PRIVACY POLICY
DATA CONTROLLER
Mymgra, S.L. (hereinafter Hotel Sevilla Congresos) is the owner of the domain www.hotelsevillacongresos.com (hereinafter, the Website) and is responsible for processing the data you provide during navigation.
These are our identification details:
- Company name: Mymgra, S.L.
- Trade name: Hotel Sevilla Congresos
- VAT: B18091785
- Address: de la Constitución, 37 18014-Granada (GRANADA-SPAIN)
- Phone: (+34) 958 18 76 06
- Email: administracion@hoteles-ma.es
- Domain-Website: hotelsevillacongresos.com
PROCESSING PURPOSES
We inform you that the data provided and their processing are documented in the Activity Registers we have. When you accept this Privacy Policy, you do so expressly, freely, informed, and unequivocally so that your data can be processed by Hotel Sevilla Congresos for the following purposes:
- Manage reservations and maintain the existing contractual and commercial relationship.
- Send you the information you requested through any of the contact forms we provide on the website.
- Inform you about offers and promotions of interest through commercial advertising communications by email, SMS, WhatsApp, social networks or any other electronic or physical means, present or future, that allow such communications. These will be carried out by us and will always be related to our services or those of our partners with whom we have reached promotional agreements. In this case, third parties will never have access to your personal data.
A commercial profile based on the provided information may be created, but we will not make automated decisions based on that profile.
- DATA STORED DURING YOUR VISIT: When you browse the website, our servers generally store, among other data, information about the browser and operating system you are using, the website you visit us from, the pages you visit, and the date. Except for the IP address, personal data is only stored if voluntarily provided by you beforehand.
- PAYMENT SERVICE PROVIDERS: Through the website, you can access third-party websites via links to make payments for the contracted services. We inform you that they are governed by their own terms of use and contracting, so you should read those they have in place. At no time will our staff have access to the banking data you provide to said third parties.
DATA RETENTION
The data you provide will be kept as long as there is a mutual interest in maintaining the purpose of the processing, being blocked when they are no longer necessary for the purpose for which they were collected. They will be available exclusively to Judges and Courts, the Public Prosecutor’s Office, and the competent authorities, in particular the Data Protection Agency, for the attention of responsibilities arising from the processing, for the term of prescription of these. Once the indicated period has elapsed, they will be destroyed with appropriate security measures to guarantee their pseudonymization or total destruction.
In addition to the general processing of the previous point, the following specificities regarding data retention will be observed:
- Customer data: retention period of 4 years (Art. 66 and following of the General Tax Law), and 6 years on accounting books and invoices (Art. 30 of the Commercial Code).
LEGITIMATION
The legal basis for the processing of the personal data you provide us is your consent, expressed through the corresponding boxes in the different forms. In any case, we inform you that you can withdraw it at any time through the means indicated in the “RIGHTS AVAILABLE TO YOU” section.
NO DATA TRANSFER
We inform and guarantee expressly that your personal data will not be transferred under any circumstances to third parties. Any exception to this rule will require your prior express, informed, and unequivocal consent.
RIGHTS AVAILABLE TO YOU
Current data protection legislation grants you the following rights.
- Access to data: You can consult the personal data we have at any time.
- Rectification of your information: You have the right to modify your personal information when it is incorrect or incomplete.
- Deletion of data: You have the right to request the deletion of your personal data that we are not legally obliged to retain.
- Portability: You can request a copy of the data we have and request us to send that information to another service provider (to the extent that is technically possible).
- Limitation of data processing: You have the right to limit how we use them, particularly in cases where:
- You challenge the accuracy of your personal information
- The data processing is unlawful and you oppose the deletion of your personal information
- We no longer need your personal information for processing, but you request it for the initiation, exercise, or defense of legal actions
- You have objected to the processing
- Objection to data processing: You have the right for your data not to be processed for specific purposes. In this case, we will stop processing them for those purposes unless we can demonstrate compelling legitimate reasons for the processing, or it is necessary for the initiation, exercise, or defense of legal actions.
- Revocation of consent: You can revoke your consent at any time by sending us a communication to that effect. This revocation will not affect the validity of the processing of your data carried out prior to it.
- Exercise of these rights: To exercise these rights, you must send an explicit request, along with a copy of your ID card or equivalent identifying document to Hotel Sevilla Congresos at Madrid, 1 – 2nd D 18012-Granada (GRANADA-SPAIN), or to the email address administracion@hoteles-ma.es. If you do not receive a response from us in a timely manner to the request made, or are not satisfied with it, we inform you that the competent supervisory authority is the Spanish Data Protection Agency (www.aepd.es).
SECURITY MEASURES
In accordance with current regulations on personal data protection (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights), at Hotel Sevilla Congresos we comply with all provisions of the GDPR and LOPD regulations for the processing of personal data under our responsibility, and explicitly with the principles described in Article 5 of the GDPR, by which they are processed lawfully, fairly, and transparently in relation to the data subject and are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
We have sufficient mechanisms to:
- Ensure the permanent confidentiality, integrity, availability, and resilience of the processing systems and services.
- Restore the availability and access to personal data quickly in case of a physical or technical incident.
- Regularly verify, evaluate, and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
- Pseudonymize and encrypt personal data, if necessary.
In addition, we have implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPD in order to protect your rights and freedoms, providing you with all the necessary information so that you can exercise your rights. We have implemented all the technical means at our disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the personal data you provide us. However, you should be aware that security measures on the Internet are not impregnable.
MINORS:
Access and use of the portal by minors are prohibited. We are not responsible for the truthfulness and accuracy of the data you provide. If you have minors under your care, it will be your exclusive responsibility to determine which services and/or content are appropriate or not for their age.
We inform you that there are computer programs that allow you to filter and block access to certain content and services so that parents, for example, can decide which content and services on websites their children can access and which they cannot.
DURATION AND MODIFICATION OF THE PRIVACY POLICY:
We reserve the right to modify, totally or partially, this Privacy Policy, by publishing the changes on the Website. Likewise, we may make the modifications we deem appropriate without prior notice, being able to change, delete, or add both the content and services provided, as well as how they are presented or located. Consequently, the current general conditions/policies that are published at the time of access will be considered valid, so you must read them periodically.
Regardless of the above, we may terminate, suspend, or interrupt, at any time without prior notice, access to the content of the Website, without the User being able to demand any compensation.