BUSINESS NAME	Hotel Exagon Park
TAX IDENTIFICATION NUMBER (NIF)	A07023138
DOMAIN	https://www.exagonpark.com/en
POSTAL ADDRESS	@@address@@
EMAIL ADDRESS	administracion@exagonpark.com
PHONE NUMBERS	@@phone@@
REGISTRATION NUMBER/ADDITIONAL DATA

In accordance with the current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by EROS SA with NIF A07023138 and registered office at RONDA DE LA PLETA 46, 07458 CA'N PICAFORT (BALEARIC ISLANDS). Below, we provide information on the treatments carried out:

TREATMENTS PERFORMED

Online accommodation booking management	Purpose: Registration and management of online accommodation bookings. Retention Period: 3 years, Order INT/1922/2003, of July 3, on register books and entry forms for travelers in hospitality establishments and similar. Legal Basis: The consent of the data subject. Data Types: Basic Data: Name and surname, Phone, NIF, Email address, Economic or insurance data Sensitive Data: Data relating to minors Transfers: Your data will be communicated if necessary to the Tax Agency, Banks and Savings Banks, Security Forces and Bodies, and competent authorities in order to comply with the administrative and security obligations established by applicable regulations. Furthermore, it is informed that the legal basis for the transfer is compliance with a law.
Commercial actions web form	Purpose: Capture, registration, and data processing for the purpose of addressing your inquiries and/or requests, as well as advertising and commercial prospecting. Retention Period: As long as the consent given is maintained, unless there is a legal obligation. Legal Basis: The consent of the data subject. Data Types: Basic Data: Name and surname, Email address
User registration	Purpose: Capture, registration, and data processing in order to register as a user. Retention Period: As long as the consent given is maintained, unless there is a legal obligation. Legal Basis: The consent of the data subject. Data Types: Basic Data: Name and surname, Phone, NIF, Postal address, Email address
Web user management	Purpose: Capture, registration, and data processing of the user. Retention Period: As long as the consent given is maintained, unless there is a legal obligation. Legal Basis: The consent of the data subject. Data Types: Basic Data: Name and surname, Email address
Installation of cookies	Purpose: Management and installation of cookies. Retention Period: As long as the consent given is maintained. Legal Basis: The consent of the data subject. Data Types: Basic Data: Email address, IP address
Web form management	Purpose: Addressing your inquiries and/or requests. Retention Period: As long as the consent given is maintained. Legal Basis: The consent of the data subject. Data Types: Basic Data: Name and surname, Email address, IP address

EROS SA informs Users that they may exercise their rights of access, rectification, limitation, deletion, portability, opposition to the processing of their personal data, and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the withdrawal of the consent given.

• Right of Access: It is the user's right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data processed and the legal information of the processing (purposes, legal basis, retention periods, transfers, data origin, etc.).
• Right of Rectification: It is the right of the data subject to have inaccurate or incomplete data corrected. In relation to the website, it can only be satisfied regarding information under the control of the website, for example, deleting comments published on the website itself, images, or web content containing the user's personal data
• Right to Limitation of Processing: It is the right to limit the purposes of the processing originally intended by the data controller in certain cases.
• Right of Deletion: It is the right to delete the user's personal data, except as provided in the GDPR itself (freedom of expression and information, retention obligations, formulation, exercise or defense of claims, etc.).
• Right to Portability: The right to receive the personal data provided by the user in a structured, commonly used, and machine-readable format, and to transmit it to another controller when the processing is based on consent or the execution of a contract and is carried out by automated means.
• Right of Opposition: It is the right of the user not to have their personal data processed or to cease processing by the website when the processing is based on legitimate interest or public interest or when it involves direct marketing processing.
• Right not to be subject to automated decisions, including profiling: When processing is not necessary for the conclusion or execution of a contract, nor is it authorized by EU or Member State law, or based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects you in a similar way.
• Right to withdraw consent: For any processing based on your consent, you have the right to withdraw it at any time and free of charge.

To exercise any of the data protection rights described above, you must follow the following instructions:

• Submit a written request to the address RONDA DE LA PLETA 46, 07458 CA'N PICAFORT (BALEARIC ISLANDS) (to the attention of EROS SA) or by email to ADMINISTRACION@EXAGONPARK.COM
• The written request sent by the data subject requesting the exercise of rights must take into account the following:
• You must be reliably identified, and if there are doubts about the identity of the applicant, you will be asked to rectify the request (e.g., by requesting more information, such as the ID number, the ID document, the email address provided, etc.)
• The request may be made by the legal or voluntary representative, when duly identified and authorized by the data subject (through an express authorization from the data subject to exercise the personal rights regulated in the data protection regulations).
• Specification of the request (Right/s to be exercised). If it does not refer to a specific processing, a response will be provided regarding all processing activities that affect your personal data. If you request information about a specific processing, only information about that processing will be provided. If requested by telephone, you will be instructed to do so in writing and informed of how to do so and the address to which it should be sent. Information will never be provided by telephone.
• Postal or electronic address for notifications.
• Evidence of the request made, if necessary.
• The requester must use any means that allows proof of sending and receipt of the request.

Finally, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency in case you become aware of or consider that an act may constitute a breach of the applicable data protection regulations.

EROS SA undertakes to adopt the necessary technical and organizational measures, in accordance with the level of risks associated with the processing carried out by them and indicated in this same section, to guarantee their integrity, confidentiality, and availability.

Last updated: March 1, 2024