Privacy Policy

In accordance with the provisions of the EU General Data Protection Regulation GDPR 679/2016 and the Spanish Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, the following information regarding the processing of your personal data is provided:

Who is responsible for the processing of your personal data?

Data Controller: CLOT HOTELS SL, VAT/CIF: B16629958, Address: CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, Email: fplass@nurahotels.com. DATA PROTECTION OFFICER: CONTACT: / http://www.protecmir.com / EMAIL: protecmirlegal@protecmir.com.

What data do we process?

At CLOT HOTELS SL we process the personal data you provide through the completion of the forms available on this website, personal data derived from the provision or contracting of our services or products, and/or personal data derived from the commercial relationship you maintain with us. In addition, we process personal data generated in the context of your activity on our website, which includes your browsing data obtained through the website.

It is important for us to keep your personal data up to date. You are required to inform us of any changes or errors in your personal data as soon as possible by contacting us at the email: fplass@nurahotels.com.

For what purpose do we process your personal data?

Purpose: CLOT HOTELS SL may process your personal data for the following purposes:

- Management and maintenance of the services provided through the website.

- Management and handling of inquiries and information requests made by users through the contact form. The email address and personal data you provide us through the website's contact form will be used exclusively to respond to the inquiries you make through this channel.

- Compliance with applicable legal obligations.

- Sending commercial communications and newsletters, as well as advertising our services and products.

- Management of the contracting of our services and/or products.

- Management of information requests or requests for quotes for our services or products.

- Registration in the user area.

- If you have consented, and in order to offer you services according to your interests, your personal data may be used to create a commercial profile. No automated decisions will be made based on this profile.

We keep your personal data in our systems and files for as long as necessary to achieve the purposes of the processing and to comply with applicable legislation. Your personal data will be retained while there is a contractual and/or commercial relationship with you, or until you exercise your right to erasure and/or restriction of processing. The retention period for personal data will vary depending on the purposes of processing and, generally:

- Personal data you provide in connection with the contracting of our services or products will be retained during the contractual relationship and, once it ends, for the limitation period of any legal claims that may arise from it.

- Personal data you provide to manage information requests or inquiries through the contact form will be retained until you request its deletion or cancellation.

- Personal data you provide to subscribe to our newsletter or information bulletins will be retained until you request its deletion, opposition, and/or restriction.

- Personal data obtained from your browsing and consumption habits, as well as the commercial profile created, will be retained until you request its deletion or cancellation.

Your personal data will be retained while they are useful for the indicated purposes, and in any case, for the legal periods and the time necessary to address possible liabilities arising from the processing.

What is the legal basis for processing your data?

Legal Basis: The legal basis for processing your personal data is based on:

- The execution and maintenance of a contractual and commercial relationship with you, such as the contracting of the entity’s products and services, management and request of quotes for the entity’s products and/or services, all in accordance with Article 6.1.b of the GDPR (EU) 679/2016 and the Spanish Organic Law 3/2018 of December 5 (LOPDPGDD).

- Your explicit consent for one or more purposes, such as sending advertising communications or newsletters from us or third parties, managing CV submissions, participation in activities or contests, all in accordance with Article 6.1.a of the GDPR (EU) 679/2016 and the Spanish Organic Law 3/2018 of December 5 (LOPDPGDD).

- Compliance with various legal obligations, all in accordance with Article 6.1.c of the GDPR (EU) 679/2016 and the Spanish Organic Law 3/2018 of December 5 (LOPDPGDD).

- The satisfaction of legitimate interests pursued by the data controller or a third party, for example, for security reasons, to improve our services, or to manage your requests or inquiries.

During the data collection process, and on each place of the website where personal data is requested, the user will be informed, either via a hyperlink or by including the appropriate notices in the form itself, whether providing personal data is mandatory or optional.

The personal data requested in the website forms are generally mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if the requested personal data are not provided, or not provided correctly, the requests cannot be processed.

Providing your personal data is mandatory in cases of contracting a service or product, and/or when requesting quotes or offers.

Sending advertising communications, newsletters, or information bulletins about our products and services is based on the consent requested, and in no case does withdrawing this consent affect the contractual or commercial relationship you maintain with us.

If you have authorized us to send advertising about our services and products, your personal data may be used to manage the sending of promotional offers and newsletters via electronic means. In such cases, Articles 20 and 21 of Law 34/2002 of July 11, on Information Society Services and Electronic Commerce, apply regarding the use and processing of your personal data to manage the sending of advertising by electronic means.

If you have opted to receive advertising or subscribed to our newsletter or information bulletin, you may cancel this option at any time.

To whom will your data be communicated?

