Privacy Policy
ABOUT US
Who is responsible for the processing of my personal data?
The data controller is the Company, a company AL RIMA («HOTEL PUENTE ROMANO») incorporated under Spanish law, with its registered office at Carretera de Cádiz, (Urbanización Puente Romano, Bulevar Príncipe Alfonso Von Hohenlohe, s/n) km 177, 29605 Marbella, Málaga, and provided with NIF A29048089.
How can I contact HOTEL PUENTE ROMANO regarding Data Protection?
HOTEL PUENTE ROMANO has appointed a Data Protection Officer (DPO) in accordance with Article 37 of Regulation (EU) 2016/679.
You may contact the Data Protection Officer through:
- Email: rgpd@puenteromano.com.
- Postal address: As indicated in the previous section, stating the reference “Data Protection.”
ABOUT HOW WE PROCESS YOUR PERSONAL DATA
What purpose will HOTEL PUENTE ROMANO use your personal data for?
We will use your personal data, as appropriate depending on whether you act as a guest, external customer, or non-customer user, the type of personal data that you consent to provide by expressly ticking the relevant checkbox, what you may reasonably expect to receive from us in this regard, or the service and/or product contracted, for one or more of the following specific purposes:
- To manage the registration, reservation, cancellation, and payment of your room and the services directly associated with it.
- To manage and provide services related to your reservation during your stay, such as housekeeping, hospitality services, preference management, and assistance with special requests.
- To manage the reservation, requests, and cancellation of other services offered by HOTEL PUENTE ROMANO which you may book, either through our Website or in person, for enjoyment during your stay or as an external customer, such as restaurant reservations, the SPA WELLNESS, the Owner’s Club, and the Tennis Club.
- To send you commercial communications, promotions, service offers, and newsletters exclusively related to HOTEL PUENTE ROMANO, provided that you have given your express consent.
- To include you in our recruitment database for the management of recruitment and selection processes when you provide your data through the “Work With Us” section.
- To use your image for promotional purposes on our social media accounts or other platforms, only where you have provided your express consent.
- To manage inquiries, complaints, requests for information, or communications submitted through contact forms, corporate email addresses, or social media channels.
- To manage incidents reported during your stay.
- To ensure security within the hotel's common areas, both indoor and outdoor, through video surveillance systems.
- To carry out non-intrusive internal statistical analyses, based on aggregated or pseudonymized data, for the purpose of improving our technology services.
How long will HOTEL PUENTE ROMANO retain my data once the purpose for which it is processed has been fulfilled?
We will use your personal data only for as long as is necessary to fulfil the purposes described in the previous section. Once such purposes have been fulfilled, the personal data will be duly restricted, with the legally required security measures, solely for the purpose of addressing any potential legal liabilities, for the following periods: thirty (30) days in the case of video surveillance recordings, one (1) year in the case of managing your application to work with us, two (2) years in the case of managing housekeeping services, four (4) years in the case of contracting additional services, six (6) years for payment and invoicing purposes, and five (5) years in all other cases.
Once these periods have elapsed, the data will be deleted from our information processing systems.
Does HOTEL PUENTE ROMANO carry out automated processing or create profiles using my data?
Yes, we inform you that, for certain purposes such as carrying out statistical analyses or sending personalised communications, HOTEL PUENTE ROMANO may rely on automated processing, including profiling.
In such cases, only the data that is strictly necessary will be used, and such processing will not produce legal effects or similarly significant consequences for the data subject.
The data subject has the right to request human intervention, to express their point of view, and to object to this type of processing.
What technical and/or organizational security measures does HOTEL PUENTE ROMANO apply to the processing of my personal data?
HOTEL PUENTE ROMANO has adopted the technical and organisational measures necessary to ensure the security of the personal data processed and to prevent its alteration, loss, unauthorised processing, or unauthorised access, taking into account the state of the art, the nature of the data stored, and the existing risks.
ABOUT WHY WE PROCESS YOUR PERSONAL DATA
Why does HOTEL PUENTE ROMANO process my personal data?
The processing of your personal data is based on:
- The performance of a contract or the implementation of pre-contractual measures, where the data is necessary for the management of reservations and contracted services.
- Legitimate interest, in the case of video surveillance processing carried out for security purposes.
- Explicit consent, in cases involving commercial communications, recruitment processes, use of images, and any other processing activities not covered by the legal bases referred to above.
- In the case of processing involving health-related data, such processing shall be carried out in accordance with Article 9 of the GDPR, on the basis of the data subject’s explicit consent and exclusively for the provision of wellness services.
Am I required to authorize the processing of my data?
The provision of certain personal data is necessary in order to process your contact request or the contracting of services offered by HOTEL PUENTE ROMANO.
If you do not provide the data that is strictly necessary for such purposes, it will not be possible to process your request or formalize the corresponding contractual relationship.
The provision of personal data for other purposes, such as the sending of commercial communications, participation in recruitment processes, or the use of your image, is voluntary, and you may withdraw your consent at any time.
