Privacy Policy
Hotel Buenavista Dénia (“we,” “us,” or “our”) values your privacy and is committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act of 2018 (“CCPA”), and related legislation. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit and interact with our website, hotelbuenavistadenia.com.
1. Commitment to Privacy and Data Protection
We are fully committed to protecting the confidentiality, integrity, and availability of your personal data. We take your privacy seriously and process your personal data lawfully, fairly, and transparently. This policy is intended to clearly explain the types of data we collect, why we collect it, and how we use it, ensuring full compliance with our legal obligations and your privacy rights.
2. Scope and Data Controller
This Privacy Policy applies to all visitors, users, and others who access or use the services available on hotelbuenavistadenia.com. Hotel Buenavista Dénia is the “data controller” for purposes of the GDPR and is responsible for the processing of your personal data.
If you are a California resident, this document also serves as our notice under the CCPA regarding your privacy rights and our practices around your personal information.
3. Categories of Data We Process
We may collect and process the following categories of personal data:
a. Usage Data
Information about how you use our website, including your IP address, browser type, operating system, referral source, time zone settings, session durations, and pages viewed.
b. Account Data
When you voluntarily provide it, we collect information such as your full name, email address, phone number, billing and mailing addresses—typically through booking forms or account registration.
c. Profile Data
Details such as your preferences, past bookings, feedback, interests, and behavioral data related to how you interact with our website and services.
d. Communication Data
Contents of your communications with us, including customer support inquiries, emails sent, call records, or messages submitted through contact forms or live chats.
e. Technical Data
Device-specific data including your device type, system configuration, screen resolution, language and locale settings, and mobile network data, used for optimizing and securing the website experience.
f. Transaction Data
Details of payments made, including transaction IDs, booking confirmation data, and delivery or invoice information related to your hotel stays and associated purchases.
g. Preference Data
Data related to your marketing and communication preferences, such as newsletter subscriptions, accepted cookies, and interest indicators.
4. Legal Bases for Processing
We process your personal data based on the following legal bases:
– Consent: Where you provide clear and unambiguous permission for specific processing (e.g., newsletter signup, cookie preferences).
– Contractual Necessity: When processing is required to fulfill your reservation or pre-contractual requests.
– Legitimate Interests: For purposes necessary to the operation and security of hotelbuenavistadenia.com, such as improving user experience, preventing fraud, or ensuring IT stability and growth.
– Legal Obligations: To comply with applicable laws, such as tax or consumer protection regulations.
5. Your Rights
In accordance with the GDPR and CCPA, you have the right to:
– Access: Request a copy of your personal data held by us.
– Rectification: Request corrections to inaccurate or incomplete data.
– Erasure: Request deletion of your data (“right to be forgotten”) in certain circumstances.
– Restriction: Request limitation of processing of your data.
– Portability: Receive your data in a portable format or request its transfer to another controller.
– Object: Raise an objection to processing based on legitimate interests or marketing purposes.
– Non-Discrimination: Under the CCPA, you have the right not to be discriminated against for exercising your privacy rights.
To exercise any of these rights, please contact us at [email protected].
6. Security Measures
We implement comprehensive security protocols to ensure the safety of your personal data:
– Data encryption (SSL/TLS) for data in transit.
– Secure storage solutions with restricted access.
– Role-based access control (RBAC) and cybersecurity monitoring tools.
– Regular backups to protect against data loss.
– Staff training in data protection and information security best practices.
7. International Data Transfers
Where applicable, we transfer personal data outside the European Economic Area (EEA) or other jurisdictions in compliance with international data transfer standards. Such transfers are safeguarded through Standard Contractual Clauses (SCCs) or other appropriate legal mechanisms to ensure a level of protection consistent with EU GDPR requirements.
8. Data Retention
We retain your personal data for no longer than necessary for the purposes for which it was collected. Retention periods are determined by the type of data and applicable legal obligations:
– Usage and Technical Data: Retained for 12 months to enhance website performance.
– Account and Profile Data: Retained during active account usage and up to 3 years post-interaction.
– Transaction Data: Retained for a period of 7 years for tax and accounting purposes.
– Communication Data: Retained for up to 3 years for service quality and support resolution.
– Preference and Marketing Data: Retained until you withdraw consent or opt-out.
9. Cookie Policy
Our website uses cookies and similar technologies to enhance user experience and gather analytics. These include:
– Essential Cookies: Ensure core website functions such as booking forms and security mechanisms.
– Functional Cookies: Save your settings and preferences for a customized experience.
– Analytics Cookies: Collect aggregated usage data to inform website improvements.
– Performance Cookies: Monitor the efficiency and reliability of the website’s features.
10. Cookie Consent and Management
Upon visiting hotelbuenavistadenia.com, users are informed about our use of cookies. We obtain consent for certain types of cookies as required by GDPR and CCPA guidelines. You may at any time manage your cookie preferences through our Cookie Settings panel or by modifying your browser settings. Opting out of certain cookies may affect site functionality.
11. Children’s Privacy
Our website and services are not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If we learn that a child has submitted personal data without verified parental consent, we will promptly delete such information.
12. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted directly on hotelbuenavistadenia.com and, where necessary, notified to users through appropriate communication channels.
13. Contacting Us
For any questions or concerns regarding this Privacy Policy, data processing, or to exercise your rights, please contact us at:
Email: [email protected]
Website: https://hotelbuenavistadenia.com
We are committed to ensuring full compliance with GDPR, CCPA, and applicable privacy laws. If you have any privacy-related questions, we encourage you to reach out to our team at the email address above.