[finale_header title="Privacy Policy"]

This section regulates the conditions of use of the website www.mapoula.com that HOSTAL MAPOULA SL makes available to Users.

Your privacy and the security of your data are our priority.

At HOSTAL MAPOULA SL we are committed to clear principles and values of privacy where transparency, control and security of our clients' personal data are our priority in the design and provision of our services.

We want you, as a customer or potential customer, to control your personal data, and to be able to decide who accesses it, under what conditions and for what purpose.

Therefore, we have updated our Privacy Policy, which replaces the one that previously governed the processing of your data.

In accordance with the new European regulations on the protection of personal data, which affect natural persons and business contacts, and which will be applicable from May 25, 2018, we provide you with the following information:

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (Data Protection) and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), you are hereby informed that the personal data collected through www.mapoula.com are confidential and will be included in a file called "web users, clients or potential clients," which is duly registered in the processing register owned by HOSTAL MAPOULA SL (DATA CONTROLLER) with registered office at CALLE ENTREMURALLAS, NUM 10, 3º, SANTIAGO DE COMPOSTELA, 15702, A CORUÑA, for the sole purpose of managing the sending of information and commercial prospecting, managing and responding to queries, orders, requests or contracts. the users/customers, for which they give their express consent.

DATA CONTROLLER

In terms of data protection, HOSTAL MAPOULA SL must be considered the Data Controller, in relation to the files/processing it manages.

The following information identifies the owner of this website:

Company or Entity: HOSTAL MAPOULA SL.
Company tax ID: B42721662
Postal address: CALLE ENTREMURALLAS, NUM 10, 3º, SANTIAGO DE COMPOSTELA, 15702, A CORUÑA
Telephone: +34 981 580 124
Email: mapoulapr@gmail.com

Domains: www.mapoula.com

HOSTAL MAPOULA SL processes data fairly and lawfully; it only processes data that it considers adequate, relevant and not excessive in relation to the scope and the specific, explicit and legitimate purposes for which it obtains them, and does not use them for purposes incompatible with those for which the data have been collected.

This policy is permanently accessible through the link enabled on the website, called “Privacy Policy”, and may be updated at any time, either as a result of a regulatory change or because of a modification of the configuration of the services or the type of business developed.

Any modifications that involve changes to the provision of the contracted service, or that require the consent of the interested parties, will be communicated 30 calendar days in advance so that interested parties can express their objection to the processing of their data according to the described change, or so that clients can take any measures they deem appropriate in relation to the communicated modification. If, after the given period, the user accesses their services again or does not communicate their objection, the new conditions will be considered accepted.

PURPOSE OF THE COMPILATION

The purpose of collecting and using this data is to manage and respond to inquiries, requests, or bookings from users/clients, for which they expressly consent. HOSTAL MAPOULA SL undertakes not to use the data obtained for any purpose other than those described above.

COLLECTION METHODS

Personal data will be collected through the HOSTAL MAPOULA SL website when you enter information in any of the designated fields. These fields are clearly marked and will not collect any data until you expressly consent to its transfer and processing in accordance with this privacy policy.

PURPOSES

The purposes for which the data will be used are (i) the management of queries made by users or clients, (ii) the preparation of budgets derived from them; and (iii) the sending of commercial information, including by electronic means, including email or telephone, of the products and services provided by {here name of the company}, when expressly consented to.

In both cases, the forms provided will indicate what data is required, marking the mandatory field with an asterisk (*).

We inform you that HOSTAL MAPOULA SL does not carry out international data transfers and that said data may be transferred to third-party companies such as consultancies, banking entities, legal firms, etc., as well as in cases where there is a legal obligation.

RIGHTS

You can exercise your rights of Access, Rectification, Erasure, Restriction, Opposition and Portability free of charge by sending an email to mapoulapr@gmail.com along with a photocopy of your ID.

DATA COLLECTED

HOSTAL MAPOULA SL processes data lawfully, fairly, and transparently. It only processes data that is adequate, relevant, and limited to what is necessary in relation to the specific, explicit, and legitimate purposes for which it is obtained, and does not process it for purposes incompatible with those.

HOSTAL MAPOULA SL will process the following categories of user/customer data:

Identifying information: name, surname, ID number
Contact information: postal address, email address, website domain, and telephone number.
Tax information: company name, tax ID, bank account number, etc…

Users are responsible for the truthfulness and currency of the data they provide to HOSTAL MAPOULA SL, and the data provided by them is considered accurate and up-to-date.

