DATA TREATMENT RESPONSABILITIES: “DNA MAGDA S.L! (from now “HOSTAL VIKY”) , VAT NUMBER B-80403439, as owner and responsible of the Website, informs the users about the Property of the Website (from now “Users” and “Website”) about his Data Protection Policy and personal data info (from now “Personal Data”, so the users Determine free and Voluntarily if they want to provide to HOSTAL VIKY the personal Data they may be required or which can be obtained from the USERS in relation to their visit to the Company Website.
HOSTAL VIKY reserves the right to modify the present Policy to adapt to new Updates in Laws or jurisprudency and also to new practices from the Market / Consum, On those cases, HOSTAL VIKY will announce the changes made with reasonable anticipation to their active use. Certain services provided in the Website may contain particular conditions with specific previsions in Personal Data Protection.
HOSTAL VIKY, as responsible of his CLIENTS´ personal Data treatment and USERS, informs them that those DATA will be treated taking into account what disposes at the Rule (UE) Number 2016/679 from 27 Th April , 2016 (GDPR; Spanish Data Protection Agency) in relation to the protection of people about the treatmemt of Personal Data and the current Organic Law 15/1999 from 13th December (LOPD, Spanish Organic Law protection Agency), in relaton to the Personal Data Protection and that until the publication of the new LOPD (Spanish law), under Parlamentary Treatment.
INFORMATION / TREATED DATA: Data Merely identificative (name + Surname) and Contact Data in its case (Name, Phone, and email address). Treated / Got Images in our Location through the VideoSurvaillance Cameras Installed, with a legitim Interest from the Company.
RESPONSIBLE OF THE TREATMENTS:
“DNA MAGDA, S.L”, VAT NUMBER B-80403439
Social Address: Calle Marte, n2, Postal Code: 28042 Madrid
Contact email: firstname.lastname@example.org
Contact email for Data Protection: email@example.com
Contact phone: (+34) 91 305 48 12
GOAL ABOUT DATA TREATMENTS:
MAINTENANCE OF THE RELATION, contraptual existed and the Commercial relationship with clients and guests, Staff, Hire Selection Candidates, followers at Social Nets, Users and People Interested in HOSTAL VIKY. The Operations estimated for that Treatment are:
WHICH PERSONAL DATA WE TREAT:
when filling any of our Forms, depending each case:
- https://www.hostal-viky.com/es/cont acto/
In the refered Forms, you are allowed to provide, among others, the following personal data:
- Name, Surname and Contact Data (address, phone numbers and email).
- Other Contact Data and preferences.
- When visiting our Facility, Images will be obtained by our Surveillance System, regulated
- Treatment and which goal is: Access Control, Staff Control, Security and Surveillance of the Facility.
- We got your Data when contacting through our website.
- When visiting our restaurant or stay at our Hostel, we will get your Data, if you fill any of our Promotion Forms, Subscription Offers or Fidelity Campaigns.
- If The personal data had been provided by the Users, the same Data must be true, and you must notify HOSTAL VIKY about any modification made on them, answering in any case about the veracity and accuracy of the provided Data at each case.
- The interested person who provides his Data to HOSTAL VIKY, must be over 18 years, being complete responsive of that declaration.
.COMMERCIAL PUBLICATION COMUNICATION delivery by email, SMS,
WHATSAPP, Social Media or any other Electronic way or physical, now or future, which allows to make commercial comunications, Those commercial electronic communications will be made by the RESPONSIBLE and in relation to Services / product from HOSTAL VIKY, or their colaborations / providers with we have any promotion agreement. In that case, Third parties will never have access to Personal Data.
.ACTIONS REQUIRED BY THE USER: Treat Request or any kind of request which, about the Services / products by HOSTAL VIKY, is made by the User through any of the Contact forms which are put to your disposal.
.STORED DATA DURING YOUR VISIT: When you visit our website, our web Servers store usually, among other data, information about the Browser and the Operative system that you use, the website where you re visiting us, the pages you visit in our website and the visit date. For security reasons, for example, so we can detect possible attacks to our website, during a period of time of 7 days the IP adress your Internet Service provider gave you is stored. With the exception of the IP address, The personal Data Details are only stored if you provide that information, for examole, filling a subscription, a contest, request of Table booking, User registry, Commercial Promotion. HOSTAL VIKY uses your personal data for the technical administration of the Website, Users´ Treatment, Product Contest and for Marketing Purpouses, only when necessary and always informing previously to the User and Data Owner.
