levels, and it aims to apply
any other means and additional technical measures it has available to prevent the loss, misuse,
alteration, unauthorised access and theft of Personal Data provided to HOTEL PIRINEOS.
HOTEL PIRINEOS is not responsible for any hypothetical damages that may arise from interference,
omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operation of
this electronic system, resulting from causes beyond the control of HOTEL PIRINEOS; delays or blocks
in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads
in the Data Processing Centre, in the Internet system or in other electronic systems, as well as any
damages that may be caused by third parties through illegitimate interferences beyond HOTEL
PIRINEOS’ control. Nevertheless, the user must be aware that Internet security measures are not

Links to other websites

There may be links to other websites on the website. By clicking
on one of these links and accessing an external website, the visit will be subject to the privacy policy of
the said website, with HOTEL PIRINEOS being held harmless of any liability with regards its privacy

How do we use cookies?

The website and the Social Network sites of HOTEL PIRINEOS use cookies to optimise and personalise
your browsing experience on them. Cookies are physical information files that are stored in the user’s own
computer. The information collected through cookies is used to facilitate the user’s browsing through the
website and optimise the browsing experience. The data collected through cookies can be shared with their
creators, but under no circumstances will the information obtained by them be associated with any personal
data or data that can identify the user.
However, if the user does not want cookies to be installed on their hard drive, they have can set the browser
in such a way that prevents the installation of these files. For more information see our Cookies Policy

Can the privacy policy be changed?

This privacy policy may be modified. We recommend that you review the privacy policy periodically.

Go up