HOSTAL MAPOULA SL informs that both the personal data provided by users when registering and those provided to contract any of the services offered by HOSTAL MAPOULA SL or to resolve any incident communicated through any of the available contact means (telephone, chat, customer area or email), will be incorporated into the systems of HOSTAL MAPOULA SL and will be processed in accordance with, and for the periods defined in, this Privacy Policy.

If the user/customer provides us with data from third parties, they declare that they have the consent of the same and undertake to provide them with the information contained in this Privacy Policy, exempting HOSTAL MAPOULA SL from any liability in this regard.

However, HOSTAL MAPOULA SL may carry out periodic checks to verify this fact, adopting the appropriate due diligence measures, in accordance with data protection regulations.

To access and/or browse the HOSTAL MAPOULA SL website, it is not necessary to provide any data.

The mandatory nature of the answers to the questions posed, or the data requested through this website, is indicated by the inclusion of an asterisk (*) following the question or form field.

If the required data is not provided, it will not be possible to provide the requested service or functionality.

Users must refrain from providing personal data of other interested parties, unless they have the relevant authorization.

In any case, HOSTAL MAPOULA SL will cancel the registered data as soon as they are no longer necessary or relevant for the purpose for which they were collected, and may keep them –duly blocked– for the time in which any type of liability may be required arising from a legal relationship or obligation or from the execution of a contract or from the application of pre-contractual measures requested by the interested party.

HOSTAL MAPOULA SL may transfer data to third parties if required by law or EU regulation, or if necessary for the proper functioning of this website or to improve the provision of the service offered or contracted. In such cases, only the data essential for managing user requests and providing the contracted services will be shared. This transfer is based on the free and legitimate acceptance of a legal relationship between the data subjects and HOSTAL MAPOULA SL, the development, fulfillment, and monitoring of which necessarily involve the processing of data and includes its required transmission.

If a user leaves a comment or interacts socially with the HOSTAL MAPOULA SL website or on the social networks where it is present, they should be aware that their data may be published in the environment in which they act, that is, they will be expressly authorizing the communication of their data -associated with the action they perform- to the other users who access the website or social network.

At HOSTAL MAPOULA SL we process your data to provide the services you have or wish to contract, as well as for other purposes that you allow or authorize us, such as sending a quote or answering a query.

CONSERVATION

The retention period will be as follows:

The retention period for said data will be valid for as long as the commercial relationship between both parties is maintained and subsequently, it will also be maintained for a period of 5 years, in compliance with tax and invoicing obligations.

1. Buyer and user data: the data will be processed for as long as the contractual relationship lasts and afterwards, it will also be kept for a period of five years, in compliance with tax and billing obligations.

2. Payment details: We do not access or store information regarding payment methods used under any circumstances. For greater security, these details will be requested for each order, in accordance with the security standards of the payment gateways contracted by HOSTAL MAPOULA SL and used at the discretion of each customer or user.

3. Browsing data: Those explicitly indicated in the cookie policy.

ACCURACY

Users of the website and services of HOSTAL MAPOULA SL are responsible for the truthfulness, currency, and accuracy of the data they provide to HOSTAL MAPOULA SL. Data provided by the users themselves will be considered truthful, currency, and accuracy. {here company name}, upon becoming aware of any inaccuracy, will take the necessary steps to rectify the affected data without delay.

PURPOSES AND LEGAL BASIS

In addition to the basic information on data protection provided through each of the data collection methods, the following additional information is provided regarding the purposes and legal bases of the following files or processing activities:

a. Clients:

The data will be processed for the following main purposes, the legal basis that legitimizes these processings being the execution of a contract to which the interested party is a party (art. 6.1.b) GDPR), as well as compliance with legal obligations (art. 6.1.c) GDPR):

Management and provision of the requested or contracted service or product.
Administrative management, which includes billing management, management of non-payment of fees, and insurance processing.
Sending commercial information

The entity proceeds to send information about products or services of its own entity similar to those previously contracted based on a legitimate interest, all in accordance with the provisions of article 20.2 of the LSSICE.

b. Staff

The data will be processed for the purpose of managing all services related to the field of human resources, which includes accounting, tax and administrative management, payroll management, training management and occupational risk prevention management and timekeeping, among others.

