Privacy Policy

1. RESPONSIBLE FOR THE WEBSITE:

 

MOLSAN GESTIÓN Y TRAMITACIÓN, S.L.

Name or company name: MOLSAN GESTIÓN Y TRAMITACIÓN, S.L. (B61082657)

Address: Paseo de la Castellana, 141 pl. 18- 19, 28046, MADRID

Contact email: club@smhoteles.com

Mercantile Register: Barcelona, volume 29063, folio 68, sheet B147971

 

In accordance with current legislation on the protection of personal data, and as the responsible party for this website, we would like to inform users that we have created a safe and reliable space, and therefore we would like to share with you our principles regarding your privacy:

We never ask for personal information unless it is absolutely necessary to provide the services or information you request.

We never share our users' personal information with unauthorised parties. We only share them in order to comply with the law or to develop the services requested by the client/user, such as booking and accommodation arrangements or essential tax and administrative procedures.

We will never use your personal information for purposes other than those described in this privacy policy.

 

It should be noted that this privacy policy may change according to legal or self-regulatory requirements and users are therefore advised to review it periodically. It applies when users choose to fill out one of our contact forms that collects personal information.

 

This website has been adapted to the requirements of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the Protection of Individuals with regard to the Processing of Personal Data (RGPD), as well as Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE) and the Retail Trade and Consumer Protection Acts.

The owner of this website and the data controller for the processing of personal data is identified in the Legal Notice section of this website.

For the purposes of the above-mentioned General Data Protection Regulation, the personal data sent to us through the web forms or user registrations will be processed as "web users" or "customers" or "members", as the case may be.

We implement all technical and organisational security measures required by current legislation when processing our users' data.

 

2. PRINCIPLES WE APPLY TO YOUR PERSONAL DATA

When processing your personal data, we will apply the following principles, which comply with the requirements of the new European Data Protection Regulation:

Principle of lawfulness, loyalty and transparency: We will always ask for your consent to process your personal data for one or more specific purposes, which will be communicated to you in full transparency.

Principle of data minimisation: We will only ask for data that is strictly necessary for the purposes for which we request it. The minimum possible.

Principle of limited retention: Data will be retained for no longer than is necessary for the purposes of the processing; depending on the purpose, we will inform you of the relevant retention period; in the case of subscriptions, we will periodically review our lists and delete records that have been inactive for a significant period of time, where physically or digitally possible.

Principle of integrity and confidentiality: Your data will be processed in a manner that ensures adequate security of personal data and confidentiality. You should know that we take all necessary precautions to prevent unauthorised access or misuse of my users' information by third parties.

 

3. HOW DO WE PROCESS YOUR PERSONAL DATA?

The personal data that we process on this website come from the various forms that are available to you, such as the contact form and the reservation form, which you fill in and send, accepting the legal conditions attached to each of them.

 

4. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

Anyone is entitled to obtain confirmation as to whether or not that organisation is processing personal data relating to them, and also to:

Request access to personal data concerning the data subject

Request correction or deletion of the data

Solicitar la limitación de su tratamiento

Oppose the data processing

Request the restriction of data processing

Withdraw consent (without retroactive effect, which is not allowed by law)

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, you may ask us to restrict the processing of your data, in which case the data will only be kept for the purposes of exercising or defending claims or for legal obligations imposed by public administration or current legislation.

In certain circumstances and for reasons related to your particular situation, you may oppose the processing of your data. The data controller of this website will cease processing the data, except for compelling legitimate reasons or for the exercise or defence of possible claims. As a data subject, you have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and to have it transferred to another controller when:

The processing is based on consent.

The data have been provided by the person concerned.

The processing is carried out by automated means.

When you exercise your right to data portability, you have the right to have your personal data transferred directly from controller to controller, where technically possible.

Data subjects also have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them is in breach of the Regulation.

 

5. WHY DO WE PROCESS YOUR PERSONAL DATA?

When a user visits our website, for example to request information from the owner, subscribe to the newsletter or make a purchase, they are providing personal information for which the owner of the website (identified at the beginning) is responsible. This information may include personal information such as your name, physical address, email address, telephone number and other information. By providing this information, the user consents to the collection, use, management and storage of their data by the data controller only as described in the Legal Notice and in this Privacy Policy.

