Who is responsible for the processing of your data?

The data that is collected or that you voluntarily provide us with through the Website, whether by browsing it, as well as any data that you may provide us with in the contact forms, via email or by telephone, will be collected and processed by the Data Controller, whose details are indicated below: SUMMUM HOTEL GROUP SA, CIF: A07221419 C/Bartolomé Fons, 8, 07015, Palma de Mallorca, Illes Balears. Boutique Hotel Sant Roc C/ Sant Roc, 2 07701 Mahón, Menorca Registered in the Mercantile Register of Palma de Mallorca, Volume 639, Folio 106, Page PM9144, Inscription 12/12/1986.

What data do we collect through the website?

By the simple fact of browsing the website, Boutique Hotel Sant Roc, will collect information regarding:
- IP address.
- Browser version.
- Operating system.
- Duration of the visit or browsing of the website.

This information is stored by Google Analytics, so we refer to the Privacy Policy of Google, as it collects and treats such information. http://www.google.com/intl/en/policies/privacy/ Similarly, the Website provides the utility of Google Maps, which may have access to your location, if you allow it to do so, in order to provide you with greater specificity about the distance and/or paths to our headquarters. In this regard, we refer you to the Privacy Policy used by Google Maps, in order to know the use and processing of such data http://www.google.com/intl/en/policies/privacy/.

The information that we handle will not be related to a specific user and will be stored in our databases for the purpose of statistical analysis, improvements to the Website, our products and/or services and will help us to improve our commercial strategy. The data will not be communicated to third parties.

User registration on the website/ Submission of forms

In order to access certain products and/or services, such as booking, contacting us or requesting a quote, the user must fill in a form. For this purpose, in the registration form, a series of personal data are requested. The data are necessary and obligatory in order to carry out such registration. If these fields are not provided, the registration will not be carried out.
In this case, the browsing data will be associated with the user's registration data, identifying the specific user browsing the Website. In this way, it will be possible to personalise the offer of products and/or services which, in our opinion, best suits the user.

The registration data of each user will be incorporated into the databases of Boutique Hotel Sant Roc, together with the history of operations carried out by the same, and will be stored in the same as long as the registered user's account is not deleted. Once the account has been deleted, this information will be removed from our databases, and the data relating to the transactions carried out will be kept for a period of 10 years, without being accessed or altered, in order to comply with the legal deadlines in force. The data that is not linked to the transactions carried out will be kept unless you withdraw your consent, in which case it will be deleted immediately (always taking into account the legal deadlines).

The legal basis for the processing of your personal data is the performance of a contract between the parties.
In relation to the sending of communications and promotions by electronic means and the response to requests for information, the legitimisation of the processing is the consent of the data subject.

The purposes of the processing will be the following:
a) To manage your access to the Website.
b) To manage the purchase of the products and/or services made available to you through the Website.
c) To keep you informed of the processing and status of your requests or reservations.
d) To respond to your request for information.
e) Manage all the utilities and/or services offered by the platform to the user.

Thus, we inform you that you will be able to receive communications via email and/or on your telephone, in order to inform you of possible incidents, errors, problems and/or status of your requests.

For the sending of commercial communications, the user's express consent will be requested at the time of registration. In this regard, the user may revoke the consent given by contacting Boutique Hotel Sant Roc, using the means indicated above. In any case, in each commercial communication, the user will be given the opportunity to unsubscribe from receiving them, either by means of a link and/or e-mail address.

Sending Newsletter / Newsletter

In the event that the website allows the option of subscribing to the Boutique Hotel Sant Roc Newsletter, it will be necessary for you to provide us with an e-mail address to which the newsletter will be sent.
This information will be stored in a Boutique Hotel Sant Roc database, in which it will remain registered until the interested party requests to unsubscribe or, where appropriate, Boutique Hotel Sant Roc ceases to send it.
The legal basis for the processing of this personal data is the express consent given by all those interested parties who subscribe to this service by ticking the box provided for this purpose.
The data from e-mails will only be processed and stored for the purpose of managing the sending of the Newsletter by users who request it.
In order to send the Newsletter, the user's express consent will be requested when registering for the Newsletter by ticking the box provided for this purpose. In this respect, the user may revoke the consent given by contacting Boutique Hotel Sant Roc, using the means indicated above. In any case, in each communication, you will be given the possibility of unsubscribing from receiving them, either by means of a link and/or e-mail address.

If you are one of the following groups, please consult the drop-down information:

AGENTS

For what purposes will we process your personal data?
To keep track of your activity.
To carry out the corresponding transactions.
Invoicing and declaration of the appropriate taxes.
Control and collection procedures.
What is the legal basis for the processing of your data?

The legal basis is contractual, the acceptance of an agency contract.

WEB OR EMAIL CONTACTS

For what purposes will we process your personal data?
To answer your queries, requests or petitions.

To manage the requested service, answer your request, or process your request.Information by electronic means, related to your request.
Commercial or event information by electronic means, as long as there is express authorization.

What is the legitimacy for the processing of your data?
The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill out a form and click on the send button, the completion of the same necessarily implies that it has been informed and has expressly given its consent to the content of the clause attached to the form or acceptance of the privacy policy.
All our forms have a verification box or checkbox with the following formula, in order to send the information: "□ I have read and accept the Privacy Policy".

CUSTOMERS

For what purposes will we process your personal data?
Preparation of the budget and follow-up of the same by means of communications between both parties.
Information by electronic means, related to your request.
Commercial or event information by electronic means, as long as there is express authorisation.
To manage the administrative, communications and logistics services carried out by the Responsible Party.
Carry out the corresponding transactions.
Invoicing and declaration of the appropriate taxes.
Control and collection procedures.
What is the legal basis for the processing of your data?
The legal basis is your consent and the execution of a contract.

