Privacy Policy

1. INFORMATION FOR THE USER
Who is responsible for processing your personal data?

PASTUIRASER, S.L. is the CONTROLLER of the processing of the USER's personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD).

What do we process your personal data for, and why do we do it?

Depending on the form through which we have obtained your personal data, we will process them confidentially for the following purposes:

In the Contact form

• To respond to inquiries or any type of request made by the user through any of the contact methods made available on the website of the controller. (for the legitimate interest of the controller, Art. 6.1.f GDPR)
• To carry out statistical analyses and market studies. (for the legitimate interest of the controller, Art. 6.1.f GDPR)

In the Newsletter form

• To send newsletters, updates, offers, and online promotions. (with the consent of the data subject, Art. 6.1.a GDPR)

In the Reservation form

• To formalize reservations at the controller's establishment. (for the execution of a contract or pre-contract, Art. 6.1.b GDPR)
• To send commercial advertising communications via email, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, to clients, allowing the distribution of commercial communications related to products or services similar to those initially contracted by the client (Art. 21.2 LSSI) (for the legitimate interest of the controller, Art. 6.1.f GDPR)

In the Ethical or Complaints Channel form

• To properly manage the ethical channel, processing any reported irregularities through it, and deciding whether to initiate an investigation to detect possible offenses and prevent any type of liability. Also, to prevent any conduct contrary to the internal or external regulations of the entity. (for the fulfillment of a legal obligation, Art. 6.1.c GDPR)

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the processing or as long as legal requirements dictate their retention. When they are no longer necessary for this purpose, they will be deleted using appropriate security measures to ensure that the data are anonymized or completely destroyed.

Who do we share your personal data with?

No communication of personal data to third parties is anticipated unless necessary for the development and execution of the purposes of the processing. This may include our service providers related to communications, with whom the CONTROLLER has formalized confidentiality and data processor agreements as required by current privacy regulations.

What are your rights?

The USER has the following rights:

• The right to withdraw consent at any time.
• The right of access, rectification, portability, and erasure of your data, as well as the right to restrict or object to its processing.
• The right to file a complaint with the supervisory authority (www.aepd.es) if you believe that the processing does not comply with current regulations.

Contact details to exercise your rights:

PASTUIRASER, S.L. C / Garbí no, 88-90 - 08397 Pineda de Mar (Barcelona). Email: info.carlit@grupserhs.com Data Protection Officer contact: MICROLAB HARD, S.L., C/ Santiago Rusiñol, 8, Local 11, 08750, Molins de Rei (Barcelona) - rgpd@gruposerhs.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

USERS, by marking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or forms provided for download, explicitly, freely, and unequivocally accept that their data are necessary to address their request by the provider. Therefore, the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER are truthful and is responsible for communicating any changes to them.

The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary to provide an optimal service to the USER. If all the data are not provided, it cannot be guaranteed that the information and services provided will fully meet their needs.

3. SECURITY MEASURES

In accordance with the provisions of current regulations on personal data protection, the CONTROLLER complies with all the provisions of the GDPR and LOPDGDD for the processing of personal data under its responsibility, particularly with the principles described in Article 5 of the GDPR, which state that data must be processed lawfully, fairly, and transparently concerning the data subject, and must be adequate, relevant, and limited to what is necessary for the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and LOPDGDD to protect the rights and freedoms of USERS and has provided them with the appropriate information so they can exercise these rights.

For more information about privacy guarantees, you can contact the CONTROLLER at: PASTUIRASER, S.L.
C / Garbí no, 88-90 - 08397 Pineda de Mar (Barcelona). Email: info.carlit@grupserhs.com Data Protection Officer contact: MICROLAB HARD, S.L., C/ Santiago Rusiñol, 8, Local 11, 08750, Molins de Rei (Barcelona) - rgpd@grupserhs.com

1. USER INFORMATION
Who is responsible for processing your personal data?

PASTUIRASER, S.L, hereinafter referred to as the RESPONSIBLE, informs the USER that it has created a profile on social media platforms such as Facebook, Instagram, LinkedIn, and YouTube. The RESPONSIBLE is accountable for processing the personal data of users on these social media platforms and informs that this data will be processed in compliance with Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD). The following information is provided regarding data processing:

Why do we process your personal data?

