Privacy policy
Basic information on data protection
Apartamentos Casa Comedias
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), we inform you of the following:
Basic information
Data controller
GESTION COMEDIAS S.L.
Address: C/ Velázquez Bosco nº 3, 14003 Córdoba (Spain)
Tax ID (CIF): B24862864
Contact email: casacomedias@venacordoba.com
Purpose of the processing
- Managing bookings and providing accommodation services.
- Managing website users.
- Answering enquiries and requests for information.
- Breakfast satisfaction survey, anonymous and voluntary.
- Sending commercial communications about our services (with prior consent).
- Administrative, accounting and tax management.
- Recruitment and selection of staff.
- Video surveillance and security of the premises.
- Compliance with legal obligations.
Legal basis
- Express consent of the data subject.
- Performance of a contract or pre-contractual measures.
- Legitimate interest.
- Compliance with legal obligations.
Recipients
Your data may be disclosed to:
- Service providers necessary for our activity (booking engine, website maintenance, accounting advisers, hosting, point-of-sale systems, etc.).
- Financial institutions, to process payments.
- Public authorities, courts and tribunals where there is a legal obligation.
Rights
You may exercise the following rights:
- Access
- Rectification
- Erasure
- Restriction of processing
- Objection
- Portability
- Not to be subject to automated decisions
You can exercise them by sending a request to: casacomedias@venacordoba.com.
Additional information
You can find detailed, extended information on data protection on this same website.
Extended information on data protection
Our commitment to your privacy
At Apartamentos Casa Comedias we work to offer you the best possible experience during your stay in Córdoba. To do so, we sometimes need to collect personal information.
We undertake to:
- Be transparent about the data we collect.
- Use your data only for the purposes we have told you about.
- Ask for your consent when necessary.
- Guarantee the security and confidentiality of your information.
- Allow you to exercise your rights at any time.
What personal data do we collect?
We may process the following data:
- Identification data (first name, surname, ID card/passport number).
- Image (video surveillance).
- Postal address.
- Email address.
- Telephone number.
- Academic and professional data (in recruitment processes).
- Financial and billing data.
- Data required to comply with legal obligations applicable to tourist accommodation.
- Answers to the breakfast satisfaction survey: we do not ask for your name or email, only the answers, the language, the apartment if you state it, and the date of submission. Please do not include personal data in the comments field.
- Any other information the user provides voluntarily.
For some services, providing the requested data is mandatory. Otherwise, the corresponding service cannot be provided.
Why and for what purpose do we process your data?
We process your data in order to:
- Manage bookings and accommodation services.
- Answer enquiries.
- Learn our guests’ opinion of breakfast and improve it (anonymous, voluntary survey; legal basis: legitimate interest).
- Manage invoicing and payments.
- Comply with legal obligations in tourism, tax and security matters.
- Send commercial information (if you have given your consent).
- Personalise the user experience.
- Improve our services through usage analysis.
- Manage staff selection processes.
The data processed will form part of the Record of Processing Activities (RoPA) in accordance with the GDPR.
How long do we keep your data?
- Customer data: for the duration of the contractual relationship and afterwards for the legally required periods.
- Billing data: in accordance with current tax legislation.
- CVs in recruitment processes: a maximum of 1 year.
- Video surveillance: a maximum of 30 days.
- Breakfast survey answers: a maximum of 2 years.
- Commercial data: until you withdraw your consent.
Where is the data stored?
As a general rule, data is stored within the European Union.
If we use technology providers located outside the EU, we will ensure that they provide adequate safeguards in accordance with the GDPR (standard contractual clauses or other legal mechanisms).
How can you exercise your rights?
You can send your request to: casacomedias@venacordoba.com.
Your request must include:
- First name and surname.
- A copy of an identity document.
- The right you wish to exercise.
- An address for notification purposes.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
Accuracy of the data
The user is responsible for the truthfulness of the data provided and undertakes to keep it up to date.
GESTION COMEDIAS S.L. is not responsible for inaccuracies in the data supplied by the user.
Data of minors
In accordance with Article 8 of the GDPR and Article 7 of the LOPDGDD:
- For children under 14, the consent of their legal representatives is required.
- For those over 14, data may be processed with their consent, unless the law requires the assistance of their guardians.
Security measures
GESTION COMEDIAS S.L. has adopted the technical and organisational measures necessary to guarantee:
- The confidentiality of the data.
- The integrity of the information.
- The availability of the service.
- Protection against unauthorised access.
However, users should be aware that security measures on the Internet are not absolutely invulnerable.