Privacy Policy

 

  • Who is responsible for the processing of your data?
    In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and with the rest of the applicable legislation in Spain regarding the protection of personal data, we inform you that the personal data provided by completing and sending the forms published on this website will be incorporated into the processing activities of PARADORES DE TURISMO DE ESPAÑA S.M.E. S.A. (N.I.F. A-79855201), with registered office at Calle José Abascal, 2-4 - 28003 MADRID. Hereinafter, PARADORES.
  • For what purpose and basis of legitimacy do we process your data?

    • Management of user information requests. The legal basis is the express consent of the interested party that is given by checking the acceptance checkbox (Art. 6.1 a) GDPR).

    • Management of applications for job offers. The legal basis is the express consent of the interested party (Art. 6.1 a) GDPR)

    • Management and investigation of complaints. The legal basis is compliance with a legal obligation (Art. 6.1 c) GDPR).

    • Sending promotional and, in general, commercial information related to products and/or services supplied or provided through PARADORES DE TURISMO DE ESPAÑA S.M.E. S.A. The legal basis is the legitimate interest of the data controller (Art. 6.1 f).

    • Sending promotional and, in general, commercial information related to products and/or services supplied or provided through any of the subsidiary companies of the PARADORES group. The legal basis is Legitimate interest (Art. 6.1 f) GDPR) and, where applicable, consent of the interested party (Art. 6.1 a) GDPR).

    • Management of purchases and reservations. The purpose of data processing in this area is to manage purchases and reservations made by the user. This processing is legitimised by the execution of the contract between the parties (Art. 6.1 b) GDPR).

  • How have we collected your personal data?

    All personal data collected by PARADORES through the website has been obtained after being provided by the interested party (you), after having been requested when requesting one of our services. By providing us with your personal data, you will be asked to accept and consent to the processing of personal data detailed in this Privacy Policy.

    Statement on Use of Geofencing and Background Location
    At Paradores, we are committed to protecting your privacy and offering you a personalised experience on our mobile application. To improve our services, we use geofencing technology and background location to provide you with additional features, such as notifications and services based on your location.

    Use of Geofencing
    Geofencing allows us to offer you relevant and personalised information when you are near one of our Paradores. We use this technology to send you alerts or reminders that may be of interest to you, based on your real-time location.

    Background Location Use
    Our app can access your location even when it is not being actively used, in order to offer you features such as updating your location for geofencing and other services. This function is performed discreetly to ensure the accuracy of the app's features without affecting your experience.

    You are solely responsible for the veracity, correctness and validity of the data provided. If you do not wish to provide any of your data, this may prevent you from using any of the services we offer.

  • Who will we communicate your personal data to?

    PARADORES will only communicate your personal data:

    • To third parties, public bodies and institutions of the General State Administration, of the Autonomous and local Administrations, including the jurisdictional bodies to which it is legally obliged to provide them.
    • To financial entities if necessary based on the relationship you have with PARADORES.
    • To external technology service providers, such as hosting services, computer maintenance and other similar services, who provide their services to PARADORES, and who will process your data strictly following the instructions of this entity and under its responsibility.
    • To entities of the PARADORES group, solely for internal administrative purposes and/or for the purposes indicated above.
  • For how long will we retain your data?

    The personal data obtained through the application form and CV will be kept for a maximum period of two years, after which they will be deleted from the database. However, if the candidate is selected, their CV data will be kept for the purpose of managing the employment relationship.

    The personal data obtained through the information request form will be kept only for the time necessary to deal with the request.

    If you have given your express consent for the sending of commercial information, your data will be kept until you express your desire to revoke said consent. In the event that the sending of promotional information is based on the existence of legitimate interest, your data will be kept as long as said interest persists or until you exercise your right to object.

    The personal data provided for the purchase of gift boxes and reservations will be kept during the contractual relationship and, once it has ended, during the limitation period for legal actions that may arise from it.

  • What security measures will be applied to your personal data?

    The processing of the personal data provided will be carried out by adopting the appropriate technical and organisational measures to guarantee a level of security appropriate to the risk, taking into account the state of the art, the costs of application, and the nature, scope, context and purposes of the processing, as well as the risks of variable probability and severity for the rights and freedoms of natural persons.

  • How can you exercise your rights in relation to your personal data?

    If you wish to revoke the consents granted, as well as to exercise the rights of access, rectification, deletion, opposition, limitation, portability and the right not to be subject to automated decisions, you may contact PARADORES by means of a written request to the postal address located at Calle José Abascal, 2-4 (28003) Madrid; or by email [email protected]

    The request must include: name and surname of the interested party; address or email for notification purposes and specification of the object of the request. If it is strictly necessary to verify your identity, PARADORES may request additional data such as telephone number, Amigo card number, or even a copy of the interested party's National Identity Document, passport or other valid identification document and, where applicable, of his or her representative, as well as a title accrediting representation.

    If the interested party considers that the above rights have not been respected in accordance with current legislation, he or she may file a claim for protection of rights with the Spanish Data Protection Agency (www.aepd.es).

  • How can you contact the Personal Data Protection Officer (DPO)?

    The Data Protection Officer (DPO) is primarily responsible for advising and supervising the data controller - in this case, PARADORES - on compliance with current regulations on personal data protection, as well as serving as a link between said controller and the Spanish Data Protection Agency. You can contact our DPO through the following email account [email protected]