COMPANY NAME	Hotel Exagon Park
TAX ID (NIF)	A07023138
DOMAIN	https://www.exagonpark.com/en
POSTAL ADDRESS	Ronda de la Pleta, 46, 07458 Can Picafort, Balearic Islands (Mallorca, Spain)
EMAIL ADDRESS	administracion@exagonpark.com
TELEPHONE NUMBERS	(+34) 971 850 005
REGISTRATION NO./ ADDITIONAL DATA	Registered in the Commercial Register of Palma de Mallorca: Page PM-22097, Volume 859, Folio 83

In accordance with current and applicable personal data protection regulations, we inform you that your data will be incorporated into the processing system owned by EROS SA with Tax ID (NIF) A07023138 and registered office at RONDA DE LA PLETA 46, 07458 CA'N PICAFORT (BALEARIC ISLANDS). The information regarding the processing activities carried out is provided below:

PROCESSING ACTIVITIES CARRIED OUT

Management of online accommodation bookings	Purpose: Registration and management of online accommodation bookings. Retention period: 3 years, Order INT/1922/2003, of July 3, on registration books and entry records for travelers in hospitality establishments and similar. Legal basis: The consent of the data subject. Type of Data: Basic data: Name and surname, Telephone, Tax ID (NIF), Email address, Economic or insurance data Sensitive data: Data related to minors Disclosures: Your data will be communicated if necessary to the Tax Agency, Banks and Savings Banks, Security Forces and Corps, and competent authorities in order to comply with the administrative and security obligations established in the applicable regulations. Furthermore, it is informed that the legal basis for the disclosure is compliance with a law.
Commercial actions via web form	Purpose: Collection, registration, and processing of data for the purpose of attending to your queries and/or requests, as well as for advertising and commercial prospecting. Retention period: as long as the consent provided is maintained, unless there is a legal obligation. Legal basis: The consent of the data subject. Type of Data: Basic data: Name and surname, Email address
User registration	Purpose: Collection, registration, and processing of data to be able to register as a user. Retention period: as long as the consent provided is maintained, unless there is a legal obligation. Legal basis: The consent of the data subject. Type of Data: Basic data: Name and surname, Telephone, Tax ID (NIF), Postal address, Email address
Web user management	Purpose: Collection, registration, and processing of user data. Retention period: as long as the consent provided is maintained, unless there is a legal obligation. Legal basis: The consent of the data subject. Type of Data: Basic data: Name and surname, Email address
Installation of cookies	Purpose: Management and installation of cookies. Retention period: as long as the consent provided is maintained. Legal basis: The consent of the data subject. Type of Data: Basic data: Email address, IP address
Web form management	Purpose: Attending to your queries and/or requests. Retention period: as long as the consent provided is maintained. Legal basis: The consent of the data subject. Type of Data: Basic data: Name and surname, Email address, IP address

EROS SA informs Users that they may exercise their rights of access, rectification, limitation, erasure, portability, objection to the processing of their personal data, and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the withdrawal of the consent given.

• Right of Access: It is the user's right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data processed and the legal information regarding the processing (purposes, legal basis, retention periods, disclosures, origin of the data, etc.).
• Right of Rectification: It is the right of the affected party to have inaccurate or incomplete data modified. In relation to the website, it can only be satisfied in relation to information that is under the control of the website, for example, deleting comments published on the page itself, images, or web content containing the user's personal data.
• Right to Restriction of Processing: It is the right to limit the purposes of the processing originally foreseen by the data controller in certain circumstances.
• Right of Erasure: It is the right to delete the user's personal data, except for what is provided for in the GDPR itself (freedom of expression and information, retention obligations, formulation, exercise or defense of claims, etc.).
• Right to Portability: The right to receive the personal data that the user has provided, in a structured, commonly used, and machine-readable format, and to transmit it to another controller when the processing is based on consent or the execution of a contract and is carried out by automated means.
• Right of Objection: It is the user's right that the processing of their personal data not be carried out or that the website cease processing it when the processing is based on legitimate interest or public interest, or when it concerns direct marketing processing.
• Right not to be subject to automated decisions, including profiling: When the processing is not necessary for the conclusion or execution of a contract, nor authorized by European Union or Member State law, nor based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
• Right to withdraw consent: For any processing based on your consent, you have the right to withdraw it at any time and free of charge.

To exercise any of the data protection rights described above, you must follow the following instructions:

• Presentation of a written request to the address RONDA DE LA PLETA 46, 07458 CA'N PICAFORT (BALEARIC ISLANDS) (to the attention of EROS SA) or via email to ADMINISTRACION@EXAGONPARK.COM
• The written request sent by the holder of the personal data (interested party) requesting the exercise of rights must take into account the following:
• You must identify yourself reliably, and in the event of doubts about the identity of the applicant, you will be asked to correct the request (e.g., by requesting more information, such as ID number, ID document, the email address you provided, etc.).
• The request may be made by a representative, legal or voluntary, when they are duly identified and authorized by the data subject (by means of express authorization from the data subject to exercise the highly personal rights regulated in the data protection regulations).
• A request specifying what is being requested (Right(s) intended to be exercised). If it does not refer to a specific processing activity, you will be provided with a response in relation to all processing activities that affect your personal data. If you request information on a specific processing activity, only information regarding that one will be provided. If you request it by telephone, you will be instructed to do so in writing and informed of how you can do it and the address to which you must send it. No information will ever be provided by telephone.
• Postal or email address for notification purposes.
• Supporting documents for the request you are making, if necessary.
• The applicant must use any means that allows proof of the sending and receipt of the request.

Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you become aware of or consider that an event may constitute a breach of the applicable data protection regulations.

EROS SA is committed to adopting the necessary technical and organizational measures, in accordance with the level of risk associated with the processing activities carried out by them and indicated in this same section, so as to guarantee their integrity, confidentiality, and availability.

Last update: March 1, 2024