DOLINA TRADING S.L
Calle Lope de Vega nº 4 08005 Barcelona, España
Phone number: +33 1 49 80 01 63
The authority responsible for processing the data collected in the Reservation process for the Hotels in Spain is the company CLOUD HOSPITALITY SERVICES S.L., with address at Avda. Diagonal 640, 08017, Barcelona, España
(hereinafter CLOUD CHANNEL).
The authority responsible for processing the data collected in the Reservation process for the Hotels in France is Roomcloud.net., with address at Via Giovanni Battista Piranesi, 26, 20137 Milano MI, Italia
The Company respects the personal rights of its Guests, hence it prepared this Data Protection Guide (hereinafter: Guide), which is available in electronic format at the Company’s website as well as in print format in the hotel.
The Company, as data controller, hereby states that it observes the provisions of Act (hereinafter: “Data Protection Act”) on the rights for information management and freedom of information.
This Guide provides a general overview on how the Company manages data in the course of its services.
The Company shall only manage personal data for pre-determined purposes, for the necessary period of time and in order to exercise its rights and fulfil obligations. The Company shall only manage such personal data that are indispensable and suitable for fulfilling the objective of the particular data management activity.
Legal statements containing the agreement of minors under sixteen years of age shall not be valid unless agreed or subsequently approved by the statutory guardian of such minors.
If the Company uses the received data for any other purpose than the original purpose of data collection, the Company shall inform the data subjects in each case and ask for their specific, prior consent and/or shall provide an opportunity for them to disallow such usage.
Personal data communicated to the Company during the data management process shall only be disclosed to such persons contracted or employed by the Company entrusted with duties in relation to the given data management process.
Data subject: any specific natural person identified or identifiable (directly or indirectly) based on the personal data;
Personal data: any data that can relate to the data subject – especially the data subject’s name, identification number, as well as one or more pieces of information characteristic of their physical, physiological, mental, economical, cultural or social attributes – and any such conclusions regarding the data subject that can be drawn from such data;
Special data: personal data regarding racial origin, nationality, political opinion or party affiliation, religious or other philosophical convictions, advocacy organisation membership and sexual activities, as well as personal data concerning health conditions and addictions, and personal data on prior criminal activity;
Consent: voluntary and specific expression of the data subject’s intention, which is based on proper information and by which the data subjects provide a clear and unambiguous consent to managing their personal data comprehensively or for particular operations;
Objection: a statement by the data subjects in which they object to the management of their personal data and request the termination of data management and/or the deletion of the data managed;
Data Controller: the natural or legal persons or organizations not having a legal personality, who or which determine the purpose of data management on its own or together with others, and make and carry out the decision regarding data management (including the equipment used), or have the data processor entrusted by them to carry out such decisions;
Data management: regardless of the procedure applied; any operation or the whole of operations performed on data, specifically including the collection, recording, systematization, storage, modification, application, query, transfer, publication, harmonisation or linking, blockage, deletion and destruction of data, as well as the prevention of the further usage of such data, photographing, audio or visual recording, as well as the recording of physical attributes suitable for the identification of a person (e.g.: finger- or palm prints, DNA samples, iris scans);
Data transfer: rendering data accessible for certain third parties;
Publication: rendering data accessible for the general public;
Data deletion: rendering data unrecognisable in such a manner that their restoration is no longer possible;
Tagging data: applying an identifying mark to the data in order to distinguish them;
Data blocking: applying an identifying mark to the data in order to block their management for a defined period of time or for good;
Data processing: performing any technical tasks related to data management operations, regardless of the method and equipment applied for the performance of such operations as well as of the place of application, provided that the tasks are performed in terms of data;
Data processor: natural or legal persons and/or organizations not having a legal personality, who or which perform data processing activities based on their contract with the data controller – including contracts concluded pursuant to legal provisions;
Third party: natural or legal persons and/or organizations without a legal personality, who or which are not identical with the data subject, the data controller or the data processor.
3. Data management
3.1. Using hotel and restaurant services
The management of any data related to the data subject and the provision of services are based on voluntary consent, with the purpose of such data management to provide services and/or maintain contact. The Company shall preserve the personal data described in this article (excluding the exceptions defined in the paragraphs) for the period of time defined in the provisions of the relevant tax and accounting laws, and shall delete them after that period.