The legal basis that legitimizes the processing is, in general terms, the execution of a contract to which the interested party is a party (Art. 6.1.b) GDPR), as well as compliance with legal obligations (Art. 6.1.c) GDPR).

c. Suppliers

The data will be processed for the purpose of managing the contractual relationship, which includes accounting, tax, and administrative management, as well as payment processing for services, among other things. The legal basis for this processing is the performance of a contract to which the data subject is a party (Art. 6.1.b) GDPR), as well as compliance with legal obligations (Art. 6.1.c) GDPR).

d. Web users

Personal data is collected through the website for various purposes, including:

– Contact section for submitting queries, requests, suggestions, complaints, etc.
– User registration and contracting section, this data will be processed to register the user in the private section of the website and to facilitate and allow access to or contracting of products or services offered through the website.

e. Video surveillance

Images captured by the video surveillance systems installed at HOSTAL MAPOULA SL will be processed for the purpose of ensuring the security of the property, facilities, and people who access them. The legal basis for this processing is that the systems are installed to carry out a task performed in the public interest (Art. 6.1.e. GDPR).

f. Curricula

The organization receives resumes through various channels, primarily in person or through general corporate accounts, so that if they are resumes that may fit any of our positions, they are processed in order to carry out the necessary selection processes.

However, if the resume does not fit or cannot fit any of the positions in the entity, it will be permanently eliminated or destroyed.

The legal basis for the processing is the express consent of the interested party, as it is the owner of the curriculum who voluntarily provides his personal data.

g. Social networks

Users who utilize the automated social media posting service must provide their login credentials (username/email address and password) to the relevant social networks. These credentials will be used solely for the purpose of publishing the content provided to us by the users/clients on their behalf. This content must comply with both current legislation and the terms of service of the respective social networks.

LEGITIMATION

The legal basis for processing your personal data is your explicit acceptance of the processing, management and storage of said data in accordance with this privacy policy.

The user who contracts the service (hereinafter, the Contracting Party), or, where applicable, the third party that decides on the purpose, content, use, and processing of personal data, are solely responsible for the data they store on the services of HOSTAL MAPOULA SL. HOSTAL MAPOULA SL processes the information stored on its services exclusively on behalf of the Contracting Party under the terms and conditions stipulated in the Terms and Conditions section.

The Contracting Parties declare that they are owners of files containing legally collected personal data and that, by virtue of the services contracted to HOSTAL MAPOULA SL, they authorize its processing, to the extent necessary for the provision of said services.

DATA HOSTING

The data will be hosted at HOSTAL MAPOULA SL with address at CALLE ENTREMURALLAS, NUM 10, 3º, SANTIAGO DE COMPOSTELA, 15702, A CORUÑA.

CONSENTS

Users consent to the processing of their data under the terms indicated above by accepting this Privacy Policy when registering as a user of HOSTAL MAPOULA SL, or when sending information or using any of the contact methods provided on the HOSTAL MAPOULA SL website, or when contracting the specific service that requires such processing in accordance with the General Terms and Conditions of the corresponding service. Users must refrain from providing personal data of other individuals unless they have the relevant authorization, whereby those individuals have been previously and duly informed about the content of this Privacy Policy and, specifically, that they consent to their data being provided to HOSTAL MAPOULA SL to be processed for the corresponding purposes, and that they may exercise their rights under the terms described in this Policy. In any case, HOSTAL MAPOULA SL will cancel the registered data as soon as they are no longer necessary or relevant for the purpose for which they were collected, and may keep them –duly blocked– for the time in which any type of liability may be required arising from a legal relationship or obligation or from the execution of a contract or from the application of pre-contractual measures requested by the interested party.

TRANSFER OR COMMUNICATIONS OF DATA

HOSTAL MAPOULA SL does not transfer data to third parties, unless otherwise required by law or EU regulation, or if necessary for the provision of the contracted service. In such cases, it only shares the data essential for managing user requests and providing the contracted services. This transfer is based on the free and legitimate acceptance of a legal relationship between the data subjects and HOSTAL MAPOULA SL, the development, fulfillment, and monitoring of which necessarily involve the connection of the data and includes its required transmission.

If a user leaves a comment or interacts socially with the HOSTAL MAPOULA SL website or on the social networks where it is present, they should be aware that their data will be published in the environment in which they act, that is, they will be expressly authorizing the communication of their data -associated with the action they perform- to the rest of the users who access the website or social network.

For the management of certain services offered by the entity, it is necessary to allow access to certain data to third-party service providers contracted for this purpose. In this regard, the entity proceeds to sign the respective data processing agreements necessary, and has given the precise instructions to the different service providers or data processors, to ensure the security and integrity of the data to which they have access as a result of the provision of the contracted service.

Apart from the above cases, your personal data will not be transferred to third parties, except in the cases indicated below.

