Privacy Policy

1. USER INFORMATION

Tarifa Hotel Familiar S.L. is responsible for the processing of the User’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, providing you with the following information regarding the processing:

Purpose of the processing: to maintain a commercial relationship with the user regarding the products or services offered. In addition, the operations planned for processing are:
- To respond to queries and suggestions that users may make.
- To process orders, requests, or any type of request made by the user through any of the contact methods available.
- To manage your requests and/or reservations and their payment.
- To send commercial advertising communications by email, mobile applications, social communities, or any other electronic or physical means, present or future, that allows for commercial communications. These communications will be made by the responsible party and will relate to their products and services, or those of their collaborators or suppliers with whom they have reached any promotional agreement.
- If you send or leave a resume, it may be used in personnel selection processes. Resumes will be kept for a maximum period of one year, after which they will be deleted, ensuring complete confidentiality both in processing and in their subsequent destruction. In this regard, after the specified period, if you wish to continue participating in selection processes, we kindly ask you to send us your resume again.

Data retention criteria: Data will be kept as long as there is mutual interest in maintaining the purpose of processing, and when it is no longer necessary for such purposes, it will be deleted with appropriate security measures to ensure data pseudonymization.
Data communication: Web developers and the company that provides us hosting on their servers will have access to the data. All of them have regulated access to this data with us solely for the purpose described herein. The data will not be allocated to any other third party for processing, except for legal obligations.
Legitimacy: It is based on the consent requested through the corresponding acceptance checkbox.

Rights of the User:
- Right to withdraw consent at any time. Right to object and to the portability of personal data. It is established as a right of the data subject to receive all personal data concerning them and that they have provided to a controller, as long as the processing is based on consent or is necessary for the execution of a contract and is carried out by automated means.
- Right of access: The data subject has the right to request and obtain free information about their personal data being processed, the origin of such data, as well as the communications made or expected to be made. When the data subject submits the request electronically, unless they request it to be provided otherwise, the information will be provided in a commonly used electronic format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
- Right of rectification and deletion: The data controller shall be obliged to enforce the right of rectification or deletion of the data subject within ten days. Personal data whose processing does not comply with the law will be rectified or deleted as appropriate, particularly when such data is inaccurate or incomplete, and the data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them. The data subject has the right to have incomplete personal data completed, including by means of an additional statement.
- Right to restrict processing: The data subject has the right to obtain from the data controller the restriction of processing of data. When the processing of personal data has been restricted, it may only be processed for their preservation, with the consent of the data subject, for the formulation, exercise or defense of claims, with a view to the protection of the rights of another natural or legal person or for reasons of public interest. Any data subject who has obtained the restriction of processing shall be informed by the controller before the lifting of that restriction.
- Right to object: The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them (public interest and legitimate interest), including profiling based on such provisions. The controller shall cease processing the personal data unless they demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the formulation, exercise or defense of claims.
- Right to lodge a complaint with the supervisory authority if they have not been satisfied with the exercise of their rights, in this case, before the Spanish Data Protection Agency: http://www.agpd.es.

Contact details to exercise your rights:
- Postal Address: Carretera N.340 Cádiz – Málaga, km 94, C.P: 11380 Tarifa, Cádiz (Spain).
- Email Address: info@mesondesancho.com.

2. MANDATORY OR VOLUNTARY NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by marking the corresponding boxes and entering data in the fields of the contact forms or presented in download forms, expressly and freely accept that their data is necessary to attend to their request by the provider, being voluntary the inclusion of data in the remaining fields.

The User guarantees that the personal data provided to the controller is true and undertakes to communicate any modifications thereof.

The controller expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that whenever any type of personal data transfer is made, prior express, informed, and unequivocal consent will be requested from the Users.

All data requested through the website is mandatory, as it is necessary for the provision of an optimal service to the User.

If not all data is provided, it is not guaranteed that the information and services provided will be completely adjusted to their needs.