A. Data controller

We wish to inform you that the personal data that you submit in the context of our contractual relation will be processed by ONA SOL, S.L.U., C/ Estocolmo, 4, 03503, Benidorm (Alicante), (hereinafter the “Hotel”), for the purposes described below. Unless expressly indicated otherwise at the time of the data collection, all the personal data are required as essential elements for the management, maintenance and control of our contractual relation. Failure to provide this data will make it impossible to process you application or provide the service you have contracted. The personal data shall be collected exclusively for the purposes indicated in this Privacy Policy

You hereby confirm and guarantee the truth and accuracy of the data provided and that they reflect your current status. In this regard, you undertake to notify us of any changes to these data in accordance with the procedure established in section E. Rights of the interested party.

B. Purposes of processing

We inform you that your data will be processed by the Hotel for the following purposes:

Based on the contractual relationship:

a. To process your registration as Hotel customer and for the subsequent business relation with you.

b. Managing, maintaining and effectively controlling, administrative and economically, the business relation.

Based on legal obligations:

a. Notify the public authorities or regulatory or government bodies in those cases where it is necessary to so under law, local by-laws or in compliance with regulatory requirements.

Based on the Hotel’s legitimate interests:

a. Carry out commercial actions and/or advertising communications through any medium including electronic or equivalent communications relating to goods or services similar to those contracted with the Hotel, even when this contractual relation ended.

b. Create profiles based on the personal data available to the Hotel in order to ascertain the goods and services most appropriate to your profile, thus maximizing their results and in this way offering you the best of any goods and services of interest to you.

c. To carry out customer satisfaction surveys with the goods and/or the services you have contracted in order to assess your satisfaction so that the Hotel can improve its processes and services.

d. To record your voice and/or image and save the telephone conversation having expressly informed you of this fact. It is in the Hotel’s legitimate interests to maintain the security and the quality of its service and to use the recordings, should it be necessary to protect its legal position in the event of any possible conflict.

e. To communicate the personal data to other companies in the Port Hotels Group, having centralized the group’s administrative and computing processes.

Based on your explicit consent:

a. Should you so authorize, the Hotel may offer you, goods and services complementary and other than those that you contracted, as well as third party products that may interest you, including electronic or any other medium, even when this contractual relation ended.

C. Recipients of the data

The Hotel may communicate your personal data in the terms described in the section B. Purposes of processing to the following entities:

• Public authorities or regulatory or government bodies in those cases where it is necessary to do so under law, in accordance with local bylaws or in compliance with regulatory requirements.

• Third party entities and companies in Port Hotels Group for the purposes described in section e) collection in Section B (Purposes of processing).

Aside from the aforementioned data communications, the Hotel also collaborates with some third-party service providers who have access to your personal data and who process the aforementioned data on behalf of the Hotel as a result of a provision services.

The Hotel pursues strict selection criteria for its service providers in order to comply with its obligations in data protection matters and undertakes to enter into the corresponding data processing agreements through which, among other obligations, it shall impose the following requirements, application of technical and organizations means; processing of personal data for the agreed purposes and only in accordance of written instructions from the Hotel; and deleting or returning data to the Hotel when the provision of services is complete.

Specifically, the Hotel will contract the provision of service from third party suppliers who, by way of example without limitation, perform their activity in the following sectors: legal advisory services, professional service companies, companies relating to maintenance, payment process, technological service providers, IT service providers, instant messaging and call center companies.

D. Data sourcess

In addition to the personal data that you have provided, the Hotel may also process personal data obtained, from common files, sector files and/or public bodies, in accordance with the purposes and legitimate grounds described in section “B. Purposes of processing” above.

In accordance with the foregoing, the Hotel will process the personal data facilitated by the aforementioned third parties from the following categories:

• Identification data.

• Postal or mail addresses.

Specially protected personal data will not be obtained.

E. Rights of the interested party

You may revoke the consent granted in the cases indicated in this document at any time, or request. We inform you that, pursuant to current law, you are entitled to exercise your rights of access, rectifications, cancellation and opposition, as well the right to deletion, restriction of processing and right to portability of your data, by attesting to your identity (by means of a copy of your national or equivalent identity document) at the following address: ONA SOL, S.L.U., C/ Estocolmo, 4, 03503, Benidorm (Alicante), or the following privacy email rgpd@porthotels.es.

If you consider that ONA SOL, S.L.U., has failed to comply with the aforementioned rights, you may file a complaint with the Spanish Data Protection Agency.

F. Conservation

Your personal data will be kept throughout the period of your contractual relation to the Hotel. Upon termination of the agreement, your personal data will be deleted as soon as all the actions required to manage and conclude any obligation remaining between the parties have been completed, carrying out all the administrative formalities required during this period, except in those cases where mailing of commercial communications apply.

Without prejudice to the foregoing, your data will remain duly blocked while any liabilities resulting from the execution of our contractual agreement remain, or any other legal obligations with which the Hotel is required to comply.

In this regard, the Hotel guarantees that it will not process the data unless this is necessary in order to formulate, exercise or defend any complaints or claims, or when it is required to do so in order to provide Public Authorities or Judges and Courts with the data during the limitation period of your legal rights or obligations.