Customers, staff and suppliers: data may be communicated to the following recipient groups:

a. Public administrations: in case it is required under a regulation, for example, the State Tax Administration Agency, and the rest of the competent tax or other authorities, in order to comply with the obligations imposed by current legislation.

b. Banking entities: for the management of the collection and payment of services.

c. Google and Google Analytics: For tracking and statistical analysis of overall user behavior. Data may be transferred to Google, Inc., a Delaware company with its principal office at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This data will be transferred to enable tracking and statistical analysis of overall user behavior. You can consult Google's Privacy Policy and Terms of Service at the following link: https://policies.google.com/technologies/partner-sites. If these cookies are disabled, the website will continue to function. The data we receive includes the URL of the page you accessed and your IP address, among other information. We may also place cookies on your browser or read those already stored there.

Video surveillance: Data may be communicated to the Security Forces and Corps and judicial bodies, upon request.

STORAGE PERIODS

a. Clients: Data will be kept until the termination of the contractual relationship and will be kept, duly blocked, for the limitation periods of any liabilities that may arise. Data will be kept for a period of 5 years.

b. Personal: the data will be kept until the termination of the contractual relationship and will be kept, duly blocked, for the limitation periods of any liabilities that may arise. For example, in the case of time records, the data will be kept for a period of 4 years.

c. Suppliers: the data will be kept until the end of the contractual relationship and will be kept, duly blocked, during the limitation periods of any liabilities that may be required.

d. Web users: the data will be kept for as long as necessary to fulfill the purposes indicated.

e. Video surveillance: will be kept for one month.

f. Curricula: the data will be kept as long as the curriculum profile may fit any of our applications, filtering and cleaning documents.

REVOCATION OF CONSENT

In cases where the processing of personal data is based on consent, data subjects are informed of their right to withdraw their consent at any time, easily and free of charge, by writing to the address of the data controller or via email to mapoulapr@gmail.com, attaching a copy of their national identity document or equivalent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

RIGHTS OF INTERESTED PARTIES

Data protection regulations grant a series of rights to data subjects or owners; these rights are as follows:

Right of access: the right to obtain information about whether your own data is being processed, the purpose of the processing being carried out, the categories of data being processed, the recipients or categories of recipients, the retention period and the origin of said data.

Right of rectification: the right to obtain the rectification of inaccurate or incomplete personal data.

Right to erasure: the right to obtain the erasure of data in the following cases:

– When the data is no longer needed for the purpose for which it was collected.
– When the data subject withdraws their consent.
– When the interested party objects to the treatment.
– When they must be removed in compliance with a legal obligation.
– When the data has been obtained under an information society service based on the provisions of Article 8, paragraph 1 of the European Data Protection Regulation.

Right to object: the right to object to a certain processing based on the data subject's consent.

Right to restriction: the right to obtain the restriction of the processing of data when any of the following circumstances apply:

– When the interested party challenges the accuracy of the personal data, for a period that allows the company to verify the accuracy of the same.
– When the processing is unlawful and the interested party objects to the erasure of the data.
– When the company no longer needs the data for the purposes for which it was collected, but the interested party needs it for the formulation, exercise or defense of claims.
– When the interested party has objected to the processing while it is being verified whether the legitimate grounds of the company prevail over those of the interested party.

You may exercise your rights of Access, Rectification, Erasure, Limitation, Opposition and Portability free of charge at HOSTAL MAPOULA SL with CIF B42721662 and registered office at CALLE ENTREMURALLAS, NUM 10, 3º, SANTIAGO DE COMPOSTELA, 15702, A CORUÑA, or by sending an email to mapoulapr@gmail.com, attaching a photocopy of your ID.

In this regard, the entity will attend to your request as soon as possible and taking into account the deadlines provided for in the regulations on data protection.

Furthermore, it should be noted that the interested party or data subject may at any time file a complaint with the competent supervisory authority.

OBLIGATIONS

In those cases where HOSTAL MAPOULA SL may have access to the data, it undertakes not to apply, use, or disclose the data processed for purposes other than those derived from the Main Contract.

HOSTAL MAPOULA SL will only process the data contained in its services to execute the services contracted on behalf of the Contracting Party in accordance with the instructions given and, in no case, will it use them for purposes other than those agreed in the Main Contract.