In the case of particular services, additional data can be provided in the comments section, which allows for a complete assessment of the Guests’ needs. Making room reservations and using other services, however, shall not depend upon the provision of such additional data.
Guests may also sign up for the newsletter in the course of using each service. Data management related to the newsletter is provided for in Article 3.6.
3.1.1. Room reservations
In the case of online, personal (paper-based) or phone reservations, the Company requests/can request that the Guest makes the following data available:
• first name,
• last name;
• address (address, town, post code, country)
• e-mail address;
• phone number;
• mobile phone number (optional)
• type of credit card / debit card;
• number of credit card / debit card,
• name of credit card / debit card holder;
• expiry date of credit card / debit card;
• CVC/CVV code of credit card / debit card (in case of MasterCard: Card Validation Code(CVC2), in case of Visa International: Card Verification Value (CVV2) .)
If you have any further questions regarding the management of data related to room reservations, please send your enquiry to firstname.lastname@example.org.
3.1.2. Hotel registration cards
Upon using hotel services, Guests shall fill in a hotel registration card, in which they give their consent to the Company managing the data they are obliged to provide. The Company shall manage such data in order to fulfil its obligations prescribed in the relevant legal regulations (particularly regarding the laws related to immigration control and tourism tax) as well as to verify the completion of services and/or to identify the Guests for as long as required by the competent authority to manage the fulfilment of obligations as defined in the given laws. In order to speed up and simplify the check in administration, guests can pass their ID (ID card or passport), which will be returned after the data has been recorded.
• first name and surname,
• place and date of birth,
• purpose of travel,
• ID number (ID card or passport),
• beginning and ending date of the hotel stay,
• visa number, certificate of registration,
• time and place of entry into the country.
Providing the required data by the Guests is a precondition for using hotel services.
By signing the registration card, Guests consent to the Company managing and/or archiving the personal data provided by filling in the registration card in order to verify that the contract was concluded and/or performed, as well as to possibly enforce claims against the deadline specified above.
Guests may also sign up for the Company’s newsletter by providing their e-mail address in the registration card. In other matters, the provisions in 3.6. shall govern the management of newsletters.
If you require further information concerning the data managed in relation to the registration card, please send your questions to email@example.com..
3.1.3. Bank card data
For room reservations, the Company can only use the given bank card, credit card and bank account data to such an extent and period of time as necessary for the exercise of rights and fulfilment of obligations. Data is handled by the Company’s contractual bank partners. Information about their data handling policies can be found on the websites of the competent Bank (K&H –www.khb.hu, OTP –www.otp.hu, Erste- www.erste.hu, MKB –www.mkb.hu, SIX Payment Services – www.six-payment-services.com).
Guests can receive further information on the management of bank card data upon email request to firstname.lastname@example.org. .
3.2. Surveillance cameras
The Company operates surveillance cameras in the area of the hotel and restaurant operated by the Company in order to ensure the security of Guests and their property. Camera surveillance is indicated by a pictogram and a warning sign with text.
The purpose of camera surveillance is the protection of property. More specifically, the purpose is to protect equipment with significant value as well as the personal valuables of Guests regarding detecting breaches of the law and catching perpetrators in the act, and the prevention of such criminal acts cannot be done in any other way, and/or there is no other method of presenting evidence.
You can receive more information about data management in relation to the camera system in the hotel.
3.3. Facebook page
The Company and the hotel/restaurant etc. can also be contacted individually via Facebook.
The purpose of data management is to share the contents of the website of Eurohotel.
In the case of room reservations, the system automatically redirects the Guest to the Company’s online booking site. Data management shall be conducted in compliance with Article 3.1.
You can find further information about the data management of the Facebook page in the data protection guidelines and rules at www.facebook.com.
3.4. Website traffic data
3.4.1. References and links
The Company’s website may contain links that are not operated by the Company, and are only there to inform visitors. The Company has no influence whatsoever on the content and security of the websites operated by partner companies, and therefore it is not responsible for them either. Before providing your data in any form at the given site, please review the data protection statements and data management guidelines of the websites you visit.
The Company can be contacted via e-mail. The Company shall manage the messages until the given request/question is fulfilled/answered, then, after the request/question is closed, it archives such e-mails and stores them for 1 (one) years.