Recipients: Generally, your personal data will not be communicated to any third party outside the entity, except for legal obligations. However, we inform you that third-party providers may have access to your personal data as data processors, within the framework of providing a service for the data controller. You may request the complete list of recipients who may receive your personal data as data processors or as third-party recipients via transfer at the email: fplass@nurahotels.com. In addition, the entity may transfer or communicate personal data to comply with obligations to Public Administrations when required, according to current legislation.

- International data transfers:

To carry out the data processing activities detailed above, we may transfer data to countries outside the European Economic Area (EEA) and store such data in physical or digital databases managed by entities acting on our behalf. Database management and data processing are limited to the purposes of processing and are carried out according to applicable data protection laws and regulations. If data is sent outside the EEA, the company will use appropriate contractual measures to ensure data protection, which may include, among others, contracts based on the standard data protection clauses adopted by the European Commission applicable to the transfer of personal data outside the EEA.

What rights do you have regarding the processing of your personal data?

Rights: You have the right to access your personal data, request the rectification of inaccurate data, or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to your particular situation, you may object to the processing of your data, in which case your personal information will no longer be processed for the purposes to which you have objected. When technically possible, you may request the portability of your data to another data controller. To exercise these rights, in accordance with current legislation, you may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at fplass@nurahotels.com. You also have the right to lodge a complaint with the

Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

You expressly consent to the inclusion of personal data collected during browsing the website and/or provided through any form, as well as data derived from any commercial relationship, in the entity's automated personal data files.

The entity guarantees the confidentiality of users' personal data. However, the entity will disclose personal data and any other information in its possession or accessible through its systems to the competent public authorities if required, in accordance with the applicable legal and regulatory provisions. Personal data may be retained in files owned by CLOT HOTELS SL even after the commercial relationships formalized through the entity’s website have ended, exclusively for the purposes indicated above and, in any case, for the legally established periods, at the disposal of administrative or judicial authorities.

Use of social networks.

When you interact with our website through various social networks, such as connecting with us, following us, or sharing our content on social media (Facebook, Twitter, LinkedIn, Instagram, or others), we may receive information from those social networks, including information about your profile, user ID associated with your social media account, and any other public information you allow to be shared with third parties on the social network.

The entity uses social networks to provide information about the services it offers, as well as any other activity or event it wants to promote. However, at no time will it obtain personal data from users interacting on these platforms unless express authorization is given.

This data is only used within the social network itself and is not incorporated into any processing system.

Social networks have their own terms of use and privacy policies, which you are obliged to take into account and comply with if you use them.

Below we provide information on the processing of your personal data carried out by CLOT HOTELS SL.

SECTION INFORMATION ART. 13 AND 14 GDPR – PROCESSING OF CLIENT/RESERVATION PERSONAL DATA

In accordance with the provisions of the EU General Data Protection Regulation GDPR 679/2016 and Spanish Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, the following information regarding the processing of your personal data is provided:

DATA CONTROLLER: CLOT HOTELS SL, VAT/CIF: B16629958, Address: CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, Phone: (+34) 971262112, Email: FPLASS@NURAHOTELS.COM. Data Protection Officer: Contact: PROTOCOLOS DE SEGURIDAD INFORMÁTICA PROTECMIR S.L. / http://www.protecmir.com / Email: protecmirlegal@protecmir.com.

PURPOSE: At CLOT HOTELS SL we process your personal data to provide you with hotel accommodation services at our establishment, manage the sending of information and commercial prospecting, and carry out billing for the contracted services. To offer you services according to your interests, we will create a commercial profile based on the information provided. No automated decisions will be made based on this profile. The personal data provided will be retained as long as the commercial relationship exists and no deletion request is made, for a period of 5 years from the last contracted service and/or reservation. In any case, your personal data will be retained while they are useful for the indicated purpose, and in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on the execution of a contract in which the data subject is a party or for the application, at their request, of pre-contractual measures. Additionally, we must process your data to comply with a legal obligation applicable to the data controller. In any case, you have given your consent to process your personal data for one or more specific purposes, in accordance with the EU General Data Protection Regulation GDPR 679/2016 (Art. 6.1.A, B, and C) and Spanish Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDPGDD). Law 1/1992, as amended by Organic Law 4/2015 of March 30 on the Protection of Citizen Security, also applies. Additionally, Law 34/2002 on Information Society Services, Articles 20 and 21, applies to the sending of commercial offers via telecommunications. The prospective offer of services is based on the consent requested from you, without this consent withdrawal affecting the acquisition and/or service provision contract. Providing personal data is mandatory; otherwise, hotel accommodation services and/or the requested offer cannot be provided. The prospective offer of products and services is based on the requested consent, without this withdrawal affecting the acquisition of products and/or service provision contract.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except for legal obligations. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the Data Controller. In addition, your data may be transferred to the State Security Forces and Corps. Your data may also be transferred to the competent public administration to comply with applicable legal obligations. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to your particular situation, you may object to the processing of your data, in which case your personal information will no longer be processed for the purposes to which you have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