.NEWSLETTERS / SUBSCRIPTION NEWSLETTER: In case of subscription to any of our Newsletters, now or future, as it is informed, you provide your consent to the use of you personal data so for the delivery of Publicity or other Marketing actions, which will be stored and use for those purpouses, as delivery of Newsletter (previously mentioned), News in our Restaurant, through the comunication channels as email, Postal way or any other authorized channel by you, We can use your Data to create and maintain updated your User Profile and so we can send personalized information about Publicity actions or Promotions. As well, We can use the data provided by you to analyze and improve the efficiency of the Services from our Website, Publicity, Marketing, Market Prospect and Commercial Activities.
.DELIVERY OF C VITAE BY CANDIDATES: In case of delivery of C Vitae by the Candidate, through our CONTACT FORM, or at the mail from HOSTAL VIKY (firstname.lastname@example.org), the candidate authorises to HOSTAL VIKY to analyze the delivered documents, all the content which may be accesible through the Search (Google), the profile he mainteans at Social Media, like Linkedin or others, the Data obtained in the Access Exam and the information revealed during Job Interview, with the goal of value his candidacy and be able to offer a Job in its case. In case the candidate not to be selected, HOSTAL VIKY will be able to store his C VITAE to incorporate to future Opoortunities, unless the Candidate show his opposition, using any of the mentioned Channels.
GUIDELINES OF DATA STORAGE: The data provided, in general conditions, will be stored while there is a mutual interest to maintain the end of the treatment and when it is not necessary for that purpouse, will be deleted with the correct Security Measures to garantee the erase of the Data or the Total destruction of them,
With this General Rule, there are the following Possible Variations: (i) Desglosed Data: they will be stored with a supression Date. (ii) Data from Clients, by HOSTAL VIKY: There will be kept for a period of 4 years (66 Article and following by General Tribute Law), being a 6 years period following the Article 30 by the Commerce Code about Contable Books and Invoices, (iii) Provided Data by filling our Newsletter: since the User accepts the allow until he retires it , (iv) Documentation about Job Situation or in relation with Social Security: 4 years , Article 21 from Real Legislative Lae 5/2000, 4th August, where the text about Infractions is approved in the Social Order, (v) Data provided by candidates through the delivery of his C Vitae: The C vitae will be stored for a Maximum period of 2 years for Future Selection process unless the Candidate express the Opposite, (vi) Obtained Images by the Surveillance System Owner in the company: 30 days, according to the AEPD (Spanish Data Protection Agency).
DATA COMMUNICATION: Your Personal Data can be communicated to:
- Companies, entities and other organizations which have hired the Service, such as: Hosting, Marketing services, Market Analysis and Society of Information Services.
- Companies or other organizations which have requested or accepted that we can share your personal data.
.IDENTIFICATION OF PROVIDERS WITH ACCES TO DATA:
- Web Design: QDQ MEDIA, S.A.U. Vat Number A.81745002, Address: Haya Street, 4 , postal code 28044 Madrid,
- SURVEILLANCE SYSTEM MAINTENANCE: SEGURVISION, S.L. Address for notifications: C/ Arturo Soria, 310, postal code: 28033 Madrid.
- LIENZO DIGITAL PUBLICITY STUDIO, S.L. VAT NUMBER: B-04447744. Address_ Rambla Obispo Orbera, 55. plt 4, 2 Almeria Postal Code 04001
- LAW SERVICES: ISMAEL ISTAMBUL FERNANDEZ, LAWYER.
- INVOICING SOFTWARE: DEBITOOR ESPAÑA CLOUD SOLUTION, SL., VAT number B-65217259, Paseo de la Castellana, 166, Esc, 3, 7º C, 28046 Madrid
- CLOUD STORAGE: ONE DRIVE. Microsoft Corporation.
- BOOKING.COM B.V. A limited responsability Society, formed under Netherlands´ Legislation and Home office located at Herengracht, number 597, 1017 CE, Amsterdam. Netherlands.
- SITEMINDER DISTRIBUTION LIMITED: A company located At England and Wales (Registry Number: 07242801) with Social Address: Waterfrint, Hammersmith Embankment, Manbre Road, London W6 9RH
- The purpouse of the communication of data to the mentioned Companies, which form and join with the responsible, will be the same that the previous ones.
- Professional Services providers , such as lawyers, attorneys, public Notaries, registers, or other Similar Professionals in some specific cases.