There are various personal information collection systems on this website and we process the information provided by data subjects for the following purposes for each collection system (forms):

Contact forms: We request the following personal information: Name, email and telephone to respond to user requests. For example, we may use this information to respond to your request and to answer any questions, complaints, comments or concerns you may have regarding the information contained on the website, the products advertised through the website, the processing of your personal data, questions regarding the legal texts contained on the website, as well as any other questions you may have that are not covered by the Terms and Conditions of Purchase. We inform you that the data you provide will be stored on servers within the EU.

Booking form: We ask for the following personal information: Name, email address, ID and address, date of birth, information to proceed with payment (payment method information) and to carry out the required purchase process.

Membership form: We ask you to provide the following personal information: Name, email address, ID, date of birth, nationality and address.

There are other purposes for which we process your personal data:

Ensure compliance with the terms of use and applicable law. This may include the development of tools and algorithms that help this website guarantee the confidentiality of the personal data that it collects.

Support and improve the services offered on this website.

Manage social media. Our company has a presence on social media. The processing of the data of persons who become followers on the social media networks of the official pages of the company is governed by this section. As well as the terms of use, privacy policy and access rules applicable to the social media in question and accepted in advance by the system administrator. We will process your data in order to correctly manage your presence on the social media and to keep you informed about the company's activities, products or services. As well as for any other purpose that the regulations of the social media platform allow. Under no circumstances will we use the profiles of our followers on social media to send them advertising on an individual basis.

In accordance with the provisions of the European General Data Protection Regulation (RGPD) 2016/679 and the National Law on the Protection of Personal Data LOPDGDD 3/2018, our company (see Legal Notice) is responsible for the processing of data relating to users of the website.

Our company does not, and will not, sell, rent or transfer any personally identifiable information to third parties without prior consent. However, in some cases there may be collaboration with other professionals, in which case the consent of users will be required, informing them of the identity of the collaborator and the purpose of the collaboration. This will always be carried out with the strictest safety standards.

 

6. LEGAL BASIS FOR PROCESSING YOUR DATA

The legal basis for the processing of your personal data is consent. In order to contact us or take any action that involves the processing of personal data on this website, you must agree to this privacy policy. The future or commercial offer of products and services is based on the consent requested and the withdrawal of this consent shall in no way imply the execution of the subscription contract or of the actions prior to its withdrawal, such as the purchase of items. The legal basis that legitimises purchases is trade and consumer legislation, both digital and retail.

 

7. DATA CATEGORIES

The categories of data processed are identification data and data relating to the payment system in the event of a booking or purchase. No categories of specially protected data are processed.

 

8. HOW LONG WILL WE KEEP YOUR DATA?

The personal data provided will be kept until deletion is requested by the interested party and for as long as the regulations require us to keep it in order to ensure compliance with our legal obligations. Once the legal retention periods have expired, they are blocked so that they are only available to the authorities that may need them, and once the legal blocking period has expired, they are removed from the system.

 

9. WHO WILL RECEIVE YOUR DATA?

Only internal data communications are carried out with another company in the same group. No other data will be communicated to third parties, except for that which is necessary to comply with the relevant legal obligations imposed by public administrations and to be able to carry out the process requested by the web user or customer, for example, in the purchase process we are obliged to communicate your identification data to the transport company in order to deliver your order.

 

10. DATA SECRECY AND SECURITY

The data controller undertakes to use and process the user's personal data in a confidential manner and in accordance with the purposes for which they are intended, as well as to comply with its obligation to store such data and to adopt all measures necessary to prevent its alteration, loss, unauthorised processing or access, in accordance with the provisions of current data protection legislation.

This website includes an SSL certificate. It is a security protocol that ensures that your data is transferred in a complete and secure manner, i.e. that the transmission of data between a server and a web user is fully or partially encrypted.

The data controller cannot guarantee the absolute impenetrability of the internet and, therefore, the violation of data by fraudulent access by third parties, although it will take all the measures at its disposal to eliminate, reduce or mitigate their effects as much as possible.

