Privacy Policy
Exclusive advantages for booking on the website.
1- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
The person responsible for the processing of your personal data and owner of the website https://umasuites.com is SMART ROOMS CORPORATION S.L., SMART ROOMS OPCO S.L., APARTAMENTOS LAFORJA S.L. and BENET MONSÓ S.L., besides SMART ROOMS COMPANY, S.L. registered in the BARCELONA Mercantile Registry in volume 43,188, page 213, page B426216, 1st registration with CIF B-65786378 and address at calle Trafalgar, 52, 1º 2ª, 08010 Barcelona, (hereinafter SMART ROOMS).
UMA SUITES is a brand owned by SMART ROOMS COMPANY, SL through which it manages its own or third-party tourist establishments under the Uma Suites brand.
SMART ROOMS has taken the necessary technical and organizational measures to comply with data protection regulations.
The contact details of SMART ROOMS, in relation to privacy and the protection of your personal data are:
+34 93 160 03 03
gdpr@smartroomscompany.com
2- WHAT TYPE OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?
1-Types of personal data we process
For reasons of confidentiality, we collect the least amount of data possible from our clients, beyond what they provide us voluntarily or what the Law obliges us to collect and keep in the case of reservations made through reservation engines.
We may collect and process the following categories of personal data:
to. Name, title, gender.
b. Your contact details and address, the telephone number if you make a reservation by phone and leave it to us, your email address if you make a reservation to us from your email or those details required by the booking engine to make a reservation. Information and date of your reservation, information about your stay and preferences, as well as your credit card information. Your credit card information. In the case of making a reservation electronically, the system may request a selfie to verify the veracity of the documentation provided. Your image will only be used for these purposes and will only be kept for the time strictly necessary.
c. In the case of our employees, identification data, social security data, bank data and all that are necessary for the development of the employment relationship.
d. Identification data of our suppliers of their contact persons in the case of being companies.
and. Images captured by our video surveillance cameras.
F. We record your communications with us by email or other means. When you make a telephone communication, our customer service may record your questions in our database.
g. Information collected when you use our website and other digital media, if any.
When you use our website we may record your IP address, browser type, operating system, website of origin, and web browsing behavior.
h. In the event that you connect to the TV that you can find in any of our rooms, we will request your ID so that your browsing history will be recorded.
i. Information you choose to share with us.
You can choose to share information with us, for example, by adding a comment on LinkedIn, Facebook
2-Your personal data will only be used for the following purposes:
to. Register you in our database if you make a reservation, in case you provide them to us or make the reservation through a booking engine.
b. Carry out the necessary commercial and administrative procedures with the users of our website and our clients or potential clients.
c. At SMART ROOMS we process the information you provide us with in order to respond to the request for information you send us, provide you with information about our services, internally and externally manage your reservations or the provision of our services, as well as the purchases we make from our suppliers, as well as to comply with the legal obligations derived from said activities.
d. Communicate with you to respond to your queries and process your complaints or obtain your opinion about the quality of our accommodations, our services or the treatment received.
e. Send commercial advertising communications by email, social networks, or any other electronic means, in case you have expressly consented to the sending of said commercial communications electronically. In the event that you are a recurring customer, we may send you commercial information, news or news related to our services without requiring your prior consent. You may withdraw your consent to receive marketing communications at any time by following the instructions in the relevant marketing communication or by contacting us at gdpr@smartroomscompany.com.
F. Register the images captured by our video surveillance cameras installed in our establishments for security reasons. These images may be transferred to the Police or to the judicial authority at their request.
g. Likewise, the data that may be collected while browsing will be processed with the aim of providing access to the online content of the web, as well as responding to the requests of web users, keeping a record of statistical visits (IP addresses , browser data, country, accessed page, etc.) in order to facilitate us to develop better services and products, optimize our offer and, provide a more effective customer service and improve the design and content of our websites .
h. The data of our clients and suppliers will be processed, within the contractual relationship that links them with us, in compliance with administrative, fiscal, accounting obligations and, where appropriate, in compliance with the law on citizen security.
i. Comply with the legal obligations that correspond to us.
In accordance with the LSSICE, we inform you that SMART ROOMS COMPANY does not carry out SPAM practices, therefore, it does not send commercial emails if it does not have the necessary legitimacy. In any case, you will always have the possibility to withdraw your consent to receive our communications.
