Personal data are any information related to an identified or identifiable actual person (hereinafter referred to as interested party or data subject). A physical person is regarded as identifiable, directly or indirectly, by association with an identifier, a name, an identification number, a location data, an online identifier or one or more special characteristics referring to the physical, physiological, identity, genetic, mental, economic, cultural or social aspect of this actual person.
The party is any identified or identifiable physical person whose personal data are processed by the controller or processor.
Processing means any process or series of operations related to personal data, such as collecting, organizing, storing, adapting or modifying; reading and consulting or the use with or without the aid of automated procedures, disclosure by submission, dissemination or other form of provision; reconciliation or association, restriction, deletion or destruction.
The processing restriction is the tagging of personal data stored to restrict future processing.
The implementation of profiles is any kind of automated personal data processing that uses that personal information to evaluate certain personal aspects related to an individual, mainly aspects related to employment, economic situation, health or personal life. Also to analyze or predict the preferences, interests, reliability, behavior, location or relocation of this individual.
Pseudonymisation is the processing of personal data in a manner that personal data can no longer be attributed to a specific data subject without needing additional information. Such additional information must be kept separate and is subject to technical and organizational measures in order to ensure that these personal data are not attributed to an identifiable or identified physical person.
The controller is the individual or legal person or a public authority, agency or other body that decides on the purposes and means of processing personal data. When the purposes and means of such a treatment are determined by the legislation of the European Union or by the legislation of the Member Countries, the controller or in the same way the specific criteria may follow National or EU legislations.
The processor is a natural or legal person, public authority or other body that processes the personal data on behalf of the controller.
The recipient is a physical or legal person or a competent authority, body or organization to whom the personal data are disclosed regardless of whether it is a third party or not. However, the authority that may receive personal data under EU or National law as part of a specific investigation will not be considered a recipient.
The third party is a physical or legal person, a competent authority, organization or other than the person concerned; the controller or the processor, who are authorized to process the personal information under the direct responsibility of the controller or the processor.
The consent is any freely given, specific, informed and unambiguous indication expressed in the form of affirmation or other unequivocal confirming act by the interested party for the particular case by means of which the interested party states that he/she accepts the processing of the concerning personal data.
RIMC Camp de Mar Hotelmanagement S.L.U website registers a series of general data and information with every entry to the website by an interested person or automated system. These data and general information are stored in the server’s log files. This can be recorded:
When using this general information and information RIMC Camp de Mar Hotelmanagement S.L.U does not draw conclusions about the person. This information is necessary to:
The anonymous data and information collected will be statistically evaluated through RIMC Camp de Mar Hotelmanagement S.L.U. and with the aim of raising the data security in our company and obtaining an adequate level of data protection the anonymous data of the files of the server are stored separately from the data provided by the interested party or data subject..
Right of verification: Each interested party or data subject has the right to request the processor the confirmation of the processing of personal data concerning him/her. If an affected party wishes to use this right of verifying he/she can contact the controller at any time.
Recht auf Auskunft: Right of information: Any party or data subject affected by the processing of his/her data has the right to obtain at any time free of charge information from the processor about their stored personal data and the treatment given to it, as well obtain a copy of the data. In addition, the European regulation and regulatory bodies have made a statement regarding the following information:
Moreover, the interested party (data subject) has the right of accessing if the personal data has been transmitted to a third country or to an international organization. If this is the case, the interested party has the right to obtain information on the appropriate guarantees in relation to the transfer done.
Should a data subject wish to exercise his/her information rights, he/she can contact the controller at any time.
Right of Rectification: Any person (data subject) affected by the processing of personal data has the right to request the immediate correction of the incorrect personal data concerning him/her. In addition, the interested party has the right to request that incomplete personal data is filled out, even by means of a supplementary declaration taking into account the purposes of the processing.
Should a data subject wish to exercise this right of rectification, he/she can contact the controller at any time.
Right to be forgotten: Any person whose personal data have been processed may require the data controller to delete the personal data concerning him/her without undue delay unless one of the following reasons is applicable and therefore no processing is required:
Should any of the above causes concur and a data subject wishes to exercise his/her right to have the data stored in RIMC Camp de Mar Hotelmanagement S.L. U. deleted he/ she can contact the controller. The request for the data deletion of the data subject at issue is fulfilled immediately.