SECTION INFORMATION ART. 13 AND 14 GDPR – PROCESSING OF PERSONAL DATA FOR QUOTES

PURPOSE: At CLOT HOTELS SL, we process the information you provide to prepare a quote for the services we offer, to send you advertising related to our products and services by any means (postal, email, or telephone), and to invite you to company-organized events. To offer products and services according to your interests, we create a commercial profile based on the information provided. No automated decisions will be made based on this profile. The data provided will be retained until the data subject requests cessation of processing. In any case, your personal data will be retained while useful for the indicated purpose, and in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on the execution of a contract in which the data subject is a party or for the application, at their request, of pre-contractual measures. In any case, you have given your consent to process your personal data for one or more specific purposes, in accordance with GDPR EU 679/2016 (ART. 6.1. A. B) and Spanish Organic Law 3/2018 of December 5 (LOPDPGDD). Providing personal data is mandatory; otherwise, the requested quote cannot be provided. Law 34/2002 on Information Society Services, Articles 20 and 21, applies to sending commercial offers via telecommunications. Consent is required to provide prospective offers and send commercial information.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except for legal obligations. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the Data Controller. In addition, the Entity may transfer or communicate personal data to comply with obligations to Public Administrations when required under current legislation. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to their particular situation, data subjects may object to the processing of their data, in which case their personal information will no longer be processed for the purposes to which they have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You also have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

SECTION INFORMATION ART. 13 AND 14 GDPR – PROCESSING OF TRAVELER PERSONAL DATA

PURPOSE: At CLOT HOTELS SL, we process the information you provide to deliver the requested hotel accommodation service and comply with the documentation and information registration obligations established by Royal Decree 933/2021, of October 26, for companies that provide lodging and hotel accommodation services. No automated decisions will be made based on this profile. The data you provide and which is processed in a computerized register must be retained for a period of three years from the end of the contracted service. In any case, your personal data will be retained while useful for the indicated purpose, and in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on the execution of a contract in which the data subject is a party or for the application, at their request, of pre-contractual measures. Additionally, we must process your data to comply with a legal obligation applicable to the data controller in accordance with the EU General Data Protection Regulation GDPR 679/2016 (Art. 6.1. B and C) and Spanish Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDPGDD). Law 1/1992, as amended by Organic Law 4/2015 of March 30 on the Protection of Citizen Security, also applies. Royal Decree 933/2021 of October 26, which establishes documentation and information registration obligations for individuals or legal entities providing lodging and motor vehicle rental services, also applies. Organic Law 7/2021, of May 26, on the protection of personal data processed for the prevention, detection, investigation, and prosecution of criminal offenses and the execution of criminal sanctions, also applies. Providing personal data is mandatory; otherwise, the hotel accommodation service cannot be provided.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except for legal obligations. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the Data Controller. You may request information regarding the Data Processors by email at fplass@nurahotels.com. Your personal data will be communicated to the State Secretariat of Security and may only be processed by the Security Forces and/or competent authorities. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to their particular situation, data subjects may object to the processing of their data, in which case their personal information will no longer be processed for the purposes to which they have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You also have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

SECTION INFORMATION ART. 13 AND 14 GDPR – PROCESSING OF WEBSITE USER PERSONAL DATA

PURPOSE: At CLOT HOTELS SL, we process the information you provide to deliver the services and/or sell the products you have requested through our website. Additionally, we manage the sending of information and commercial prospecting. To offer services according to your interests, we create a commercial profile based on the information provided. No automated decisions will be made based on this profile. The personal data provided will be retained while the commercial relationship is maintained and deletion is not requested, for a period of 5 years from the last purchase or service contracted by you. In any case, your personal data will be retained while useful for the indicated purpose, and in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on the execution of a contract in which the data subject is a party or for the application, at their request, of pre-contractual measures. In any case, you have given your consent to process your personal data for one or more specific purposes, in accordance with GDPR EU 679/2016 (ART. 6.1. A. B) and Spanish Organic Law 3/2018 of December 5 (LOPDPGDD). Law 34/2002 on Information Society Services, Articles 20 and 21, applies to sending commercial offers via telecommunications. Prospective offers of products and services are based on the consent requested, without this consent affecting the contract for the acquisition of a product and/or service. Providing personal data is mandatory; otherwise, the service/product cannot be provided, and commercial information cannot be sent.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except for legal obligations. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the Data Controller. In addition, the Entity may transfer or communicate personal data to comply with obligations to Public Administrations when required under current legislation. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to their particular situation, data subjects may object to the processing of their data, in which case their personal information will no longer be processed for the purposes to which they have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You also have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

