This legal text provides you with details of how we collect and process your personal data through the use of our website http://www.tobosohotels.com, including any information you may provide to us through the site when hiring a service, registering for our newsletter, or providing your data through the form enabled for this purpose.

By providing us with the data, we inform you that our services are not possible for those individuals whom the regulations prevent from giving consent, so when you submit the forms, you guarantee that you have sufficient capacity to give consent.

Next, we inform you about the data protection policy of: Tejera 2020, S.L.

1. Data Controller

Contact details of the data controller:

Tejera 2020, S.L with CIF: B92431873 and address: Number 12, Calle Cristo, 29700 Vélez Málaga, Málaga, and phone: 952527474. Email: rgpd@tobosohotels.com

Commercial Register of Tejera 2020, S.L in Málaga, Volume 3285, Book 2198, Folio 40, Section 8, Sheet MA 62682, Entry 1 (6.06.03)

Tejera 2020, S.L. is responsible for your data. (Hereinafter we or our).

2. What data do we collect?

The General Data Protection Regulation defines personal data as any information about an identified or identifiable natural person, that is, any information capable of identifying a person. This would not include anonymous or percentage data.

The personal data that may be collected directly from the interested party will be treated confidentially and will be incorporated into the corresponding processing activities, owned by Tejera 2020, S.L.

On our website, we may process certain types of personal data, which may include:

•     Identity data: name, surnames, and ID.

•     Personal characteristics data: date of birth.

•     Contact data: email and phone.

We do not collect any data regarding special categories of personal data (those revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, and information about health, genetic, or biometric data).

If you are asked to provide personal data by law or under the terms of a contract between us and you refuse to provide it, we may not be able to perform that contract or provide the service, and you must notify us in advance.

3. How do we collect your personal data?

The means we use to collect personal data are:

•     Through the form on our website, through our contact emails, by phone or postal mail, when:

      Request information about our services.

      Hire the provision of our services.

      Request quotes.

      Subscribe to any of our services or publications.

      Send your comments.

To ensure the quality of our portal, we reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we believe it does not meet these requirements or any other law or regulation. If this happens, we will try to explain the reasons for our decision, but we cannot commit to doing so in all cases.

•       Through technology or automated interactions: on our site, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. This data is collected through cookies or similar technologies. If you want more information, you can check our cookie policy here.

•     Through third parties:

  Google: analytical data or search data. Outside the European Union.

4. Purpose and legitimacy for the use of your data.

The most common uses of your personal data are:

-       For the formalization of a contract between Tejera 2020, S.L and you.

-       When you give your consent for the processing of your data.

-       When we need them to comply with a legal or regulatory obligation.

-       When it is necessary for our legitimate interest or that of a third party.

The User may revoke the consent given at any time by sending an email to rgpd@tobosohotels.com or by consulting the section on exercising rights below.

Below is a table in which you can consult the ways in which we will use your personal data and the legitimacy for their use, in addition to knowing what type of personal data we will process. We may process some personal information for another legal reason, so if you need details about this, you can send an email to rgpd@tobosohotels.com

Form	Purpose	Type of data	Legitimacy for processing
Contact	The purpose is to manage contacts and requests for information received via the web	Name -   Surnames -   Email -   Phone	Consent of the data subject (art. 6.1.a GDPR) Precontractual measures (art. 6.1.b GDPR) Processing is necessary for the satisfaction of a legitimate interest pursued by the controller (art. 6.1f GDPR)
Newsletter	The purpose is to manage the data provided for sending information about our services and promotions	Email	Consent of the data subject (art. 6.1.a GDPR) Precontractual measures (art. 6.1.b GDPR) Processing is necessary for the satisfaction of a legitimate interest pursued by the controller (art. 6.1f GDPR)
My reservations	The purpose is to manage my reservations	Email	Consent of the data subject (art. 6.1.a GDPR) Precontractual measures (art. 6.1.b GDPR) Processing is necessary for the satisfaction of a legitimate interest pursued by the controller (art. 6.1f GDPR)
Reservations	The purpose is to manage reservations	Name -   Surnames -   Email -   Phone -   ID/NIE/Passport -   Date of birth -   Bank details	Consent of the data subject (art. 6.1.a GDPR) Processing necessary for compliance with an applicable legal obligation to the controller (art. 6.1.c GDPR) Processing necessary for the performance of a contract to which the data subject is a party or for the application at the request of the data subject of pre-contractual measures (art. 6.1b GDPR) Processing is necessary for the satisfaction of a legitimate interest pursued by the controller (art. 6.1f GDPR)

Commercial communications: You will only receive communications if

-       You requested information or made a hiring with us of a product or service.