We will not process your personal data for any other purpose than those described in this Policy, except by legal obligation or judicial requirement.
Your personal data will not be the object of decisions based on automated treatments that produce effects on you.
3- WHAT IS THE LEGAL BASIS THAT LEGITIMATES THE PROCESSING OF YOUR DATA?
The legal basis that legitimizes the processing of your personal data is your express consent granted to carry out the purposes described above, which will be requested at the time you request information from us.
In the event of a commercial relationship between you, either as a client, as a supplier or as an employee, and SMART ROOMS COMPANY, the legal basis that will legitimize the processing of your personal data will be the execution of the contractual relationship that will have been generated, as well as as, where appropriate, compliance with the corresponding legal obligations.
The legal basis that legitimizes the treatment of the images recorded by our video surveillance cameras is our legitimate interest in maintaining the security of our facilities.
Comply with the legal obligations that correspond to us.
Sometimes the processing of your personal data will be legitimized by our own legitimate interest.
The legal basis that legitimizes the treatment of the images recorded by our video surveillance cameras is our legitimate interest in maintaining the security of our facilities.
In case you do not provide us with your personal data or in case you do not accept our privacy policy, SMART ROOMS COMPANY will not carry out the processing of your personal data, but it may also make it impossible for us to send you information, or, in your case, that we provide our services.
Commercial information.
Any communication sent will be incorporated into the information systems of SMART ROOMS COMPANY.
In the event that you provide us with your personal data and accept this privacy policy, we inform you that SMART ROOMS COMPANY may carry out the following activities and/or actions, unless otherwise indicated:
- The sending of commercial and/or promotional communications corresponding to the answer to your request for information by any means. The legal basis that will legitimize this treatment is your express consent granted when you voluntarily make the request.
- The sending of any information, including commercial information on news, news, etc. and all information related to our activities or the services contracted by our clients. The legal basis that legitimizes this treatment is our legitimate interest within the commercial relationship established with you.
Objection or revocation. You can object or withdraw your consent to receive marketing communications at any time by following the instructions in the relevant marketing communication or by contacting us via gdpr@smartroomscompany.com.
resumes
In the event that the user sends his CV to SMART ROOMS COMPANY, we inform him that the data provided will be processed to make him a participant in the selection processes that may exist, carrying out an analysis of the applicant's profile in order to select the best candidate. candidate for the vacant position at SMART ROOMS COMPANY. We inform you that we will only accept your CV if you send it to us electronically, so that CVs sent or delivered on paper will not be accepted. In the event of any change in the data, please notify us in writing as soon as possible, in order to keep your data duly updated.
We inform you that your CV and the data it contains will be kept for a maximum period of one year, after which the data will be deleted, guaranteeing total confidentiality both in the treatment and in its subsequent destruction. In this sense, once the aforementioned period has elapsed and, if you wish to continue participating in the SMART ROOMS COMPANY selection processes, please send us your updated CV again.
However, in the event that you are hired by SMART ROOMS COMPANY, your CV will be kept, together with the rest of your employment file, while your contractual relationship with the corresponding Company is maintained.
4-CONSERVATION PERIOD How long will we keep your data?
The personal data that you provide us will be kept for the time necessary to manage the information you request, as well as to manage the reservations made to us by our clients or for the fulfillment of any contract that is generated between SMART ROOMS COMPANY and third parties.
The images recorded by our video surveillance cameras will be kept for 30 days, unless at the request of the police or judicial authority they must be kept for a longer time. In these cases they will be kept properly blocked.
Once the data has met the needs for which it was collected, we will permanently delete it. However, we will keep your data for longer in case it is necessary to comply with legal obligations. Likewise, it may be necessary to keep them for the time necessary for the prescription of the legal responsibilities that are generated.
The data you provide us to start a personnel selection process at SMART ROOMS COMPANY will be kept for a maximum period of one year. Subsequently, if you have not joined SMART ROOMS COMPANY and are not in a selection process, they will be eliminated and we will not keep a copy.
The personal data of our workers will be kept for the duration of their employment relationship with SMART ROOMS COMPANY and, subsequently, during the legally established periods.
5- TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?
Within our organization your personal data will be processed by duly authorized personnel, and, if necessary or practical to comply with the purposes indicated above, they may be processed by third parties.