SECTION INFORMATION ART. 13 AND 14 GDPR – PROCESSING OF ACCOUNTING / INVOICING PERSONAL DATA

DATA CONTROLLER: CLOT HOTELS SL, VAT/CIF: B16629958, Address: CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, Phone: (+34) 971262112, Email: FPLASS@NURAHOTELS.COM. Data Protection Officer: Contact: PROTOCOLOS DE SEGURIDAD INFORMÁTICA PROTECMIR S.L. http://www.protecmir.com / Email: protecmirlegal@protecmir.com.

PURPOSE: At CLOT HOTELS SL, we process the information you provide in order to prepare and issue invoices for the products and/or services contracted and to comply with accounting and tax obligations. The personal data provided will be retained while the commercial relationship is maintained and deletion is not requested, for a period of 5 years from the last contract and/or purchase. In any case, your personal data will be retained while useful for the indicated purpose, and, in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except for legal obligations. However, we inform you that third-party providers may have access to your personal data as data processors within the framework of providing a service for the Data Controller. In addition, the Entity may transfer or communicate personal data to comply with obligations to Public Administrations when required under current legislation. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to their particular situation, data subjects may object to the processing of their data, in which case their personal information will no longer be processed for the purposes to which they have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You also have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

SECTION INFORMATION ART. 13 AND 14 GDPR – PROCESSING OF CURRICULUM VITAE PERSONAL DATA

PURPOSE: At CLOT HOTELS SL, we process the information you provide in order to carry out personnel selection and allow the applicant to participate in the company’s recruitment processes. The personal data provided will be retained while the relationship with the Entity is maintained and deletion is not requested, for a period of 2 years from obtaining your consent. In any case, your personal data will be retained while useful for the indicated purpose, and, in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on your consent for one or more specific purposes, in accordance with GDPR EU 679/2016 (Art. 6.1. A) and Spanish Organic Law 3/2018 of December 5 (LOPDPGDD). Providing personal data is mandatory; otherwise, you cannot participate in the Entity’s recruitment process.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except for legal obligations. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to their particular situation, data subjects may object to the processing of their data, in which case their personal information will no longer be processed for the purposes to which they have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You also have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

SECTION INFORMATION ART. 13 AND 14 GDPR – PROCESSING OF NEWSLETTER / MAILING PERSONAL DATA

DATA CONTROLLER: CLOT HOTELS SL, VAT/CIF: B16629958, Address: CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, Phone: (+34) 971262112, Email: FPLASS@NURAHOTELS.COM. Data Protection Officer: Contact: PROTOCOLOS DE SEGURIDAD INFORMÁTICA PROTECMIR S.L. http://www.protecmir.com / Email: protecmirlegal@protecmir.com.

PURPOSE: At CLOT HOTELS SL, we process the information you provide in order to send you personalized offers regarding the company's products and/or services and to manage the sending of information and commercial prospecting. Additionally, we process the information of clients who have contracted our products and services to send them personalized offers. In order to offer our products and services according to your interests, we will create a commercial profile based on the information provided. No automated decisions will be made based on this profile. The personal data provided will be retained while your express consent is maintained and deletion is not requested. In any case, your personal data will be retained while useful for the indicated purpose, and in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on the execution of a contract in which the data subject is a party or for the application, at their request, of pre-contractual measures. In any case, you have given your consent to process your personal data for one or more specific purposes, in accordance with GDPR EU 679/2016 (Art. 6.1. A, B) and Spanish Organic Law 3/2018 of December 5 (LOPDPGDD). The Spanish Information Society Services Law 34/2002, Articles 20 and 21, also applies. Prospective offers of products and services are based on the consent requested without, in any case, conditioning the acquisition of a product or provision of a service. It is mandatory to provide personal data and consent to manage the sending of advertising information and commercial prospecting.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except as required by law. However, third-party providers may have access to your personal data as data processors in the framework of providing a service for the Data Controller. Additionally, the Entity may transfer or communicate personal data to comply with obligations to Public Administrations when required under current legislation. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to their particular situation, data subjects may object to the processing of their data, in which case their personal information will no longer be processed for the purposes to which they have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You also have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves. You may unsubscribe from the Newsletter or bulletins by selecting the unsubscribe option or by sending a request to the email FPLASS@NURAHOTELS.COM in accordance with Article 21 of Law 34/2002 of July 11 on Information Society Services and Electronic Commerce.