- Public Organisms, Courts, regulatory Bodies, and other administrative Authorities, when we consider that it is necessary to fill with a legal obligation or regularoty, or in other form to protect from reclamations against us or third parties, or the security of people , also to warn, or some way to fight, against fraud or beacuse of Security reasons or protection.
LEGITIMIZATION OR THE INFORMED TREATMENTS:
By general Rule, previous to the treatment of Personal data, HOSTAL VIKY gets express permision from the Titular with the incorporation of consent clausule informing in the different Information Reception Systems, following a legitime Interest showed by the User. The base norms for the Legitkmization are the following:
- When the Treatment is necessary for the execution of a contract in which part or the data are necessary in the environment of a precontract relationship.
- When the use of your personal data is necessary for the satisfaction of our legitimit interests or the Companies which we have shared your personal data.
- When the treatment of the data is necessary to fill the norm / legislation which regulates the legal obligations from the Area, According to each moment, where we can find the concerning to the activation in the Market of products and services, defense of the consumers and Users, sanitary and security in the products, order of the Minorist Commerce and other aply norm.
- In relation to what is exposed in the norm apply for Services in the information Society (LSSI in Spanish) , if there is a previous relationhip with the context of a sales of a product, the data will be able to use for the delivery of commercial elcctronic communications in reference to our restaurant or its Product Menu or dishes, unless you deny to it in the previous way exposed for that porpouse.
- When we consider that it is necessary to treat your personal Data to achieve a legal obligation or regulatory, or a vital interest.
These are your rights as Interested or Owner of your personal Data:
Access right: You have right to obtain from the company confirmation if they are treating or not your personal data which concerns you. HOSTAL VIKY, at each case. Will offer a copy of the personal data object of the treatment.
Modification right: You have the right to obtain without dilation the modification of the personal data which are incorrect and may concern you. Taking into account the goal of the treatment, you will have the right to complete all the personal data which are not complete, even using an additional declaration.
Suppression right: You have right to obtain with dilation the elimination of the incorrect personal data which may concern you. At HOSTAL VIKY we are obliged to delete without dilation those personal data when any of these circunstances happen:
a. the personal data are not neccesaary in relation to the goal which they were got or treated in other way.
b. You delete the consent in which the treatment is based and this is not based on other juridic rule.
c.You oppose to the treatment as long as other legitim reasons don´t thrive.
d. Your data have been treated ilicitilly,
e. Your data must be deleted following a legal obligation.
f. or your personal data have been obtained in relation to the service offer of the information society for kids (under 16 years).
Treatment limit right: When the treatment of your personal data has been limited according to a request from your side, those data will be available to use as the object of treatment, with exception of his conservation, with your consent or for the form, the exercise or the defense of reclamations, or to protect the rights from another person or juridic entity, or just for reasons of important Public interest. You have the right to obtain the limitation of treatment of your personal data when any of these conditions is applied:
a. When you refuse the accuracy of the personal data, during a time it allows HOSTAL VIKY verify the accuracy of these.
b. The treatment will be ilicit and as interest you deny to the supression of the personal data and you request, in other way, the licitation of use.
c. HOSTAL VIKY doesn´t need the personal Data for the goals of the treatment, but you need them for the formulation, exercise or defense of a reclamation.
d. When you have been opoossed to the treatment, while the legitim reasons prevailed over the Interest person.
Right to the portability of the Data: You have right to receive the personal data of your interest in a structured format, common use and mechanic read, and to transit them to other treatment without HOSTAL VIKY avoids it, when;
- a. The treatment is based on your approval. And
- b. The treatment is made executed by automatic ways.
Right to oppose: you have right to oppose in any moment, by reason in relation with your particular situation, that personal Data of your concern to be object of treatment based in public interest or legitim interests from the responsible of treatment. When the treatment of personal Data has a goal the direct mercadotechnic, you will have right to oppose at any moment to the treatment of the personal data of your concern. In case you oppose to the treatment of your data with goal of direct mercadotechnica, those persona Data will be stopped to to use for those goals.
We remember you that when the juridic base of th treatment of your data with your consent, you have right to refuse that consent in the same easy way you provide them. You also have right to introduce a reclamation with the Control Authoriy, normally the Spanish Data Protection Agency. For more information, you can visit the website in the following link: https://www.aepd.es
To finalize, you have right to not to be object from a deccission coming from HOSTAL VIKY based only in the authomatic treatment, including the elaboration of profiles, which may have juridic effects or affects you deely in a similar way.
