INTRODUCTION

Your privacy is important to us, so through this document, we explain what data we collect from users, how we use it, and why, among other things. Those over 14 years of age may register as users without the prior consent of their parents, guardians, or legal representatives. In the case of minors under 14 years of age or those identified as "legally incapable," we will always require parental consent, guardian, or legal representative.

For your information, we will never ask for more information than we actually need for the requested services; we will never share it with third parties, except by legal obligation or with your prior authorization; and we will never use your data for any purpose not previously indicated.

As a user, you should carefully read this Privacy Policy regularly, and whenever you enter your personal data, as this document may be modified. The provider may modify any information that may appear on the website to comply with regulations or update the policy. There is no obligation to notify or inform users of these obligations; publication on the provider's website is sufficient.

DATA CONTROLLER:

Identity: FORTACO, S.L. (also the provider)
NIF: B17120445
Postal address: C/ Josep de Togores, 21 17310 Lloret de Mar
Email: info@hotelacapulcolloret.com

FORTACO, S.L., as the party responsible for the website, in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data and other current regulations on the protection of personal data, and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary technical and organizational security measures to guarantee and protect the confidentiality, integrity, and availability of the data entered.

METHODS OF DATA OBTAINING AND DATA WE COLLECT: The data we collect and how we obtain it is as follows:

Contact forms:
Required data: name, email, telephone number
Purpose: to respond to inquiries and/or provide information requested by the User.
Legitimation: User consent
Web chat:
Required data: the information you voluntarily and freely provide to us.
Purpose: To respond quickly and immediately to requests for information.
Legal Basis: Legitimate interest of the data controller
Newsletter Subscription:
Required data: email
Purpose: To send you commercial information of interest about our products and/or services via email
Legal Basis: User consent
If you purchase the service through our website:
Required data: Name, surname, address, email, telephone number, bank details, or credit or debit card information
Purpose: Purchase of our service/purchase of our product
Legal Basis: User consent
WhatsApp: The WhatsApp section of this policy details its use.
Carry out the contractual relationship and any similar administrative, tax, and accounting procedures required by current legislation.

a) Required data: name and surname, telephone number, address, ID number, email address, signature
b) Purpose: Carry out internal commercial, tax, and administrative management
c) Legal basis: Consent of the interested party and contractual relationship

The photographs posted on the website are the property of FORTACO, S.L., including those of minors. Prior consent has been obtained from the parents, guardians, or legal representatives by signing the forms issued for this purpose by the centers where the minors attend. However, the parents, guardians, or legal representatives of the minors, as holders of the rights to exercise their rights, and always following a formal written request, may indicate their refusal to use the minor's image; in this case, the image will be displayed pixelated.

You may revoke your consent at any time by sending a letter with the subject "Unsubscribe" to the email address provided.

In accordance with the LSSICE (Spanish Social Security Institute), FORTACO, S.L. does not engage in spam practices; therefore, it does not send commercial emails that have not been previously requested or authorized by the User. Consequently, in all communications received from the provider, the user has the option to withdraw their express consent to receive our communications.

We will not process your personal data for any purpose other than those described, except by legal obligation or court order.

You will not be subject to any decision. Automated processing that affects your data.

DATA RETENTION PERIOD:

Your data will be retained for the duration of the business relationship with us or for the duration of your right to erasure, objection, or restriction of processing. However, we will retain your data for the periods legally established in the applicable provisions.

RECIPIENTS OF ASSIGNMENTS OR TRANSFERS:

FORTACO, S.L. does not transfer or communicate data either within or outside the EU. The provider will only provide information to law enforcement agencies under a court order or as required by law, without prejudice to the ability to block or terminate your account if there are indications that the user has committed a crime. The information provided will be solely that which the provider has at that time.

The information you provide through this website will be hosted on the servers of FORTACO, S.L., contracted to ALTER EGO WEB, with CIF B-55087761 and address C/Ponent nº33 Esc.B 4º 1ª (Figueres), which provides the website hosting service. The processing of the entity's data is regulated by a data processing contract between the provider and this company.

The provider also uses certain tools to provide services necessary for the development of its activity, and may store your data. These tools are as follows:

Google Analytics: to perform analysis and metrics on user usage of the website through cookies. The information generated and collected by these cookies about your use (including your IP address) will be transmitted to and stored by Google Inc., located in Delaware, 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States ("Google"), on its servers in the United States.

Your data will be retained for the duration of your business relationship with us or for the duration of your right to erasure, objection, or restriction of processing. However, we will retain your data for the period legally established in the applicable provisions.