ABOUT WITH WHOM WE SHARE YOUR PERSONAL DATA
To whom may HOTEL PUENTE ROMANO disclose my personal data?
Personal data will not be disclosed to third parties except where required by law or where necessary for the proper provision of services, in which case such third parties will act as data processors under an agreement in accordance with Article 28 of the GDPR.
Will my data be transferred to third countries?
Should international data transfers be necessary for the proper provision of services, such transfers will be carried out with the appropriate safeguards provided for under Articles 44 and following of the GDPR.
What happens to the links to external service providers available on HOTEL PUENTE ROMANO’s website?
The Website may contain links to other websites and platforms that may be of interest to users. HOTEL PUENTE ROMANO assumes no responsibility whatsoever for the content of, or the privacy policies applicable to, such websites. Users access such websites at their own responsibility and in accordance with the terms of use and privacy policies established by those third parties.
This Privacy Policy does not apply to the processing of personal data carried out by third parties through websites that may be accessed via links from this Website.
The inclusion of links on this Website does not imply the existence of any relationship, recommendation, or endorsement by HOTEL PUENTE ROMANO of the content or services offered on the linked websites.
ABOUT YOUR RIGHTS REGARDING YOUR PERSONAL DATA
What rights do I have regarding the personal data I have provided to HOTEL PUENTE ROMANO?
We remind you that you may exercise the following rights regarding your personal data at any time:
a) Access. You have the right to access your information in order to know exactly which personal data we are processing.
b) Rectification. Under certain circumstances, you have the right to rectify those personal data that are inaccurate or incomplete.
c) Erasure. Under certain circumstances, you have the right to request the deletion of personal data that you no longer wish us to process.
d) Objection. Under certain circumstances, and on grounds relating to your particular situation, you have the right to object to the processing of your personal data, in which case we will keep them restricted for the period described in section 4 above.
e) Data Portability. Under certain circumstances, you have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format, and to have those data transmitted to another controller other than HOTEL PUENTE ROMANO.
f) Right not to be subject to automated decision-making. Under certain circumstances, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, you must send a written communication to HOTEL PUENTE ROMANO. Such communication may be sent by:
- Email: rgpd@puenteromano.com.
- Postal address: As indicated in the previous section, stating the reference “Data Protection.”
Do I have the right to withdraw the consent I have given for the processing of my data?
Yes. You may withdraw the consent you have given to us at any time without affecting the lawfulness of the processing carried out prior to its withdrawal. To do so, you need only submit a communication using either of the two methods described in the previous section.
What if I disagree with the way HOTEL PUENTE ROMANO has processed my data? Can I lodge a complaint?
If you are not satisfied or believe that we have not processed your personal data in accordance with the applicable regulations, you may contact us via the email address rgpd@puenteromano.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
CONTACT US
The personal data you provide through this form will be processed by HOTEL PUENTE ROMANO for the purpose of handling and managing any enquiries submitted by customers. HOTEL PUENTE ROMANO undertakes to respect and facilitate the exercise of the rights of access, rectification, erasure, objection, restriction of processing, and data portability, as recognised under Regulation (EU) 2016/679 and Organic Law 3/2018. To exercise these rights, the data subject may contact us at any time by writing to our address Bulevar Príncipe Alfonso von Hohenlohe, s/n, 29602 – Marbella, Málaga, Spain or by email at rgpd@puenteromano.com, indicating “Data Protection” as the reference.
Proof of identity documentation will only be requested where it is strictly necessary for the proper processing of the request.
SPA CONTACT
The personal data you provide through this form will be processed by AL RIMA, S.A. for the purpose of properly managing the requested wellness and personal care services.
The processing of such data shall be carried out in accordance with Article 9 of Regulation (EU) 2016/679, on the basis of the data subject’s explicit consent and with the implementation of enhanced security measures. AL RIMA., S.A. undertakes to respect and facilitate the exercise of the rights of access, rectification, erasure, objection, restriction of processing, and data portability.
To exercise these rights, the data subject may contact us at any time by writing to our address Bulevar Príncipe Alfonso von Hohenlohe, s/n, 29602 – Marbella, Málaga, Spain, or by email at rgpd@puenteromano.com, indicating “Data Protection” as the reference.
Proof of identity documentation will only be requested where it is strictly necessary for the proper processing of the request.
TENNIS REGISTRATION FORM
The personal data you provide through this form will be processed by AL RIMA, S.A. for the purpose of managing customer registrations for the Tennis Club. AL RIMA, S.A. undertakes to respect and facilitate the exercise of the rights of access, rectification, erasure, objection, restriction of processing, and data portability, in accordance with Regulation (EU) 2016/679 and Organic Law 3/2018.
To exercise these rights, the data subject may contact us at any time by writing to our address Bulevar Príncipe Alfonso von Hohenlohe, s/n, 29602 – Marbella, Málaga, Spain, or by email at rgpd@puenteromano.com, indicating “Data Protection” as the reference.
Proof of identity documentation will only be requested where it is strictly necessary for the proper processing of the request.