CONTACT DETAILS TO EJECT YOUR RIGHTS: HOSTAL VIKY, applying the rule (UE) 2016/6791 from 27th April , 2016 (GDPR) and recently LOPD-GPD 3/2018 from 5th December, counts with an intern Responsible designed for the managment of Data protection and his contact details are as follows:
- Social Address: Calle Marte, n2, postal Code: 28042 Madrid
- Data Protection contact email: email@example.com
- Contact phone: (+4) 91 305 48 12
OBLIGATORY TERM OF THE PROVIDED INFORMATION:
The received data by any of the Contact form created in the Website, or the data received by the Users with the reason of taking part in activities/ events, presentations, promotions, etc developed by HOSTAL VIKY, will be incorporated, depending their goal, to the Intern Treatment Activity Registry (Article 30, Reglament UE 2016 /679 from 27 th April 2016. The registry of Activity of Treatment is at disposal of the Control Authority.
The Users, filling the right squares and entrance of Data on the different fields, marked with * in the contact Forms or introduced in Paper, accept expresily and free and inequivoc way, that his Data are neccesary to assist his request, by HOSTAL VIKY, being Voluntary the inclussion of Data in the rest of fields. The User guarantees that the personal Given Data are true and makes responsible of comunicating any modification of them.
HOSTAL VIKY informs and garantees expresely to the users that their personal Data will not be provided in any way to Third parties and that, if it has intention to make any change in the future, Authorization will be required , informing to the Users, about the Data of the third party and the goal for that transfer. All the dates required through the website re a must, as they are necessary to provide an optimum service to the user. In case all the data not to be provided, we can´t garanteed that the information and requested services to be completely adjust to your needs,
SECURITY MEASURES: Acoording to disposed in the rules under Personal Data protection, and specially in the Reglament (UE) 2016/679 from 27 th April 2016 and recent LOPD-GOD 3/2018 from 5th Decemeber, HOSTAL VIKY is fullfilling with our the norm disposals GDPR and LOPD for the Treamment of the Personal data under his responsability, and manifest with the principles described in the article 5 from GDOR and in the article 4 from LOPD, that those are treated in licit way, legal and transparent in relation with the interested person and using adecuate , pertinent and limited to the necesssary in relation with the goals for those which are treated.
Any way, HOSTAL VIKY has implemented the necessary mechanisms for:
1. Garantee the confidentiality, Integrity, availability and resilency permanent in all the systems and tretament Services.
2. Restaure the availability and the acces to Personal Data in a fast way, in case of physical incident or technical.
3. Verify evaluate, and valorate , as a norm , the efficiency of the technical measures and organised, implemented to garantee the security of the treatment.
4. Pseudomize and number the Personal Data, in its case.
HOSTAL VIKY garantees that it has implemented tcchnical and organised policies adecuate to apply the Security measures that GDPR stablish and also LOPD (Spanish Dat protection Agency) to protect the rights and freedom of the Users and it has comunicated the right information so they can proceed with them, HOSTAL VIKY has installed all the meeasure and technical ways at its disposal to avoid the loss, bad use, alteration, non authorized acces and steal of the personal Data provided by the User to HOSTAL VIKY. However, the User must be aware the Security meaures at Internet are not impregnable.
Personal Data which are incorporated to the Registry of Intern Treatment activities, will be treated with the Maximum Confidenciality and security,the Owner of the indicated file will be able to deliver commercial information concerning to NEWS and PROMOTIONS MADE IN OUR RESTAURANTS AND PROVIDED BY HOSTAL VIKY. In this case, the remittent compromises to indicate his publicity Goal at sending, and to coordinate a Simple System, clear and Free to access just in case you don´t want to continue receiving them.
The Services by HOSTAL VIKY contened in the web are destinated exclusively to People Over 18 years old- In case HOSTAL VIKY offers any promotional Activity, event, contest or similar, in which the data Storage can be made for under 18 years old, HOSTAL VIKY will require the Parental Authorization so the People under 18 can access to them and their Pesonal Data can be used in Automatic treatment according to this Notice about the policy of Data Protection.
As it was informed previously, the delivery and automatic treatment of the personal data has a goal the maintenance of the comercial relationship stablished with HOSTAL VIKY, the managment, administration, lent, amplification and improvement of the services that the user wants to hire, Introduce , or use the customization of those services to his preferences and likes, the study of the use of the seevices by the Users, the design of new sport services in relation with those services, the delivery of updates of the services, the delivery, by traditional and electronic ways, of commercial information concerning HOSTAL VIKY now and in the future.
