PRIVACY POLICY 

1. Basic Information on Data Protection.

Controller: GRAND HOTEL CENTRAL BARCELONA SLU Purposes of treatment: Informative website. Management of queries through forms. Management of service promotions. Lawfulness of treatment: Express consent of the data subject. Legitimate interest for data processing. Compliance with legal obligations. Recipients: Personal data collected will not be transferred to third parties. Without prejudice to those third parties who provide services to GRAND HOTEL CENTRAL BARCELONA SLU for the  purpose of  managing  the  provision of  services, thecontractual  and/or  pre-contractual  relationship  with  the  interested parties or processing requests made by them. Rights of data subjects: Access, rectify and erasure the data, as well as other rights, as explained in the additional information. Additional information: You can see the additional, detailed information on Data Protection below.

At GRAND HOTEL CENTRAL BARCELONA SLU we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and we believe that we must be transparent about it.

Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter "GDPR") on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and the LAW 34/2002, of July 11, 2002, of Services of the Information Society and Electronic Commerce (hereinafter, "LSSI"), GRAND HOTEL CENTRAL BARCELONA SLUinforms the user that, as data controller, will incorporate the personal data provided by users in an automated file.

Our commitment starts by explaining the following to you:

• We collect your data to improve the user experience by addressing your interests and needs.
• We are transparent about what data we collect about you and why we collect it.
• Our intention is to provide you with the best possible experience. Therefore, when we use your personal information, we will always do so in a compliant manner, and where necessary, we will ask for your consent.
• We understand that your information belongs to you. Therefore, if you choose not to give us permission to process it, you can ask us to stop processing it.
• Our priority is to ensure your security and to process your data in accordance with EU law.

1. Who is the controller for the processing of your personal data?

The personal data that you have provided us with in this and other communications maintained with you will be included in the Registries of Processing Activities of GRAND HOTEL CENTRAL BARCELONA SLU with postal address at VIA LAIETANA, 30 BARCELONA and e-mail: info@grandhotelcentral.com

2. What personal data do we collect?

The personal data that the user may provide:

• Name, address and born date.
• Telephone number and email address.
• Payments and deliveries information.
• IP address, date and time in which you access to our services, browser and data about the operating system of your device.
• Any other information or data that you decide to share with us.

Most of the personal information we process is provided to us directly by you. In some cases, it is obligatory to fill in a form to access certain services. Not providing the personal data requested or not accepting this data protection policy means the impossibility of navigating the website.

3. Who is responsible for the accuracy and veracity of the data provided?

GRAND HOTEL CENTRAL BARCELONA SLU, is not liable for the accuracy of the data provided by their users. It is user’s liability to guarantee, in any case, the accuracy and authenticity of the personal data provided. The user agrees to provide complete and correct informationGRAND HOTEL CENTRAL BARCELONA SLUis exonerated from any liability in this respect and therefore does not assume any responsibility with regard to hypothetical damages that may arise from the use of said information.

GRAND HOTEL CENTRAL BARCELONA SLU is only responsible for the veracity of its own elaboration information. GRAND HOTEL CENTRAL BARCELONA SLU reserves the right to update, modify or eliminate the information contained in its web pages and may even limit or deny access to said information. GRAND HOTEL CENTRAL BARCELONA SLU is exonerated from any responsibility for any damage or harm that the user may suffer as a result of errors, defects or omissions in the information provided by GRAND HOTEL CENTRAL BARCELONA SLU provided that this comes from sources outside or publics the company.

4. What is the lawful basis for the processing of your data?

The processing of your data can be based on the following legal bases:

• Express consent of the data subject. The user is informed of the possibility of withdrawing consent in the event that it has been granted for a specific purpose, without affecting the legality of the processing based on consent prior to withdrawal. Execution of a contract or application of pre-contractual measures.
• Legitimate interest for data processing.
• Compliance with legal obligations.

5. What rights do you have and how can you exercise them?

Under data protection law, you have rights we need to make you aware of. You may address your communications and exercise your rights by written communication to the following email:

Under the provisions of data protection regulations, you can apply:

• Right of access: You can ask for information of those personal data that we have about you. You have the right to ask us for copies of your personal information.
• Right to rectification: You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. You can communicate any change in your personal data.
• Right to erasure: You can request the deletion after blocking personal data.
• Right to restriction of processing: You have the right to ask us to restrict the processing of your information in certain circumstances.
• Right to object to processing: You can withdraw your consent to the processing of your data, opposing further processing.
• Right to portability: In some cases, you can request a copy of the personal data in a structured format, commonly used and machine-readable for transmission to another data controller.
• The right not to be the subject of individualised decisions: You may request that decisions not be taken which are based solely on automated processing, including profiling, which produces legal effects or significantly affects the data subject. information in certain circumstances.