PROVIDERS

For what purposes will we process your personal data?
Information by electronic means, concerning your request.
Commercial or event information by electronic means, provided that express authorisation has been given.
To manage the administrative, communications and logistics services provided by the Controller.
Invoicing.
To carry out the corresponding transactions.
Invoicing and declaration of the appropriate taxes.
Control and collection procedures.
What is the legal basis for the processing of your data?
The legal basis is the acceptance of a contractual relationship, or otherwise your consent to contact us or offer us your products by any means.

SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?
To answer your queries, requests or petitions.
To manage the requested service, answer your request, or process your request.
To get in touch with you and create a community of followers.
What is the legitimacy for the processing of your data?
The acceptance of a contractual relationship in the corresponding social network environment, and in accordance with its privacy policies:
Facebook http://www.facebook.com/policy.php?ref=pf
Instagram https://es-la.facebook.com/help/instagram/155833707900388

For how long will we keep personal data?
We can only consult or remove your data in a restricted way when you have a specific profile. We will treat them as long as you let us by following us, being a friend or by "liking", "following" or similar buttons.
Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.

JOB SEEKERS

For what purposes will we process your personal data?
Organisation of selection processes for the recruitment of employees.
To summon you for job interviews and evaluate your application.
If you have given us your consent, we may pass it on to collaborating or related entities, for the sole purpose of helping you find a job.
What is the legal basis for processing your data?
The legal basis is your unequivocal consent, by providing us with your CV and receiving and signing information regarding the processing we will carry out.
How long will we keep the personal data?
The CV will be stored for a period of one year, after which, if we have not contacted you, it will be deleted.

HR

Do we include personal data of third parties?
No, as a general rule we only process the data provided to us by the owners. If you provide us with data of third parties, you must inform and request their consent beforehand, otherwise we will be exempt from any liability for failure to comply with this requirement.
What about data of minors?
We do not process data of children under 14 years of age, so please refrain from providing them if you are under 14 years of age.

Will we communicate with you by electronic means?
We will only do so in order to process your request, if this is one of the means of contact you have provided us with.
If we send commercial communications, they will have been previously and expressly authorised by you.

What security measures do we apply?
You can rest assured: We have adopted an optimal level of protection for the personal data we handle, and we have installed all the technical means and measures at our disposal, according to the state of technology, to prevent the loss, misuse, alteration, unauthorised access and theft of personal data.

To what extent will decision-making be automated?
Boutique Hotel Sant Roc does not use fully automated decision-making processes to enter into, develop or terminate a contractual relationship with the user. Should we use such processes in a particular case, we will keep you informed and inform you of your rights in this respect if prescribed by law.
Will profiling take place?
In order to be able to offer you products and/or services according to your interests and to improve your user experience, we may create a "marketing profile" on the basis of the information provided. However, no automated decisions will be made on the basis of such a profile. To which recipients will your data be communicated?
To the companies that make up the Hotel Summum Group.
Your data will not be passed on to third parties, unless legally obliged to do so. Specifically, they will be communicated to the State Agency of Tax Administration and to banks and financial institutions for the collection of the service provided or product purchased, as well as to those responsible for the processing necessary for the execution of the agreement.
In case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security.
In the event that you have given us your consent for the processing of your name and images and other information related to the activity of Boutique Hotel Sant Roc, they will be disclosed in the different social networks and website.

International transfers.
Should it be necessary for Boutique Hotel Sant Roc to carry out international data transfers, it will ensure that such transfers are possible in accordance with the General Data Protection Regulation or any other requirement established by the applicable regulations. To this end, the company will adopt the necessary agreements to guarantee a level of data protection equivalent to that provided for in the European regulations.
In the case of working in a common folder system, the company shall adopt the necessary arrangements to ensure a level of data protection equivalent to that provided for in European legislation.

What rights do you have?
To know whether or not we are processing your data.
To access your personal data.
To request rectification of your data if it is inaccurate.
To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
To request the limitation of the processing of your data, in certain cases, in which case we will only keep them in accordance with the regulations in force.
To submit your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send it to the new data controller you designate. This is only valid in certain cases.
To file a complaint with the Spanish Data Protection Agency if you believe that we have not dealt with you correctly.
To revoke consent for any processing for which you have consented, at any time.
If you modify any data, please let us know so that we can keep them up to date.

Would you like a form for exercising your rights?
We have forms for exercising your rights, ask us for them by email or if you prefer, you can use the forms prepared by the Spanish Data Protection Agency or third parties.
These forms must be signed electronically or be accompanied by a photocopy of your ID card.
If someone is representing you, you must attach a copy of their DNI, or have them sign it electronically.
The forms can be submitted in person, sent by letter or by mail to the address of the person responsible at the beginning of this text.
You have the right to file a complaint with the Spanish Data Protection Agency, in the event that you consider that your rights have not been properly addressed.

The maximum period for Boutique Hotel Sant Roc to resolve your complaint is one month, counting from the effective reception of your request by us.

You have the right to revoke your consent at any time for any of the treatments for which you have given it.

Do we use cookies?
If we use other types of cookies that are not necessary, you can consult the cookie policy in the corresponding link at the top of our website.

How long will we keep your personal data?
Personal data will be kept for as long as you remain linked to us.
Once you disengage, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal action.
The data processed will be kept until the aforementioned legal periods expire, if there is a legal obligation to keep them, or, if there is no such legal period, until the data subject requests their deletion or revokes the consent granted.
We will keep all information and communications relating to your purchase or the provision of our service, for the duration of the guarantees of the products or services, in order to attend to possible claims.