1. Data controller
In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are hereby informed that the data controller is:
- Data controller: Serenay Málaga Hotel
- Owner/company name: Inversión y Transformación de Bienes Raíces S.L.
- Address: Calle Plaza de Toros Vieja, 11 – 29002 Málaga
- Email: serenay@serenayhotel.com
2. Personal data collected
The following personal data may be collected through this website:
- Identification data (name and surname)
- Contact details (email, telephone number)
- Data necessary for managing bookings
- Browsing data (IP address, browser type, pages visited)
3. Purpose of processing
The personal data provided by the user will be processed for the following purposes:
- To respond to requests for information made through the website
- To manage hotel reservations and the provision of contracted services
- To send communications related to our services
- To comply with applicable legal obligations
4. Legitimacy for processing
The legal basis for the processing of personal data is:
- The user’s consent
- The execution of a contract or pre-contract (reservation management)
- Compliance with legal obligations
5. Data retention
Personal data will be kept for the time necessary to fulfil the purpose for which it was collected and, subsequently, for the legally required periods.
6. Recipients of the data
Personal data will not be transferred to third parties except where legally required or when necessary for the proper provision of the service, as in the case of the external booking engine integrated into this website, which acts as the data processor and processes the data in accordance with current data protection regulations.
7. User rights
The user may exercise the following rights at any time:
- Access
- Rectification
- Erasure
- Restriction of processing
- Objection
- Portability
To exercise these rights, the user must contact the Data Controller by any means permitted by law, attaching a copy of an official document that allows their identification, via:
- Postal address: Calle Plaza de Toros Vieja, 11 – 29002 Málaga
- Email: serenay@serenayhotel.com
8. Complaints
If users consider that the processing of their personal data does not comply with current regulations, they may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security measures
Serenay Málaga Hotel takes the necessary technical and organisational measures to ensure the security, integrity and confidentiality of personal data, preventing its loss, alteration or unauthorised access.
10. Changes to the privacy policy
Serenay Málaga Hotel reserves the right to modify this Privacy Policy to adapt it to new legislation or case law.