The categories of recipients to whom your personal data may be communicated are the following:
to. When necessary for operational reasons, with SMART ROOMS CORPORATION to which Smart Rooms Company, S.L. or with GRUPO SOGAMAN and its companies (with which we share administration and management. Likewise, your data may be known, in case you stay at UMASUITES Laforja by the company Apartamentos Laforja, SL as owner of said establishments.
b. Appointed third party processors, such as IT providers, consultants and advisers and other companies providing ancillary services.
c. Public Entities and Organizations, exclusively in order to comply with the corresponding legal obligations, including the Police to whom the identity of the people staying in our establishments will be communicated, in compliance with current citizen security regulations.
d. Other providers to whom, where appropriate, your personal data may be transferred to financial institutions, fraud detection service providers, etc.
and. Video surveillance management company.
In any case, all the aforementioned third parties will have previously signed the corresponding confidentiality agreement following our instructions in accordance with current personal data protection regulations, will be subject to the duty of professional secrecy or will act in compliance with a legal obligation. .
The information that you provide us both through this website will be hosted on SMART ROOMS COMPANY servers.
6.- WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?
If you wish to exercise the rights that the data protection regulations grant you, please send us an email to the following address gdpr@smartroomscompany.com Putting in the subject the right you want to exercise and attaching a copy of your national identity document or passport.
The Rights that the current regulations recognize and that, where appropriate, you can exercise are:
Right of Access to data:
You have the right for SMART ROOMS COMPANY to notify you whether or not your personal data is being processed and, if the processing is confirmed, it will allow your access by providing you with the following information:
-The purposes of the treatment.
-The categories of data in question.
-The term or criteria for data conservation.
Right to rectify data:
You will have the right for SMART ROOMS COMPANY to rectify your data when they are inaccurate or incomplete by means of an additional rectifying statement.
Right of Deletion of the data:
The interested party will have the right for SMART ROOMS COMPANY to delete their data, when:
-The processing is unlawful.
-The interested party has withdrawn their consent.
-They are no longer necessary in relation to the purposes for which they were collected or processed.
-The interested party has exercised the right of opposition and other legitimate reasons for the treatment do not prevail.
-The data must be deleted to comply with a legal obligation of SMART ROOMS COMPANY.
The interested party will not have the right for SMART ROOMS COMPANY to delete their data when the treatment is necessary:
-To exercise the right to freedom of expression and information.
-To comply with a legal obligation of SMART ROOMS COMPANY.
-For the formulation, exercise or defense of claims.
-For public interest based on current legislation for reasons of public health or for purposes of historical, statistical or scientific research.
Data Portability Right:
You have the right for SMART ROOMS COMPANY to transmit your data to another data controller or to the same interested party, through a structured format of habitual use and mechanical reading, when the treatment is carried out by automated means and is based on:
-The consent of the interested party for specific purposes.
-The execution of a contract or pre-contract with the interested party.
The right to data portability will not apply when:
-The transmission is technically impossible.
-May negatively affect the rights and freedoms of third parties.
-The treatment has a mission of public interest based on current legislation.
Right to Limit Treatment:
The interested party will have the right to oppose the processing of their data by SMART ROOMS COMPANY for reasons related to their particular situation, when the processing is based on:
-Direct marketing.
-Elaboration of profiles.
-Legitimate interest of the person responsible or third parties, provided that the interests or rights and freedoms of the interested party do not prevail, especially if it is a child.
-Historical, statistical or scientific research, unless the treatment is necessary for reasons of public interest.
Even if the interested party opposes the processing of their data, SMART ROOMS COMPANY may continue to process them as long as its legitimate interest prevails over the interests or rights and freedoms of the interested party in a legal proceeding that justifies it.
SMART ROOMS COMPANY must inform the interested party of the right to oppose the processing of their data in an explicit, clear and separate way from any other information, at the time of the first communication.
Opposition right:
It is the right not to carry out the treatment of these or to cease it when their consent for the treatment is not necessary, due to the concurrence of a legitimate and well-founded reason, referring to their specific personal situation, that justifies it. , and provided that a Law does not provide otherwise.
Right not to be subject to profiling:
The interested party shall have the right not to be subject to profiling whose purpose is to make individual decisions based on automated data processing and aimed at evaluating, analyzing or predicting the following personal aspects:
-Professional performance.
-Economic situation.
-Health.
-Preferences or personal interests.
-Reliability.
-Behavior.
-Location or movements of the person.
When profiling is based solely on automated processing:
-The interested party shall have the right to be informed if the decision that may be taken may produce legal effects that significantly affect him.