5. Managing job applicant data
If you need information about the Company’s management of job applicant data, please send an email to email@example.com..
6. Data security
The data provided during the reservation process will be processed by CLOUD CHANNEL or ROOMCLOUD, as appropriate, for the processing and commercial monitoring of your requests, the provision of the services requested, the administration and the security management of the Platform. Reserve and fulfill your legal obligations. These data will also be treated for statistical purposes and for quality improvement. For the follow-up of your requests our agents will be able to contact you by email by telephone, for example to solve eventual incidents in the booking process.
The Roomcloud booking engine uses SSL cryptography on its websites for online reservations. Any information shared by the data subject with the Company shall be encrypted automatically and be protected when transferred through the network. When the information is received by our server, it is decoded by using an individual private key. SSL enables the browser to connect to the website and establish a secure communication channel in a transparent manner. SSL is the most widely used and most successful cryptographic system. In order to use the system, the data subjects simply need to verify their browsers’ compatibility.
6.1. Other security-related activities
The Company shall manage personal data confidentially, and shall not disclose them to unauthorized persons. The Company shall particularly protect personal data from unauthorized access, modification, transfer, publication, deletion or destruction as well as from accidental destruction, harm and inaccessibility due to modification of the applied technology. The Company shall take all security measures in order to ensure the technical protection of personal data.
7. Data transfer
The Company does not pass personal data to any unauthorized third party.
8. Data processors
You can request the specific list of the Company’s data processors by sending an e-mail to firstname.lastname@example.org.. Such requests shall be fulfilled in writing by the Company within 30 (thirty) days.
9. Rights and legal remedies
9.1. Providing information
Upon requests sent by the data subjects to the e-mail addresses in each chapter or addressed to the Company
(EUROHOTEL,Calle Lope de Vega nº 4 08005 Barcelona, España)
), the Company shall provide information regarding the particular subject’s data managed by the Company and/or processed by the data processors entrusted by the Company; the source of such data; the purpose, legal basis and duration of the data management; the names and addresses of data processors as well as their activities related to data management; and (in the case of a transfer of the data subject’s personal data) the legal basis and recipient of data transfer. Such information shall be provided within 30 (thirty) days, free of charge once a year for identical data, and for a fee for all additional requests.
If the provision of information is denied, the Company shall inform the data subject in writing as to which provision of which law was the legal basis to deny the information, and also inform the data subject regarding options for legal remedy.
If the personal data are incorrect, and the correct data are available to the Company, it shall correct such personal data.
Corrections upon request, deadline for administration and legal remedy are governed by Article 7.1.
9.3. Deletion and blocking, objection
Cases of deletion and blocking of personal data and objections against data management are governed by the relevant provisions of the Data Protection Act in Sections 17 – 21.
The company shall provide information on the legal regulations laid out in this paragraph upon requests sent to email@example.com.
What are cookies?
We can collect information about your computer, including, if applicable, your IP address, operating system and browser type, for system administration. This is statistical data on how you browse our website.
For the same reason, we can obtain information about your general use in our store through a cookie file that is stored on your computer’s hard drive. Cookies contain information that is transferred to your computer’s hard drive.
Cookies help us improve our website and provide a better and more personalized service. Specifically, they allow us:
– Make an estimation on numbers and use patterns.
– Store information about your preferences and customize.
– Speed up your searches
– Recognize you when you return to our site.
You can refuse to accept cookies by activating the settings in your browser that reject cookies. However, if you select this configuration, you may not be able to access certain parts of the Website or you may not be able to take advantage of any of our services. Unless you have adjusted your browser settings to reject cookies, our system will produce cookies when you connect to our site. our website in accordance with your individual interests.
Our website uses Google analytics for tracking web traffic and among the elements it uses are:
Generate a unique user identifier, which is the one used to count how many times a user visits the site, as well as the date of the first and last time they visited the web.
Register the date and time of access to any of the pages of the Site.
Check the need to keep a user’s session open or create a new one.
Identify the user’s session, to collect the approximate geographical location of the computer that accesses the Site with statistical effects.
How to disable cookies
The user may at any time choose which cookies he wants to work depending on the type of browser he is using.
Here the support guidelines on how to do it on the most popular browsers.
© 2018 – eurohotel.fr
All rights reserved