If your personal data were made public through RIMC Camp de Mar Hotelmanagement S.L.U. our company would be responsible in accordance with art. 17 1 GDPR UE of the deletion of your personal data. The RIMC Camp de Mar Hotel Management S.L.U. implements the appropriate measures, including technical means, always considering the available technology and its proportionality, to inform processors that the interested party (data subject) has requested the data to be deleted. Whilst that data is no longer necessary the controller will foster the necessary measures in each case.
Right to restriction of processing: Any interested party (data subject) whose personal data are processed has the right to request the restriction of processing of his/her personal data by the controller if the following conditions apply:
If any of the indicated causes concur and the data subject who requests his/her right of restriction in the processing of the data stored in RIMC Camp de Mar Hotelmanagement, he/she can contact the controller at any time. The processing restriction will be carried out immediately.
Right to data portability: Anyone interested in the processing of their data has the right to have their personal data provided in a structured, consistent and legible format. In addition, data subjects have the right to transfer this personal data through the data controller to another controller, provided that this is based on the consent of the interested party (data subject) Art. 6.1. letter B GDPR letter A GDPR and the processing is done by automated means, unless the processing is necessary for a task which has a public interest or falls within the exercise of public authority that has been assigned to the responsible party.
In addition, according to Art.20. 1 of the GDPR the interested party has the right to exercise his right to transfer his data from one responsible to another responsible, provided that this is technically possible and provided that the rights and freedoms of other people are not damaged. In order to exercise his/her rights of personal data portability the interested party may contact the controller at any time.
Right to Object and automated individual decision making: The data subject whose data are processed has the right to object to the processing of his/her personal data for personal reasons according to Art. 6. 1 letter e and letter f of the GDPR. This also applies to profiles.
RIMC Camp de mar Hotelmanagement S.L.U. will not treat personal data in cases of objection, unless we can provide convincing legitimate reasons for processing such data which exceed the interests, rights and freedom of the data subject or the processing undertaken aims to accomplish exercise or enforce legal obligations.
RIMC Camp de Mar Hotelmanagement S.L.U. treats personal data to carry out direct advertising campaigns, so that the data subject has the right at any time to exercise his/her right to interrupt the processing of personal data for such advertising. That is also valid for the profile as long as it is in connection with the advertising. If the data subject has objected to have his/her data processed for direct advertising, RIMC Camp de Mar Hotelmanagement S.L.U. will not process personal data for such purposes.
On the other hand, the data subject has the right, for reasons that arise from a special situation, to object to the processing of his/her personal data which RIMC Camp de Mar Hotel Management is using for its history for the realization of statistics according to art. 89.1 of the GDPR.
The interested party can directly contact the controller to exercise his right of objection. In addition, the person is also free, in the context of the information society and according to the provisions of Directive 2002/58 / EC, to exercise his/her right to claim through automated procedures.
Automated decisions based on a Profile: The interested parties or data subjects have the right not to be bound by decisions based on an automated profile which unleash legal effects or other similar effects that could significantly harm them, provided that the decision:
Should the decision be necessary for the termination or execution of a contract between the interested party and the controller or it is expressly the will of the interested party or data subject RIMC Camp de Mar Hotelmanagement S.L.U gathers the appropriate measures in order to preserve the rights and freedoms of the persons concerned preserving their right to make a declaration in front of the controller to express their own points of view and the objection to the decision. Should the interested party or data subject, want to exercise his rights regarding automated decisions, he/she can contact the controller at any time.
Right to revoke consent: Anyone affected by the processing of personal data has the right to revoke his/her consent at any time. If the interested party or data subject wishes to assert his/her right to withdraw the consent, he/she can communicate at anytime with the person responsible for the treatment.
The person responsible within the meaning of the general data protection regulation (GDPR) of the EU, other data protection laws in the Member States of the European Union and other provisions with a data protection nature is:
RIMC Camp de Mar Hotelmanagement S.L.
Calle Taula 2
07160 Camp de Mar
Tel: +34 971 13 65 65
Fax: +34 971 13 60 70
Marek N. Riegger, Audun Lekve
Camp de Mar, June 2018