RIGHTS OF INTERESTED PARTIES:

As a user-data subject, you may request the exercise of the following rights vis-à-vis FORTACO, S.L. by submitting a letter to the postal address in the header or by sending an email to info@hotelacapulcolloret.com, indicating the subject line: "DATA PROTECTION: RIGHTS OF DATA SUBJECTS"

Rights:

Right of access: allows the data subject to know and obtain information about their personal data being processed.
Right to rectification or deletion: allows errors to be corrected and data that is found to be inaccurate or incomplete to be modified.
Right to erasure: allows the deletion of data that is inadequate or excessive.
Right to object: the data subject's right to have their personal data not processed or to have it ceased.
Restriction of processing: involves marking the retained personal data for the purpose of limiting its future processing and for the exercise or defense of legal claims.
Data portability: providing the data subject with the data being processed so that they can transmit it to another controller without hindrance.
Right not to be subject to automated individual decision-making (including profiling): the right not to be subject to a decision based on automated processing that produces effects or significantly affects you.

As a user, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of the processing carried out prior to the withdrawal of consent.

You also have the right to lodge a complaint with the supervisory authority if you believe that your rights regarding data protection may have been violated (aepd.es).

ADDITIONAL INFORMATION

SECURITY MEASURES:

The data you provide will be treated confidentially. The provider has adopted all necessary technical and organizational measures and all levels of protection to guarantee the security of data processing and prevent its alteration, loss, theft, unauthorized processing, or access, in accordance with the state of the art and the nature of the data stored. Likewise, it is also guaranteed that the processing and recording in files, programs, systems or equipment, premises, and centers comply with the integrity and security requirements and conditions established in current regulations.

LANGUAGE

The language applicable to this privacy policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version shall prevail.

SOCIAL MEDIA

We inform you that FORTACO, S.L. may have a presence on social media. The processing of data about individuals who become followers on social media (and/or create any links or connection actions through social media) of the official pages of FORTACO, S.L. will be governed by this section, as well as by the terms of use, privacy policies, and access regulations applicable to the social media platform in each case and previously accepted by the user.

FORTACO, S.L. will process your data for the purposes of properly managing your presence on the social media platform, providing information about the provider's activities, products, or services, as well as for any other purpose permitted by the regulations of the social media platforms.

The publication of content is prohibited:

That is allegedly unlawful under national, EU, or international regulations, or that engages in allegedly unlawful activities or violates the principles of good faith.

That violates the fundamental rights of individuals, is discourteous online, is annoying, or may generate negative opinions among our users or third parties, and in general, any content that FORTACO, S.L. considers inappropriate.
And in general, that violates the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection, and intellectual and industrial property rights.

FORTACO, S.L. also reserves the right to remove, without prior notice, any content deemed inappropriate from the website or corporate social network.

In any case, if you submit personal information through the social network, FORTACO, S.L. will be exempt from liability regarding the security measures applicable to this platform. Users, if they wish to learn more, should consult the corresponding specific terms and conditions of the network in question.

PUBLICATION OF YOUR TESTIMONY

If the user wishes to publish their opinion on the website, we inform you that the data provided will be processed to address the suggestions, experiences, or opinions of the services to be published on the website and thus help other users. The data will be retained as long as there is a mutual interest in maintaining the purpose of the processing. When it is no longer necessary for this purpose, it will be deleted as an appropriate security measure to guarantee the pseudonymization of the data or its complete destruction. Testimonials will be published on our website. The only personal information published from the testimonial will be the first and last name.

WHATSAPP

The processing of data carried out by individuals who make a query through FORTACO, S.L.'s WhatsApp will be governed by this section, as well as the terms of use, privacy policy, and access regulations pertaining to the application, applicable in each case and previously accepted by the user. FORTACO, S.L. will process your data for the purpose of properly managing your inquiry, as well as for any other administrative management purposes of the service. The use of FORTACO S.L.'s WhatsApp to send content that is not necessary to respond to the inquiry and that is unlawful under national or international regulations, violates the fundamental rights of individuals, and, in general, violates the principles of legality, honesty, responsibility, privacy, consumer protection, and intellectual and industrial property rights is prohibited.

CHANGES TO THIS PRIVACY POLICY

FORTACO, S.L. reserves the right to modify this policy to adapt it to new legislation or jurisprudence.

REVOCABILITY

The consent given, both for the processing and for the transfer of data subjects' data, may be revoked at any time by notifying FORTACO, S.L. under the terms established in this Policy for the exercise of rights. This revocation will under no circumstances be retroactive.

LEGISLATION

Generally, the relationship between FORTACO, S.L. and the Users of its online services, available on this website, is subject to Spanish law and jurisdiction, to which the parties expressly submit. The Courts and Tribunals of the provider's domicile (if not considered a consumer for the purposes of the TRLGDCU) or the user's domicile (if considered a consumer for the purposes of the TRLGDCU) shall have jurisdiction to resolve all disputes arising from or related to its use.

History

Over 50 years of hospitality in the heart of Lloret de Mar