Privacy policy

Confidentiality and security are the core values of GRUP DUQUESSA and, therefore, we are committed to guaranteeing the user's privacy at all times and to not collecting unnecessary information. Below, we provide all the information about our privacy policy in relation to the personal data collected, explaining:

• Who is the processor of your data

• The purpose for which we collect the requested data

• What is the legitimacy for processing said data

• How long we store the data

• To whom your data is allocated

• What are your rights

1. Data controller

Grup Duquessa

Calle Simó Oller, 5

08002 Barcelona

Info.hdc@grupduquessa.com

2. Purpose, legitimisation and storage of the processing of data sent through:

Contact form

Purpose: To provide the means to contact us and respond to your requests for information and to send you information about our products, offers, discounts or events, including by digital means, if you tick the acceptance box.

Legal basis: The user's consent when requesting information through our contact form and ticking the acceptance box for sending information.

Retention: Once your request has been resolved through our form or responded to by email, if no further processing is generated and you have agreed to receive marketing communications until you request to unsubscribe.

Online room reservation form

Purpose: To administer and process your reservation request and, if applicable, the deposit and/or payment for your reservation. If accepted, to send you commercial communications about our products and services, including by electronic means.

Legal basis: The user's consent by requesting a booking using our booking form and ticking the acceptance box for the receipt of information.

Storage: During the booking period and, if applicable, once the stay has been formalised, for the period provided for by law. In the case of accepting commercial information, until you cancel your subscription.

Emails

Purpose: To answer your requests for information, deal with your requests and answer any queries or questions. In the case of sending a CV by e-mail, in order for your curriculum to participate in our recruitment processes.

Legal basis: Your consent when you request information via our e-mail address or when you send us your personal information and curriculum vitae for our recruitment processes.

Retention: Once your e-mail request has been answered, if no further processing has been generated. In case of sending a CV, the information will be kept during ongoing recruitment processes and for 1 year for future processes.

3. Obligation to provide your personal data and the consequences of not doing so

The provision of personal data requires a minimum age of 14 years or, if applicable, sufficient legal capacity to enter into a contract.

The personal data requested is necessary to handle your requests and/or provide the services that can be contracted and therefore failure to do so means that we cannot deal with you correctly or provide you with the service requested.

4. Data recipients

Your data is confidential, will only be used internally for the purposes described and will not be transferred to third parties unless required by law.

No international transfers of your personal data to third countries outside the European Union are envisaged.

We will not be responsible for the privacy policy with respect to personal data you may provide to third parties through links on our website, if applicable.

5. Rights in relation to your personal data

Any person may withdraw his or her consent at any time after giving it for the processing of his or her data. Under no circumstances does the withdrawal of consent affect the execution of the subscription contract or previously established relationships.

You may also exercise the following rights:

• Request access to your personal data or rectification of your personal data where it is inaccurate.

• Request deletion where, among other reasons, they are no longer necessary for the purpose for which they were collected.

• Request the restriction of processing in certain circumstances.

• Request to object to the processing of your data on the basis of your particular situation.

• Request data portability where provided for by law.

• Other rights under applicable law.

Where and how to exercise your rights:

By writing to the data subject at his or her postal or e-mail address (provided in section A), indicating the reference "Personal data", specifying the right to be exercised and in respect of which personal data.

In case of any dispute with the company regarding the processing of your data, you may lodge a complaint with the Data Protection Authority (www.aepd.es).

6. Security of your personal data

To safeguard the security of your personal data, we inform you that we have taken all necessary technical and organisational measures to ensure the security of your personal data against alteration, loss and unauthorised processing and access.

7. Updating your personal data

It is important that you inform us when there have been any changes so that we can update your personal data. Otherwise we cannot be responsible for the accuracy of your personal data.

We will not be responsible for the privacy policy with respect to personal data you may provide to third parties through links on our website.

This privacy policy may be amended to adapt it to any changes to our website together with any legal or jurisprudential changes with respect to personal data that may appear and you are therefore requested to read this policy each time you provide your data through this website.

By contracting our services you are authorizing us to transfer your personal data to the company FLEXMYROOM INSURETECH, S.L., domiciled in Benidorm (03503 – Alicante), Calle Gambo, 6-2o-F, and with CIF number B42687616, with the sole purpose of protecting your reservation enjoying the services and insurance products offered. Only the data strictly necessary for the activation of the insurance (name and surname, identity number, postal address and contact information) will be transferred, in our common interest. This entity will cancel your personal data when the service has ended and the legally established deadlines have been met. You can exercise your rights of access, rectification, deletion, limitation of treatment, data portability, and opposition to treatment and not be subject to automated decisions at the email address datos@flexmyroom.com