-       If you provided your data, accepting the checkbox provided for that purpose in our form.

-       As long as you have not expressed your desire to stop receiving such communications.

We will obtain your express consent before sending you any communications, and you may request at any time to stop receiving communications by emailing rgpd@tobosohotels.com

When you opt to stop receiving our communications, your personal data will continue to be stored as a result of the hiring done by you to comply with legal requirements.

Purpose: we will only use your data for the purposes for which we collected them, unless we reasonably believe that we should use them for another reason, notifying you in advance so that you are informed of the legal basis for their processing and as long as the purpose is compatible with the original purpose.

5. How long will we keep your data?

We will keep them for as long as necessary to fulfill the purpose for which they were collected and to determine any liabilities that may arise from that purpose and the processing of the data. The different regulations regarding the retention period will be applied, as applicable to this treatment.

Data of email or form subscribers: From the moment the user subscribes until they unsubscribe.

6. Minors

Tejera 2020, S.L. does not authorize minors under 14 years old to provide their personal data through the means enabled on this website (completing web forms for service requests, contact, or by sending emails). Therefore, individuals who provide personal data using these means formally represent that they are over 14 years old, and Tejera 2020, S.L is exempt from any liability for non-compliance with this requirement.

If your child who is under the established age limit has provided personal information to Tejera 2020, S.L., please contact us to request the exercise of applicable rights.

In cases where the services offered by Tejera 2020, S.L. are aimed at minors under 14 years old, the means to obtain authorization from the parents or legal guardians of the minor will be enabled.

7. Exercise of Data Protection Rights:

How to exercise these rights? Users may send a communication to the registered office of Tejera 2020, S.L. or email address rgpd@tobosohotels.com, including a photocopy of their ID card or another similar identification document, to request the exercise of the following rights:

-     Access to your personal data: you can ask Tejera 2020, S.L. if they are using your personal data.

-     Rectification request, if they are incorrect, or exercise the right to be forgotten regarding them.

-     Request limitation of processing, in this case, they will only be kept by Tejera 2020, S.L. for the exercise or defense of claims.

-     Oppose their processing: Tejera 2020, S.L. will stop processing the data as you indicate unless there are legitimate reasons or for the exercise or defense of possible claims, they must continue to be processed.

-     Portability of data: if you want your data to be processed by another firm, Tejera 2020, S.L. will provide you with the portability of your data to the new controller.

You can use the models made available by the Spanish Data Protection Agency to exercise your rights above: Here

File a complaint with the Spanish Data Protection Agency: if you believe there is a problem with how Tejera 2020, S.L. is processing your data, you can file your complaints with the corresponding supervisory authority, which in Spain is the Spanish Data Protection Agency.

We will request specific information to help us verify your identity and ensure your right to access your personal data (or exercise any of the aforementioned rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

All requests will be resolved within the legal deadline of one month. However, it may take us more than a month if your request is particularly complex. In this case, we will notify you and keep you updated.

8. Data Sharing: Service provision

In the performance of our work, we may need the assistance of third parties, who will only process the data to provide the contracted service and with whom we have the corresponding measures to guarantee your rights:

-     Service providers that provide system administration services and information technology.

-     Professional advisors including lawyers, auditors, and insurers providing banking, legal, insurance, and accounting consulting services.

All data processors to whom we transfer your data will respect the security of your personal data and process it according to the GDPR.

We only allow such processors to process your data for specified purposes and in accordance with our instructions. However, if you require, in compliance with transparency, a list of the companies that provide us with services, you can do so by emailing: rgpd@tobosohotels.com

9. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed unlawfully, altered, or disclosed. Additionally, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know such data. They