Privacy Policy

This Privacy Policy aims to inform users about the collection and processing of personal data obtained through the website www.hoteljardinesdeuleta.com (hereinafter "the Website")

JARDINES DE ULETA SL complies with the guidelines of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data (GDPR), ensuring at all times to guarantee the correct use and processing of the user's personal data.

What data do we collect through the website?

You can visit and use the services of the Website without identifying yourself or revealing any personal information about yourself. We may process your IP, what operating system or browser you use, and even the duration of your visit anonymously.

The only personal data that JARDINES DE ULETA SL will have access to will be those that the user voluntarily provides when contacting JARDINES DE ULETA SL via email or in any other way provided on the website.

In particular, JARDINES DE ULETA SL will record the following information:

• Data provided through the contact form that the user interested in obtaining information about our services or making any type of inquiry or request provides to JARDINES DE ULETA SL
• Data provided by sending emails to the addresses identified on the website
• Data provided by completing the forms or using the functionalities offered on the website at any given time

What is the legitimacy for the processing of your data?

The legal basis of the treatments is the consent given by the users provided through the acceptance of this Privacy Policy and the corresponding boxes, and it will imply that you have been informed and have expressly given your consent to the content of the clause attached to said form or acceptance of the privacy policy.

What purpose will we use your personal data for?

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data (GDPR), we inform you that the personal data that you voluntarily provide us through the various entry forms available on the Website or through any other data collection channel, will be incorporated into the processing records responsibility of JARDINES DE ULETA SL for the management of the data collected for the following purposes:

• Solve any inquiries, requests or requests made
• Manage the requested service, answer your request or process your request
• Management, administration, processing of forms and provision of requested services
• Maintain and manage the established and/or contractual relationship
• Maintain informative communications that the entity considers of your interest through any voluntarily provided means regarding products and/or services similar or related to those requested. In these cases, only with the purposes and uses strictly necessary for which your services were requested, not being able to use them for a different purpose. For any transfer other than the one specified above, you will be duly informed, being able to exercise your right to object at any time.
• Conduct analysis and improvements on the website regarding new services
• Unsubscribe from our services
• Any other purpose referred to in the forms and functionalities offered at any given time through the Portal

To which recipients will your data be communicated?

The collected data are adequate, relevant, and not excessive in relation to the scope and purposes described. Your data will be processed and stored in compliance with the security measures described according to current regulations and guaranteeing at all times their integrity and confidentiality.

Your data will not be transferred to third parties, except for legal obligation, nor will they be shared with companies or entities external to JARDINES DE ULETA SL. You are informed of the following possible transfers of your data:

• to public and private bodies necessary for the fulfilment of legal obligations under current regulations
• to legal, consulting, and/or auditing professionals and companies
• to the data processors necessary for the execution of the corresponding service provision contract
• to companies responsible for our web support and maintenance
• to companies responsible for our IT system support and maintenance
• to companies responsible for our management software support and maintenance
• to companies responsible for our server and cloud service support and maintenance
• in the event of any international data transfers when using applications, they will be carried out with strict compliance and with all necessary guarantees for compliance with European data protection policies on privacy
• to other companies, entities, and collaborators for administrative and/or commercial management, for the management of the aforementioned purposes, for the provision of services, and for the correct management of the entity and its different activities

In these cases, only with the purposes and uses strictly necessary for the development of your activity for which your services were requested, not being able to use them for a different purpose. For any transfer other than the one specified above, you will be duly informed, being able to exercise your right to object at any time.

Consent will be considered granted until you expressly communicate the revocation of it to any of the treatments indicated above.

You expressly consent that we may contact you through any voluntarily provided means.

The user of the Website will be solely responsible for the truth and accuracy of the data provided, acting JARDINES DE ULETA SL in good faith as a mere service provider. In case of providing false data or data of third parties without their consent, JARDINES DE ULETA SL reserves the right to immediately destroy said data in order to protect the rights of the owner or owners thereof, exempting JARDINES DE ULETA SL from any liability for non-compliance with this requirement.

JARDINES DE ULETA SL undertakes to comply with its obligation of secrecy regarding personal data and its duty to keep and will adopt all technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, treatment, or unauthorized access, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed, in accordance with the established regulations.

Children's data?

We do not process data of children under 14 years of age. Therefore, refrain from providing them if you are not of that age or, if applicable, from providing data of third parties who are not of said age. JARDINES DE ULETA SL exempts itself from any responsibility for non-compliance with this provision.

What rights do you have?