SECTION INFORMATION ART. 13 AND 14 GDPR – SATISFACTION SURVEY PERSONAL DATA PROCESSING

PURPOSE: At CLOT HOTELS SL, we process the information you provide in order to determine your level of satisfaction regarding your stay at our establishment. In order to offer products and services according to your interests, we will create a commercial profile based on the information provided. No automated decisions will be made based on this profile. The personal data provided will be retained while the commercial relationship is maintained and deletion is not requested, for a period of 5 years from the last contract and/or reservation. In any case, your personal data will be retained while useful for the indicated purpose, and in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on your consent for one or more specific purposes, in accordance with GDPR EU 679/2016 (Art. 6.1. A) and Spanish Organic Law 3/2018 of December 5 (LOPDPGDD). Spanish Information Society Services Law 34/2002, Articles 20 and 21, also applies for sending commercial offers via telecommunications. Prospective service offers are based on the consent requested without, in any case, conditioning the acquisition or provision of a service. Providing personal data is mandatory; otherwise, the satisfaction survey cannot be conducted. Consent is also required to provide prospective offers and commercial information.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except as required by law. Third-party providers may have access to your personal data as data processors in the framework of providing a service for the Data Controller. Additionally, the Entity may transfer or communicate personal data to comply with obligations to Public Administrations when required under current legislation. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to their particular situation, data subjects may object to the processing of their data, in which case their personal information will no longer be processed for the purposes to which they have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You also have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

SECTION INFORMATION ART. 13 AND 14 GDPR – VIDEO SURVEILLANCE PERSONAL DATA PROCESSING

PURPOSE: At CLOT HOTELS SL, we process information captured via video surveillance cameras to preserve the safety of people and property, as well as the security of facilities or establishments, and to monitor access to company facilities. Personal data will be retained for a maximum period of 1 month from recording. In any case, your personal data will be retained while useful for the indicated purpose, and in any case, for the legally established periods and the time necessary to address possible liabilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on the need to satisfy legitimate interests pursued by the Data Controller or a third party in accordance with Regulation (EU) 679/2016 (Art. 6.1. F) and the LOPDPGDD. Articles 22 and 89 of the LOPDPGDD also apply, as well as Article 20.3 of the Workers’ Statute.

RECIPIENTS: Data will not be communicated to any third party outside the Entity, except as required by law. Third-party providers may have access to your personal data as data processors in the framework of providing a service for the Data Controller. Images may be processed by the data processor in accordance with Article 28 of the GDPR. Additionally, the Entity may transfer or communicate personal data to comply with obligations to Public Administrations when required under current legislation. No transfer of data to third countries is planned.

RIGHTS: Data subjects have the right to access their personal data, request the rectification of inaccurate data, or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing, in which case we will only retain the data for exercising or defending claims. Additionally, for reasons related to their particular situation, data subjects may object to the processing of their data, in which case their personal information will no longer be processed for the purposes to which they have objected. Where technically possible, the data subject may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, data subjects may contact CLOT HOTELS SL by postal mail, attaching a copy of an identity document (DNI), at CALLE DALMAU DE ROCABERTÍ, No. 10, ZIP: 07013, PALMA DE MALLORCA, or by email at FPLASS@NURAHOTELS.COM. You also have the right to lodge a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Source of Personal Data: the data subject themselves.

DATA SECURITY

We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized or unlawful processing, as well as accidental loss, destruction, or damage, ensuring the integrity and confidentiality of your data. The technical and organizational measures implemented allow us to: guarantee the ongoing confidentiality, integrity, availability, and resilience of processing systems and services; restore the availability and access to personal data quickly in the event of a physical or technical incident; and regularly verify, assess, and evaluate the effectiveness of the technical and organizational measures implemented to ensure processing security.

These technical and organizational security measures have been designed taking into account our IT infrastructure, the state of the art according to current standards and practices, the cost of implementation, and the nature, scope, context, and purposes of processing, as well as the risks of varying likelihood and severity that processing poses to your personal data.

Privacy Policy

Subscribe to our newsletter and receive the latest offers, news, and exclusive experiences.

VENTAJAS POR RESERVAR EN NUESTRA WEB

Y SI QUIERES MÁS VENTAJAS, ÚNETE A NUESTRO CLUB

ADVANTAGES OF BOOKING ON OUR WEBSITE

AND IF YOU WANT MORE ADVANTAGES, JOIN OUR CLUB