PRIVACY POLICY
Personal Data Protection
By means of this legal notice, Hotelera Iris S.A. (Hotel Iris) informs the users of the website about its privacy and personal data protection policy.
In accordance with the data protection laws in force, we inform that the sending of any personal data through the forms on the website, e-mail or by telephone implies accepting and consenting to the processing of such data under the terms set out in this privacy policy.
The Company guarantees the confidentiality of the data provided. Likewise, it undertakes to comply with the obligations established in the European Data Protection Regulation, as well as the Data Protection Law, adopting the necessary technical and organisational measures to prevent loss, misuse, alteration and unauthorised access, taking into account the state of technology, the nature of the data and the risks to which they are exposed.
Contact Section
Data Controller
The data controller is Hotelera Iris S.A. (Hotel Iris).
With registered office at C/ Amilcar 13, 07600, Palma, Mallorca, Illes Balears.
Purpose of Processing
The information provided by interested parties will be processed in order to respond to requests for information, as well as to provide information about products, offers and services that may be of interest to them, provided that consent has been granted.
Data Retention
The personal data collected will be retained for as long as there is a mutual interest in doing so. The data subject may request its deletion at any time.
Legal Basis for Processing
The legal basis for processing your data is the consent granted by the interested parties.
The fields marked as mandatory must be completed; otherwise, the form cannot be submitted.
Recipients of Data Transfers
No data transfers are planned.
Recipients of International Transfers
No international transfers of personal data to third countries are foreseen.
Data Subject Rights
Current data protection legislation grants you a number of rights regarding the use of your personal data. All rights are personal and non-transferable and may only be exercised by the data subject following verification of their identity.
Data subjects may exercise the following rights:
1) Right of access to the personal data concerning them.
2) Right to rectify inaccurate or incomplete personal data.
3) Right to erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
4) Right to restrict the processing of personal data in certain circumstances, in which case the data controller will only retain the data for the establishment, exercise or defence of legal claims.
5) Right to object to the processing of personal data in certain circumstances and for reasons relating to the data subject’s particular situation. In such cases, the data controller will only retain the data for the establishment, exercise or defence of legal claims.
6) Right to data portability when the processing is carried out by automated means.
7) Right to withdraw consent at any time, without affecting the lawfulness of the processing carried out prior to such withdrawal.
8) Right to lodge a complaint with the competent Data Protection Supervisory Authority, particularly when the exercise of these rights has not been satisfactorily addressed.
To exercise any of these rights, you must submit a written and signed request, together with a photocopy of your ID card or passport, to the registered office indicated in the section entitled Data Controller.