Legal Data

JLM MALLORCA SL
CIF: B16500985
Registered in the Mercantile Registry of Palma de Mallorca, Volume 2690, Folio 9, Sheet PM-80429, entry 1 dated January 10, 2017.
C/ Romaguera Street, 18
07100 Soller (Majorca)
E-mail: info@granhotelsoller.com

JLM MALLORCA SL is especially aware of the protection of personal data of the Users of the services of the website and of its clients. Through this Privacy Policy (or Data Protection Policy) the owner of this site informs the USERS of the website about the uses to which the personal data that is collected is submitted, in order for them to decide , freely and voluntarily, if they wish to provide the requested information.

JLM MALLORCA SL  reserves the right to modify this Policy in order to adapt it to new legislation, jurisprudential criteria, industry practices, or interests of the entity. Any change in it will be announced in advance, so that you have perfect knowledge of its content.

1.1   RESPONSIBLE FOR THE TREATMENT
The data controller is JLM MALLORCA SL  Addressed for these purposes at: Calle Romaguera, 18, 07100 Sóller – Mallorca (Balearic Islands).

1.2   DPD CONTACT DETAILS
The contact details of the DPO designated by the data controller are as follows: info@granhotelsoller.com

1.3   PURPOSES OF TREATMENT
The purposes of the collection and processing of personal data, through the different forms owned by the data controller made available to Users, respond, depending on the specific case, to:

• Reservation management: manage the reservation made through the website by telephone or through a third party at one of our hotels.
• Client management: Manage your stay in all our hotels to offer you our best service in each of them. JLM Mallorca SL  will manage your stay in order to offer you the best possible service according to what you tell us, our goal is to provide you with the best possible service in any of our hotels based on data processing for statistical purposes.
• Take into account the products and services contracted and enjoyed by you to offer you products and services that may be of interest to you, based on statistical data prepared by us.
• Manage the “Online Check-in”: those responsible for the treatment may send an email so that the interested party voluntarily carries out initial procedures online regarding their registration at the hotel.
• Manage your contact requests through the channels and/or forms provided for it.
• Know the opinion of customers through satisfaction surveys.
• Information and, where appropriate, registration for conferences or events organized or in which the data controller participates.
• Manage job applications, by collecting resumes, in order to be able to contact the interested party and carry out a selection process.
• Sending commercial communications by any means (including electronic ones) to inform you about news, events and about our products or services that may be of interest to you.
• Send “abandoned cart” reminders: the data controller may send the interested party communications to remind them of the non-completion of a contract or reservation that they had initiated. The information included by the user on the website will be taken into account. This purpose will only be carried out if the user has expressly consented to it.

1.4   CONSERVATION PERIOD
The personal data provided will be kept for the corresponding period to comply with legal obligations or during the period that a judge or court may require.
The data based on the consent will be kept as long as you do not revoke the consent or oppose the treatment.
Additionally, in order to improve your experience in future stays in our hotels, we will keep the data related to your history of visits for a period of seven years, unless you notify us otherwise, in which case the legally established terms will be maintained and during the term that may be required by a judge or court
The processing of resume data received for selection processes will be maintained for a period of four years.

1.5   DATA LOCK
In accordance with article 32 of Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD), those responsible for the treatment will proceed to block the data when it is rectified or deleted.
The blocking of the data consists of the identification and reservation of the same, adopting technical and organizational measures, to prevent its treatment, except for making the data available to the judges and courts, the Public Prosecutor or the competent Public Administrations, in particular of the data protection authorities, for the requirement of possible responsibilities derived from the treatment and only for the limitation period of the same.

1.6   LEGITIMATION
The data controller is entitled to the processing of personal data, based on:

• In the cases in which it has been requested, based on the consent granted by the interested party for one or more specific purposes as set forth in article 6.1. a) of the General Regulation for the Protection of personal data when completing the forms and checking the box provided for this purpose.
• Based on the execution of a contract for the provision of services, as stated in article 6.1. b) of the General Regulation of Personal Data Protection.
• Based on compliance with a legal obligation imposed on the person responsible for processing in accordance with article 6.1.c) of the General Regulation for the Protection of personal data
• Based on a legitimate interest for security and access control purposes in accordance with article 6.1 f) of the General Regulations for the Protection of personal data. Assessing the proportionality and relevance of said interest against the rights of the interested parties.

1.7   DATA ORIGIN
The personal data come from the reservation made by the interested party or from the forms completed by him made available by the data controller.
In the event that the data does not come directly from the interested party, it will have its origin in the reservation made by the interested party through a third party (such as a travel agency or a travel booking page).

1.8   DATA ACCURACY
On the other hand, in order that the data in our files, computerized and/or on paper, always correspond to reality, we will try to keep them updated. So, for these purposes, the User must make the changes, directly, when so enabled or by communicating, by reliable means, to the corresponding area or department of the data controller.

1.9   RECIPIENTS
The personal data that you provide to the data controller may be communicated to the following categories of recipients:

• Third parties to whom the Company is obliged to transmit information, such as public authorities, in order to comply with the requirements of said authorities and the applicable regulations in their case
• The companies that own the hotels in order to be able to make reservations at them. The basis of legitimation in this case is the execution of a contract or pre-contractual measures (art.  6.1.b. GDPR)

JLM MALLORCA SL  does not market, sell or carry out any similar activity with your personal data , it only processes your personal data for the indicated purposes and for the use of the data controller.
The data controller has service providers with access to personal data (Data Processors). Among these service providers, you can find companies located outside the European Economic Area, so international data transfers could be made, in any case, complying with the appropriate guarantees in accordance with articles 44 and following of the RGPD. The suppliers of those responsible for the treatment located in the USA, are adhered to the Privacy Shield agreement

1.10   RIGHTS OF USERS
However, the interested party of the personal data in any case may exercise the rights that assist him, in accordance with the General Data Protection Regulation, and which are:
•    Right to request access to personal data relating to the interested party,
•    Right to request its rectification or deletion,
•    Right to request the limitation of your treatment,
•    Right to oppose the treatment,
•    Right to data portability
The interested party may exercise such rights by means of a request accompanied by a copy of their DNI, and in which they will specify which of these they request to be satisfied, sent to the data controller at the address: JLM MALLORCA SL  – Calle Romaguera, 18, 07100 Sóller – Mallorca (Balearic Islands) or by email info@granhotelsoller.com 
If you consider that your right to personal data protection has been violated, you may file a claim with the Spanish Data Protection Agency (www.aepd.es).