Social Media: PROFILES BY HOSTAL VIKY AT SOCIAL MEDIA:
Reasons to treat your personal Data?
- Answer to all your questions, requests.
- Manage the required service, answer your request or treat your request.
- Be in contact with you and a Community of followers.
Which is the legitimate to treat all your Data?
The acceptance of a contractual relationship in the environment of the social media at its case, and conformed to their Privacity Policies:
Knowing HOSTAL VIKY as responsible in all the case of the Treatment of the date of his fans, subscriptos, comentarists and other Users profiles (from now, Followers). The treatment that HOSTAL VIKY will make with those data will be, as Maximum, what the social media allows to the coporate Profiles. So, HOSTAL VIKY will be able to inform to his follower by any way that the social media allow about his News, activites, promtions. HOSTAL VIKY will never get Data from the social Media, unless it has expresily the consent from the User for that purpouse. When, going to the Nature of the social media, the effective use of the rights from the follower is supedite to the codification of his personal profile, HOSTAL VIKY will advise about it according to his possibilities.
HOSTAL VIKY AND THE CUMPLIMENT OF THE NORM RGPD 679/2016 AND LOPD - GDD 3/2018
We inform all the users / customers of our Online shop, that for HOSTAL VIKY is vital the protection of the Data you provide when contacting us, so, and accordingly to the Norm RGPD and LOPD-GDD available, and as a descriptuon of measutres taken by HOSTAL VIKY:
- We have an activity Record of Treatment (RAT) accordingly to the article 30 from RGOD.
- We have audited the sources of entrance of data in the company, and conformed to this identification, we have stablished the juridic bases of the treatment of Data in the company at each case, conformed to the articles 6 and 9 from RGPD.
- We inform to the Users/clientes/ providers/employess in relation with the Treatment of their Data, conformed to articles 13 and 14 from RGPD.
- We have stablished specific ways to asnwer the possible request of rights from the people interested, in relation with his data, and specially the rights of access, rectification and suppression, limit of treatment, portability of Data (article 20 from RGPD), opposition ad automatic deccisions.
- we have identified to our Tratement managers (partners) and we have requested the previous garantes of fullfilling which allow us to talk about the made procedure and in that way conserve the refreed garantees for the possible equesters. Once we have evaluated the Treatment managers , we have proceed to sign the contract with the treatment manager, conform to article 28 from RGPD.
- We have done an anaylysis of External risks to obtain a list of vulnerability and in that way implement the mesures of security rights conformed to the norm from DPO designated and the System Administator by HOSTAL VIKY,
.We have made training sessions to the Staff , suplied by our DPO designated in our Facility.
.Concerning our staff, all the employees anc colaborators have signed a confidentiality contract and privacy where we re informed about the use of the Software equipments.
.There is a contingency and continuity planning in the company which starts from a correct organization and classification of the information and the obtain of a sure backup just in case of possible attacks, viruses, malware.
.HOSTAL VIKY , as responsible company and serious about the Norm fulfillment, recomends to his employees the subscription of bulletins of alerts such as incibe
(WWW.INCIBE,ES), osi (WWW.OSI,ES) AND cert (WWW.INCIVE-CERT.ES) Just in case of interest for our Users / customers,, and promoting the cybersecurity and prevention culture the links to subscribe to the different websites required are as following:
- INCIBE ALERTS. Https:/7www.incibe.es/newsltetter/subcriptions
- OSI ALERTS: https://www.osi.es/es/boletines /suscribirese
- INCIBE.CERT ALERRS: https://wwww.incibe-cert.es/newsletter/subscriptions
.There is an intern protocol, known as by all the employees, to notify the violations of security, according to the norm, they must notify the violation of the Data to the Data protection authorities (article 33 from RGPD).
.We have designed an Intern data protection Responsible , which HOSTAL VIKY puts at the users / clients´disposal, the following contact email for subject concerning with data protection: firstname.lastname@example.org
After the folowing request, HOSTAL VIKY will communicate previously by written text, conformed to the aplicable legislation, if we have stored data from personal use from you, and which they are. In case you appear as User,we offer the posisbility of consulting personally your Data, and in case, proceed to delete, modify and / or update.
CONTACT: Please if you have any doubt about the present privacy poliy, contact us through:
- Social Address: C/ marte, 2 Postal code: 28042 Madrid
- Contact email: email@example.com
- Contact email for data protection: firstname.lastname@example.org
- Website: http://www.hostal-viky.com/es/
- Contact phone: (+34) 91 305 48 12