-The interested party will have the right to obtain human intervention by SMART ROOMS COMPANY, to express their point of view and to challenge the decision, if the treatment has been authorized by:
-The explicit consent of the interested party.
-A contract between SMART ROOMS COMPANY and the interested party.
It will not apply to the right not to be subject to profiling when the decision that can be taken as a result of this is authorized by:
-The explicit consent of the interested party.
-A contract between SMART ROOMS COMPANY and the interested party.
-A treatment based on current legislation.
7-CLAIM BEFORE THE CONTROL AUTHORITY:
In the event that you consider that SMART ROOMS COMPANY has violated any of your rights protected by the personal data protection regulations or that it has violated any obligation regarding the protection of Personal Data, you have the right to file a claim with the control authority. competent authority that in Spain is the Spanish Data Protection Agency located at Calle Jorge Juan, 6. 28001 – Madrid.
Tel. 901 100 099 - 912 663 517
You can also submit an electronic claim through the electronic office that is available on its website https://www.aepd.es
8-LAW AND JURISDICTION
This privacy policy is governed in each and every one of its extremes by Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to to the processing of personal data and the free movement of such data.
It is also governed by Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights. Likewise, our website is governed by Law 34/2002, of July 11, on services of the information society and electronic commerce.
The Users of this Website are subject to Spanish legislation and jurisdiction to which they expressly submit, with the Courts and Tribunals of BARCELONA being competent to resolve all disputes arising from or related to its use.
9- ADDITIONAL INFORMATION
-SOCIAL NETWORKS (PRIVACY POLICY)
We inform you that SMART ROOMS COMPANY may have a presence on social networks. The treatment of the data that is carried out of the people who become followers in the social networks (and/or carry out any link or connection action through the social networks) of the official pages of SMART ROOMS COMPANY will be governed by this section, as well as those conditions of use, privacy policies and access regulations that belong to the social network that is appropriate in each case and previously accepted by the user.
SMART ROOMS COMPANY will process your data for the purpose of correctly managing your presence on the social network, informing you of the provider's activities, products or services, as well as for any other purpose that the regulations of Social Networks allow.
The publication of content is prohibited:
- That they are allegedly illegal by national, community or international regulations or that they carry out allegedly illegal activities or contravene the principles of good faith.
- That violate the fundamental rights of people, lack of courtesy in the network, annoy or may generate negative opinions in our users or third parties and in general whatever the content that SMART ROOMS COMPANY deems inappropriate.
- And in general that contravene the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of private life, consumer protection and intellectual and industrial property rights.
Likewise, SMART ROOMS COMPANY reserves the right to withdraw, without prior notice from the website or the corporate social network, those contents that are considered inappropriate.
The communications sent through social networks will be incorporated into a file owned by SMART ROOMS COMPANY, being able to send information of interest to you.
You can access more information, as well as consult the companies that are part of our group, in this privacy policy.
In any case, if you send personal information through the social network, SMART ROOMS COMPANY. will be exempt from liability in relation to the security measures applicable to this platform, and the user should, in case he wants to know them, consult the corresponding particular conditions of the network in question.
SECURITY MEASURES:
The data you provide us will be treated confidentially. SMART ROOMS COMPANY has adopted all the technical and organizational measures and all the levels of protection necessary to guarantee the security in the treatment of the data and to avoid its alteration, loss, theft, treatment or unauthorized access, according to the state of the technology and nature of the data stored. Likewise, it is also guaranteed that the treatment and registration in files, programs, systems or equipment, premises and centers comply with the requirements and conditions of integrity and security established in current regulations.
SSL CERTIFICATE (SECURE SOCKETS LAYER)
The SSL CERTIFICATE provides authentication, privacy and information security between SMART ROOMS and the user. SMART ROOMS COMPANY has a security certificate that is used to make secure connections and is established using preset keys, encrypting and decrypting all data sent until the connection is closed.
LANGUAGE
The language applicable to this Privacy Policy is Spanish. Therefore, in the event of any contradiction, in any of the versions provided in other languages, the Spanish version will prevail.
10-UPDATE
This Privacy Policy was last updated in March 2024 but may be updated at any time. We recommend that you consult it each time you access our page in case it has been altered.
*This disclaimer exists in a Spanish and English language version. In case of contradiction between both versions, the Spanish version shall prevail.