Purpose of processing: To maintain a relationship between the USER and the RESPONSIBLE, which may include the following activities:

• Handling requests and inquiries made to the RESPONSIBLE.
• Providing information about activities and events organized by the RESPONSIBLE.
• Providing information about products or services offered by the RESPONSIBLE.
• Interacting through official profiles.

Why are we allowed to process your personal data?

Legal basis for processing: Article 6.1.a GDPR, the data subject has given consent for their personal data to be processed for one or more specific purposes.

The USER has a profile on the same social media platform and has decided to join the RESPONSIBLE's network, showing interest in the information published. By requesting to follow our official profiles, the USER provides consent for the processing of personal data published in their profile.

The USER can access the privacy policies of the social media platform at any time and configure their profile to ensure their privacy.

The RESPONSIBLE accesses and processes public information from the USER, particularly their contact name. This data is used only within the social media platform and will only be incorporated into a file of the RESPONSIBLE if necessary to process the USER's request.

How long will we keep your personal data?

Data retention criteria: The data will be retained as long as the USER does not revoke the consent provided, as outlined in this privacy policy.

Who do we share your personal data with?

Data sharing: Information provided by the USER on the RESPONSIBLE's social media platforms, including personal data, may be published depending on the services the USER uses. This means it may be made publicly available to other third-party users of the social media platforms. Through the settings of each social media platform, the USER can configure the information they wish to make public, review granted permissions, revoke them, or disable them, including third-party applications no longer in use.

No personal data will be shared with third parties outside the social media platform unless necessary for the development and execution of the purposes of processing. In such cases, it will be communicated to our service providers related to communications, with whom the RESPONSIBLE has signed confidentiality and data processing agreements as required by current privacy regulations.

What are your rights?

User rights:

• The right to withdraw consent at any time.
• The right to access, rectify, transfer, delete their data, and restrict or object to its processing.
• The right to file a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with current regulations.

Contact details for exercising rights:
PASTUIRASER, S.L, C/ Garbí, nº 88-90, 08397 Pineda de Mar (Barcelona).
Email: contact@serhshotels.com
Data Protection Officer: MICROLAB HARD, S.L., C/ Santiago Rusiñol, 8, Local 11, 08750 Molins de Rei (Barcelona).
Email: rgpd@grupserhs.com

2. USE OF THE PROFILE
The RESPONSIBLE will carry out the following actions:

• Access public information from the USER’s profile.
• Publish on the USER’s profile any information already published on the RESPONSIBLE’s social media account.
• Send personal and individual messages through the social media platform’s channels.
• Publish updates from the page that will appear on the USER’s profile.

The USER can always control their connections, delete content that is no longer of interest, and restrict who they share their connections with by accessing their privacy settings.

3. PUBLICATIONS
Once the USER has followed or joined the RESPONSIBLE's social media network, they may post comments, links, images, photographs, or any other multimedia content allowed by the platform. The USER must always be the owner of the published content, hold copyright and intellectual property rights, or have the consent of the affected third parties.

It is expressly prohibited to publish any content, including text, graphics, photographs, videos, etc., that violates morality, ethics, good taste, decorum, or infringes intellectual property rights, image rights, or the law.

In such cases, the RESPONSIBLE reserves the right to immediately remove the content without prior notice and may request the USER's permanent blocking.

The RESPONSIBLE is not responsible for content freely published by the USER.

The USER should be aware that their publications will be visible to other users, making them primarily responsible for their privacy.

Images published on social media will not be stored in any file by the RESPONSIBLE but will remain on the social media platform.

4. DATA OF MINORS OR PERSONS WITH SPECIAL NEEDS
Minors under the age of 14 are prohibited from accessing and registering on the RESPONSIBLE's social media platforms. If the USER has special needs, the intervention of their legal guardian or representative will be required, with valid documentation proving representation.

The RESPONSIBLE is expressly exonerated from any liability arising from the use of social media by minors or persons with special needs. The RESPONSIBLE's social media platforms do not knowingly collect personal information from minors. If the USER is underage, they must not register, use the RESPONSIBLE's social media accounts, or provide any personal information.