In some cases, the request may be refused if you request that data necessary for the fulfilment of legal obligations be deleted. Also, if you have a complaint about the processing of data you can submit a complaint to the data protection authority.

6. Why do we process your data?

Depending on the purposes we will need to process some data or others, which in general will be, depending on the case, the following:

• Manage orders or hire any of our services, either online or in the physical stores.
• Manage the sending of the information requested.
• Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and the information tasks, being able to carry out automatic evaluations, obtaining profiles and customer segmentation tasks in order to personalize the treatment according to their characteristics and needs and improve the customer's online experience.
• Develop and manage contests, raffles or other promotional activities that may be organized.
• In some cases, it will be necessary to provide information to Authorities or third companies for auditing purposes, as well as to handle personal data of invoices, contracts and documents to respond to customer or Public Administration complaints

7. How long do we keep your personal data for?

The processing of the data for the purposes described will be maintained for the time necessary to meet the purpose of their collection, as well as for compliance with legal obligations arising from the processing of data. Without prejudice to the fact that conservation is necessary for the formulation, exercise or defence of potential claims and/or whenever permitted by applicable legislation.

GRAND HOTEL CENTRAL BARCELONA SLU undertakes to cease the processing of personal data at the end of the storage period and to block them in our databases.

8. To which recipients is your data communicated?

In general, GRAND HOTEL CENTRAL BARCELONA SLU will not transfer personal data to third parties, except in those situations where such data may be transferred to other collaborators who provide services to GRAND HOTEL CENTRAL BARCELONA SLU, for the purpose of managing the provision of these services. Likewise, any transfer, will be informed to the data subject through the consent clauses established by data protection regulations.

GRAND HOTEL CENTRAL BARCELONA SLU ensures the security of personal data when it is sent outside the company, and ensures that third party service providers respect confidentiality and have appropriate measures in place to protect personal data. Such third parties have an obligation to ensure that the information is treated in accordance with data privacy regulations. In some cases, the law may require that personal data be disclosed to public bodies or other parties, only as strictly necessary for the fulfilment of such legal obligations.

9. Where is your data stored?

In general, data is stored within the EU. For data that is sent to third parties outside the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCR) or because they have signed up to the Privacy Shield.

10. How do we process personal data of minors?

In principle, our services are not specifically addressed to minors. However, in the event that any of them are addressed to minors under fourteen years of age, in accordance with article 8 of GDPR and article 7 of LO3/2018, of 5 December (LOPDGDD), GRAND HOTEL CENTRAL BARCELONA SLU will require the valid, free, unequivocal, specific and informed consent of their legal guardians in order to process the personal data of minors. In this case, the DNI or other form of identification of the person giving consent will be required.

In the case of persons over fourteen years of age, data may be processed with the consent of the user, except in those cases in which the law requires the assistance of the holders of parental authority or guardianship.

11. What security measures do we apply to protect your personal data?

GRAND HOTEL CENTRAL BARCELONA SLU has adopted the legally required levels of security for the protection of personal data, and tries to install those other additional technical means and measures at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided to GRAND HOTEL CENTRAL BARCELONA SLU is not responsible for hypothetical damages that may arise from interference, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operation of this electronic system, caused by reasons beyond the control of GRAND HOTEL CENTRAL BARCELONA SLU; delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Centre, in the Internet system or in other electronic systems, as well as damage that may be caused by third parties through unlawful interference beyond the control of GRAND HOTEL CENTRAL BARCELONA SLU Nevertheless, the user must be aware that Internet security measures are not impregnable.

12. Links to other websites

The grandhotelcentral.com website may contain links to other websites. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of that website, and GRAND HOTEL CENTRAL BARCELONA SLU shall not be held responsible for its privacy policy.

13. How do we use cookies?

The website of GRAND HOTEL CENTRAL BARCELONA SLU uses cookies, in order to optimize and customize your navigation through it. Cookies are physical information files that are hosted on the user's own terminal, the information collected through cookies is used to facilitate user navigation through the portal and optimize the browsing experience. The data collected through cookies may be shared with the creators of the same, but in no case will the information obtained by the same be associated with personal data or data that can identify the user.

14. Updates to this Notice

GRAND HOTEL CENTRAL BARCELONA SLU keep its privacy notice under regular review to make sure it is up to date and accurate. We recommend that you review the privacy policy from time to time.