Identification of the Data Controller

In accordance with the provisions of the General Data Protection Regulation (GDPR) (EU Regulation 2016/679) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), users of the hotel's website are informed that the personal data they provide will be processed by:

• Company: Chaika Moraira SL

• CIF: B54832696

• Adress: Av. Madrid 1, bajo, puerta 2, Moraira 03724, España

• License: 26-M/2002 de 12.02.2003

• Hotel Address: Partida Paratella 44, Benissa, 03720

• Contact email: [email protected]

Information and Consent

By accepting this Privacy Policy, you grant your free, informed, specific, and unequivocal consent for the personal data provided through this website (the "Website") to be processed by Chaika Moraira S.L. (FINCAOLIVAR) as joint controllers of the data processing.

Please read this Privacy Policy, which has been written in a clear and simple manner to facilitate its understanding, allowing you to freely and voluntarily decide whether you wish to provide your personal data.

Purpose of Data Processing

The personal data collected through the website will be processed for the following purposes:

• Managing accommodation reservations and related services.

• Responding to inquiries and requests for information.

• Complying with legal and tax obligations arising from the contractual relationship.

• Sending commercial and promotional communications with the user's consent, via email, phone, and WhatsApp.

• Remarketing advertising: We may engage in behavioral advertising using platforms such as Facebook, Instagram, and Google, which involve the use of cookies and other data collection technologies.

We may collect, use, store, and transfer different types of personal data about you, organized according to the different purposes as follows.

• Contact information: email address, postal address, country, and phone number.

• Payment information: card number, billing address, and bank account information.

• Demographic data: gender, age, and preferred language.

• Information related to your reservation, stay, or visit to facilities.

• information about the devices you use to access our Websites.

• Customer preferences.

• Employment information: (such as company name, job title, and work contact information) to respond to requests for proposals or fulfill contractual agreements;

• Copies of your correspondence if you communicate with us.

• Comments and responses to surveys.

• Information collected through closed-circuit television systems, access cards, and other security systems

• Information requested by government authorities to comply with our legal obligations.

We do not collect the following special categories of personal data about you: race or ethnicity, religious or philosophical beliefs, sexual life, sexual orientation, political opinions, trade union membership, genetic or biometric data, and criminal convictions and offenses.

Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

• The execution of a contract or the application of pre-contractual measures (Article 6.1.b) of the GDPR).

• Compliance with legal obligations (Article 6.1.c) of the GDPR).

• The user's consent in the case of commercial communications (Article 6.1.a) of the GDPR).

Data Retention Period

The personal data provided will be retained for the duration of the contractual relationship and thereafter for the periods required by applicable legislation, in accordance with Article 5.1.e) of the GDPR. Specifically:

• Booking and billing data: Retained for a minimum period of 6 years to comply with tax and accounting obligations, as established by the Commercial Code and tax regulations.

• Guest check-in records: Retained for a minimum period of 3 years according to public security regulations.

• Contact data for inquiries: Retained as long as necessary to respond to the request and for an additional period of up to 1 year for follow-up.

• Data for commercial purposes: Retained until the user requests deletion or withdraws consent.

• Data related to claims or legal disputes: Retained for as long as necessary to address possible legal liabilities, up to a maximum of 10 years in some cases, in accordance with applicable liability limitation regulations.

Once the retention periods have expired, the data will be securely and confidentially deleted.

Data Recipients

Personal data may be communicated to:

• Public administrations and official bodies when legally required (Article 6.1.c) of the GDPR).

• Financial entities for payment processing.

• Service providers with whom the hotel has contracts for necessary service management, always ensuring data protection.

User Rights

The user may exercise the following rights set out in Articles 15 to 22 of the GDPR:

• Access (Article 15 GDPR): Request information about the data we hold about them.

• Rectification (Article 16 GDPR): Request the correction of inaccurate or incomplete data.

• Erasure (Article 17 GDPR): Request the deletion of data when no longer necessary.

• Objection (Article 21 GDPR): Object to data processing in certain circumstances.

• Restriction of processing (Article 18 GDPR): Request limitation on the use of data in specific cases.

• Portability (Article 20 GDPR): Request the delivery of their data in a structured format.

To exercise these rights, you may send a request to dpo (@) fincaolivar.es, attaching a copy of your identification document.

Data Security

Chaika Moraira SL adopts appropriate technical and organizational measures to ensure the security of personal data and to prevent its alteration, loss, unauthorized processing, or access, in accordance with Article 32 of the GDPR.

Modifications to the Privacy Policy

This privacy policy may be updated at any time to comply with new legal requirements or changes in the hotel's activity. Users are encouraged to review this section periodically.

Applicable Law and Jurisdiction

This privacy policy is governed by Spanish law, particularly by the GDPR and the LOPDGDD, and any disputes shall be submitted to the competent courts of the province of Alicante. For any inquiries regarding this privacy policy, you may contact us at dpo (@) fincaolivar.es.