• To know if we are processing your data or not
• To access your personal data
• To request the rectification of your data if it is inaccurate
• To request the deletion of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw the consent granted
• To request the limitation of the processing of your data, in certain cases, in which case we will only keep them in accordance with current regulations
• To carry your data, which will be provided in a structured, commonly used, or machine-readable format. If you prefer, we can send them to the new controller you designate. It is only valid in certain cases
• To file a complaint with the Spanish Data Protection Agency or the competent control authority, if you believe that we have not served you correctly
• To revoke consent for any treatment for which you have consented, at any time.

If you modify any data, we appreciate it if you inform us to keep them updated.

The user of the Website may exercise these rights at any time in the terms established in the current regulations, by contacting the data controller:

• In writing to the entity's address: c/ Uleta, 1 (01007 Vitoria-Gasteiz, Álava)
• By email to the address protecciondedatos@jardinesdeuleta.com

We also inform you that you may contact the competent control authority to file the complaint you deem appropriate.

Do you want a form to exercise your rights?

We have forms for exercising your rights, ask us for them by email or if you prefer, you can use the ones prepared by the Spanish Data Protection Agency or third parties. These forms must be electronically signed or accompanied by a photocopy of your ID. If you are representing someone, you must attach a copy of their ID, or sign it with your electronic signature.

How long does it take to respond to your rights exercise?

It depends on the right, but at most within a month from your request, and two months if the issue is very complex and we notify you that we need more time.

How long will we keep your personal data?

• Personal data will be maintained as long as you remain linked to us
• Once you disassociate, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a Judge or Court may require them considering the prescription period for legal actions
• The processed data will be kept as long as the previously mentioned legal periods do not expire, if there is a legal obligation to maintain them, or if there is no legal deadline, until the interested party requests their deletion or revokes the consent granted
• We will keep all the information and communications related to the provision of our service, as long as the service guarantees last to attend to possible claims
• After the aforementioned periods have elapsed, the personal data of the users may be blocked and kept by JARDINES DE ULETA SL for the attention of possible responsibilities arising from the processing and only for the prescription period of said responsibilities. After this period, the personal data will be deleted by JARDINES DE ULETA SL

Security, cookies, and IP addresses?

The Website uses information security techniques generally accepted in the industry, such as firewalls, access control procedures, and cryptographic mechanisms, all with the aim of preventing unauthorized access to data. To achieve these purposes, the user agrees that the provider obtains data for the purpose of the corresponding access control authentication.

Notification of personal data security breaches

In case the security of personal data is violated, unless it is unlikely that such security breach constitutes a risk to the rights and freedoms of natural persons, JARDINES DE ULETA SL will notify the Spanish Data Protection Agency within 72 hours after becoming aware of the incident, describing the nature of the violation, the possible consequences that could arise, and the measures taken or proposed to remedy the security breach; and if possible, it will be made known the categories and the approximate number of interested parties and affected data.

Also, JARDINES DE ULETA SL will notify the interested parties, as soon as possible, when it is probable that the breach of personal data security poses a high risk to the rights and freedoms of natural persons, describing the possible consequences that could arise from it and the measures taken or proposed to remedy the security breach.

Use of cookies and activity file

The provider on its own account or that of a third party contracted for the provision of measurement services, may use cookies when a user browses the Website. Cookies are files sent to the browser through a web server with the aim of recording the user's activities during their browsing time. The cookies used by the Website are associated only with an anonymous user and their computer, and do not provide the user's personal data by themselves. By using cookies, it is possible for the server where the website is located to recognize the web browser used by the user in order to make navigation easier, allowing, for example, access to users who have previously registered, access to areas, services, promotions, or contests reserved exclusively for them without having to register on each visit. They are also used to measure audience and traffic parameters, control progress and entry numbers. The user has the possibility of configuring their browser to be notified of the reception of cookies and to prevent their installation on their computer.

Please consult your browser's instructions and manuals to expand this information. To use the Website, it is not necessary for the user to allow the installation of cookies sent by the Website, or the third party acting on its behalf, without prejudice that it is necessary for the user to start a session as such in each of the services whose provision requires prior registration or login. The cookies used on this Website have, in any case, a temporary nature with the sole purpose of making their subsequent transmission more effective. Under no circumstances will cookies be used to collect personal information.

IP addresses

The servers of the Website may automatically detect the IP address and domain name used by the user. An IP address is automatically assigned to a computer when it connects to the Internet. All this information is recorded in a server activity file properly registered that allows the subsequent processing of data in order to obtain only statistical measurements that allow knowing the number of page impressions, the number of visits made to web services, the order of visits, the access point, etc.