1. Information for the User
AP Hoteles y Servicios de Parking SA is responsible for the processing of the User’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data. The following information regarding the processing is therefore provided:
Purpose of processing: to maintain a commercial relationship with the user in relation to the products or services offered. The operations planned to carry out the processing are as follows:
- Respond to inquiries and suggestions that users may submit.
- Process orders, requests, or any type of inquiry made by the user through any of the contact methods made available.
- Manage your requests and/or reservations and their payment.
- Send advertising commercial communications by email, mobile applications, social media communities, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be carried out by the data controller and will relate to its products and services or those of collaborators or suppliers with whom promotional agreements have been reached.
- If you send or leave a curriculum vitae, it may be used in personnel selection processes. CVs will be kept for a maximum period of one year, after which they will be deleted, guaranteeing full respect for confidentiality both in their processing and their subsequent destruction. After this period, if you wish to continue participating in selection processes, please send us your CV again.
- Data retention criteria: data will be kept while there is a mutual interest in maintaining the purpose of the processing. When it is no longer necessary for that purpose, it will be deleted with appropriate security measures to ensure the pseudonymization of the data.
- Data communication: web developers and the company providing hosting services on their servers will have access to the data. All of them have regulated access with us exclusively for the purposes described here. The data will not be transferred to any other third party for processing, except where legally required.
- Legal basis: processing is based on the consent requested through the corresponding acceptance checkbox.
User rights:
- Right to withdraw consent at any time. Right to object and to data portability. The data subject has the right to receive all personal data concerning them that they have provided to a data controller, provided that the processing is based on consent or is necessary for the performance of a contract and is carried out by automated means.
- Right of access: The data subject has the right to request and obtain, free of charge, information about their personal data undergoing processing, the origin of the data, and the communications made or planned regarding such data. When the request is made electronically, unless otherwise requested, the information will be provided in a commonly used electronic format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
- Right to rectification and erasure: The data controller is obliged to enforce the data subject’s right to rectification or erasure within ten days. Personal data whose processing does not comply with legal provisions, particularly when such data are inaccurate or incomplete, will be rectified or erased as appropriate. The data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them and has the right to have incomplete personal data completed, including by means of an additional statement.
- Right to restriction of processing: The data subject has the right to obtain from the controller the restriction of the processing of their data. When the processing of personal data has been restricted, it may only be processed for storage purposes, with the consent of the data subject, for the establishment, exercise or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of public interest. Any data subject who has obtained restriction of processing will be informed by the controller before the restriction is lifted.
- Right to object: The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them (public interest or legitimate interest), including profiling based on those provisions. The controller will stop processing the personal data unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
- Right to lodge a complaint with a supervisory authority if you have not obtained satisfaction in the exercise of your rights. In this case, before the Spanish Data Protection Agency: http://www.agpd.es
Contact details to exercise your rights:
- Postal address: Camino del Aeropuerto 22, 28042 Madrid.
- Email address: administracion@aphoteles.com
2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
Users, by ticking the corresponding boxes and entering data in the fields of the contact forms or download forms, expressly and freely accept that their data is necessary for the provider to process their request, while the inclusion of data in the remaining fields is voluntary.
The User guarantees that the personal data provided to the controller is truthful and is responsible for communicating any modification thereof.
The controller expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that whenever any type of transfer of personal data is carried out, the express, informed and unequivocal consent of the Users will be requested beforehand.
All data requested through the website is mandatory, as it is necessary for the provision of an optimal service to the User.
If all the data is not provided, it cannot be guaranteed that the information and services provided will be fully adapted to your needs.