HOSTAL MAPOULA SL will not disclose or allow access to the processed data to any third party, not even for storage purposes, unless: the Main Contract stipulates otherwise, disclosure is necessary for the provision of the contracted services, or the transfer is mandated by law. In this regard, the contracting party expressly authorizes HOSTAL MAPOULA SL, upon contracting any of the services available on the website, to subcontract, on its behalf and at its expense, any entities necessary for the proper provision of the services detailed in the Main Contract. The subcontracted entities will be considered data processors, will be subject to the same data protection and confidentiality rules as HOSTAL MAPOULA SL, and will regulate their relationship with HOSTAL MAPOULA SL in accordance with data protection regulations. The identity of these subcontracted entities is published on the HOSTAL MAPOULA SL website.

HOW DO WE PROTECT YOUR DATA?

The security measures adopted by the entity are those required in accordance with Article 32 of the GDPR. In this regard, the entity, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, has established appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

In any case, the entity has implemented sufficient mechanisms to:

a) Guarantee the ongoing confidentiality, integrity, availability and resilience of treatment systems and services.

b) Restore the availability and access to personal data quickly, in the event of a physical or technical incident.

c) Regularly verify, evaluate and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.

d) Pseudonymize and encrypt personal data, where appropriate.

Your data is transferred and stored securely because we have:

Encrypted with SSL protocol.
Server-level firewall.
Security protocols to prevent unauthorized access.
Access control.

CONFIDENTIALITY

HOSTAL MAPOULA SL undertakes to maintain professional secrecy regarding the data it accesses under the Main Contract, and to safeguard such data, obligations that will remain in effect even after the termination of its relationship with the Contracting Party. The remaining obligations related to the processing of data on behalf of third parties will cease when the data has been erased or deleted from the data storage equipment or otherwise destroyed or rendered inaccessible.

HOSTAL MAPOULA SL reserves the right to revise its Privacy Policy at any time. For this reason, we ask that you regularly check this privacy statement to read the most recent version of our Privacy Policy.

Information society and electronic commerce services LSSICE 34/2002

According to the LSSI (Law on Information Society Services), we inform all users of the HOSTAL MAPOULA SL website that if they request any type of information through the various forms on this website, they may, if they wish, grant us their consent to receive our news and offers (from these newsletters, they can unsubscribe at any time), as well as commercial communications exclusively about our services, in accordance with the conditions set out in our privacy policy.

Company details: The owner of this website makes available to its visitors a series of details which, according to Article 9 of Law 34/2002 of July 11 – LSSICE on “information society and electronic commerce services”, are mandatory to provide to both the recipients of the service and the competent authorities, and can be found below, presented in a simple, direct and free manner.

EXERCISE YOUR RIGHTS | mapoula@mapoula.com

Company or Entity: HOSTAL MAPOULA SL.
Company tax ID: B42721662
Postal address: CALLE ENTREMURALLAS, NUM 10, 3º, SANTIAGO DE COMPOSTELA, 15702, A CORUÑA.
Telephone: +34 981580124
Email: mapoulapr@gmail.com

Do you not wish to receive information from us or do you wish to revoke your consent?

In accordance with the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, you may object to the use of your information for advertising purposes, market research or the development of satisfaction surveys at any time, as well as revoke your consent at any time (without retroactive effect).

To do so, you must send an email to mapoulapr@gmail.com. If you have received advertising by email, you can also opt out from that email by clicking on the link included and following the instructions provided.

Please note that our systems may require a period of time that will in no case exceed 48 hours for your objection or revocation to be effective, so during that time you may continue to receive messages.

Regarding the management of your data associated with HOSTAL MAPOULA SL's social media profiles, exercising your right of access will depend on the functionality of the social network and the access it allows to user profile information. With respect to the rights of access and rectification, please note that these can only be exercised in relation to information under the control of HOSTAL MAPOULA SL. Similarly, the rights of cancellation and objection can only be exercised in relation to information under the control of HOSTAL MAPOULA SL.

You can also stop interacting with, following, or receiving information from HOSTAL MAPOULA SL's social media profiles, delete content that no longer interests you, or restrict who you share your connections with, using the mechanisms provided by the different social networks.

Users can access the privacy policies of the social network at any time, as well as configure their profile to ensure their privacy. HOSTAL MAPOULA SL encourages users to familiarize themselves with the terms of use of these networks before starting to use them.

Facebook: https://www.facebook.com/help/323540651073243/
Google: https://policies.google.com/technologies/partner-sites
Twitter: https://twitter.com/privacy

Do you have any questions about our Privacy Policy?

If you have any questions or concerns about our Privacy Policy or wish to exercise any rights or actions related to your personal data, please contact us at the following email address: mapoulapr@gmail.com