With regard to the confidentiality of the process, the controller will ensure that all parties authorised by the company to process the customer's data (including its employees, collaborators and suppliers) are bound by an appropriate confidentiality obligation (whether contractual or legal).

In the event of a security incident, the controller will notify the customer immediately upon becoming aware of the incident and will provide timely information relating to the security incident as it becomes known or as the user reasonably requests.

 

1. INTELLECTUAL AND INDUSTRIAL PROPERTY

Molsan Gestión y Tramitación, S.L. . All rights reserved.

The contents of this website, as well as any documents, trade names, trademarks or logos contained therein, are subject to the intellectual and industrial property rights of its owner, Molsan Gestión y Tramitación, S.L., and are protected by current legislation on the Protection of Intellectual and Industrial Property (Royal Decree-Law 2/2019, RD 1/1996 and Directive 2019/790/EU). Access to the website does not in any way imply the waiver, transfer, assignment or partial or total licensing of these rights, nor does it grant any right of use, modification, exploitation, reproduction, distribution or public communication of the contents or goods subject to intellectual property rights without the prior and express authorisation of the party responsible. Any rights you wish to exercise or data you wish to copy, reproduce or transfer can be requested from the owner by sending an e-mail to: fiscal@sanchezmolina.com

 

2. ACCURACY AND VERACITY OF DATA

As a user, you are solely responsible for the truthfulness and accuracy of the data you send to our website, and you release the person responsible for this website from any responsibility in this regard.

Users guarantee and are responsible, in any case, for the veracity, accuracy and authenticity of the provided personal data and commit to keep them duly updated. The user agrees to provide complete and correct information in the forms in which it is requested.

 

3. ACCEPTANCE AND CONSENT

The user declares to have been informed of the conditions for the protection of personal data and accepts and consents to the processing of such data by the data controller in the manner and for the purposes indicated in this privacy policy.

 

4. REVOCABILITY

The consent given, both to the processing and to the communication of the data of the interested parties, is revocable at any time by communicating it to the person in charge, in the terms established in this policy, to exercise the rights of access, rectification, cancellation and portability of their data, to limit or oppose its processing, or to revoke the consent given, as well as all the rights established in RGPD 2016/679 and in LOPDGDD 3/2018. This revocation shall in no case be retroactive.

 

5. CHANGES TO THIS PRIVACY POLICY

The controller reserves the right to modify this policy in order to adapt it to new legislation or jurisprudence, as well as to industry practices. In such cases, the responsible person will announce the changes on this page reasonably in advance of their implementation.

 

6. COMMERCIAL EMAILS

In accordance with LSSICE 34/2002, the company does not engage in the practice of SPAM and therefore does not send commercial emails that have not been previously requested or authorised by the user.

Accordingly, the user has the opportunity to give their express consent to receive the newsletter in any of the forms on the website, regardless of the commercial information requested from time to time.

In accordance with the provisions of Law 34/2002 on Information Society Services and Electronic Commerce, the data controller undertakes not to send commercial communications without proper identification.

 

7. INFORMATION AND CONSENT CLAUSE AND EXERCISE OF RIGHTS

The personal data collected through this website will be incorporated into our information system and processed in accordance with our Register of Processing Activities, Customer Management, Web Users or Partners, as the case may be, owned by the RESPONSIBLE PARTY identified at the beginning of this clause and will always be processed in accordance with the provisions of RGPD 2016/679 and LOPDGDD 3/2018. The purposes of the use of the data, which are expressly described in each section of the website, may be the following: the possibility of communication, by email, in response to questions asked by the user, requests for information of interest, product purchase procedures and to enable this procedure to be carried out in accordance with current regulations. You may exercise your rights of access, rectification, cancellation, portability, restriction or opposition to the processing of your data, or revoke the consent you have given, by sending a registered letter or any other means that guarantees the identity of the sender and the receipt of the same to the RESPONSIBLE PARTY, enclosing a copy of your ID document.

 

This privacy policy was updated in December 2022.