COMMERCIAL BRAND CORAL - HOTELS

This privacy policy applies to the companies operating the hotels and apartments that make up the Coral Hotels trademark: Breogan, S.L., Explotaciones Turística Compostela, S.A., Canary Island Paradise, S.L., Inversiones y Explotaciones Compostela, S.L., as well as the company providing services Breogan Management, S.L.

RESPONSIBLE FOR THE TREATMENT
When a user of the website makes a reservation or other management in this website, as well as in each of the hotel establishments where personal information is required, such information will be treated according to the establishment where the reservation was made and / or treatment:

Breogan, S.L. - B38057006

• Coral Compostela Beach Golf II
• Coral Cotillo Beach
• Coral Los Alisios
• Coral Los Silos
• Coral Suites & Spa
• Coral Teide Mar
• Coral La Quinta
• Contact Forms
• Coral Happiness Club Form
• Newsletter form
• Company registration form
• Agency registration form
• Autocheckin
Explotaciones Turística Compostela, S.A. - A38063251
• Coral Compostela Beach
• Contact forms
• Coral Happiness Club Form
• Newsletter form
• Company registration form
• Agency registration form
• Autocheckin
Canary Island Paradise, S.L. - B38301339
• Coral Dream
• Coral Ocean View
• Contact Forms
• Coral Happiness Club Form
• Newsletter form
• Company registration form
• Agency registration form
• Autocheckin
Inversiones y Explotaciones Compostela, S.L. - B38051637
• Coral California
• Contact forms
• Coral Happiness Club Form
• Newsletter form
• Company registration form
• Agency registration form
• Autocheckin
Canary Island Paradise, S.L. - B38301339
• Coral Dream
• Coral Ocean View
• Contact Forms
• Coral Happiness Club Form
• Newsletter form
• Company registration form
• Agency registration form
• Autocheckin
Inversiones y Explotaciones Compostela, S.L. - B38051637
• Coral California
• Contact forms
• Coral Happiness Club Form
• Newsletter form
• Company registration form
• Agency registration form
• Autocheckin
•
Breogan Management, S.L. - B38393484
• Resume submission form

INFORMATION ABOUT DATA PROCESSING


Below, each of the treatments collected on this website is detailed, as well as additional information where the data controllers carry out a treatment in their hotel establishments:



A. TREATMENTS COLLECTED ON THIS WEBSITE


RESERVATIONS
• Purpose: Management of accommodation bookings made by direct customers and intermediaries.
• Legitimation: RGPD art. 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or for the implementation at the request of the data subject of pre-contractual measures (accommodation contract).
• Communication of data: State Security Forces and Corps; web booking manager; companies of the commercial brand Coral Hotels; software and hardware IT companies of the responsible party; company providing services.
• Deletion: The provisions of ORDER INT/1922/2003, of July 3, 2003, on log books and entry forms for travelers in hotel establishments and other similar establishments, shall apply in the event that the reservation becomes a check-in record.

ONLINE PRE CHECK-IN
• Purpose: Management of AUTOCHEKIN by clicking on the link provided in the PRE CHECK-IN ONLINE tab: https://autocheckin.hotelinking.com/.
• Legitimation:
o RGPD art. 6.1.b) Processing necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures (Autochekin).
o RGPD art. 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. ORDER INT/1922/2003, of July 3, 2003, on registration books and entry forms for travelers in hotel and catering establishments and other similar establishments.
• Communication of data: State Security Forces and Corps; companies of the commercial brand Coral Hotels; software and hardware computer companies of the data controller; company providing services.
• Deletion: The provisions of ORDER INT/1922/2003, of July 3, 2003, on registration books and entry forms for travelers in hotel establishments and other similar establishments shall apply. The image (photo) will not be used for any purpose and will be destroyed within 48 hours.

CLUB CORAL HAPPINESS
• Purpose: Management of applications to belong to the Club Coral Happiness and apply their benefits.
• Legitimation: RGPD:
o 6.1.a) Express consent of the interested party.
o RGPD art. 6.1.b) Processing necessary for the performance of a contract to which the data subject is a party (contract as a member of CLUB CORAL HAPPINES).
• Communication of data: Companies of the commercial brand Coral Hotels; company providing services.
• Deletion: During the contractual relationship and, once finalized, during the legally established period for possible claims.

COMMERCIAL COMMUNICATIONS
• Purpose: To send commercial communications and newsletters, as well as notices of hotels and apartments, promotions and congratulations.
• Legitimation: RGPD: 6.1.a) Express consent of the interested party.
• Communication of data: Companies of the commercial brand Coral Hotels; company providing services; online booking manager and mass mailing of communications.
• Deletion: Until the interested party requests to be removed from the database.

AGENCIES
• Purpose: Management of requests to register as an Agency.
• Legitimation: RGPD:
• 6.1.a) Express consent of the interested party to process the application for registration.
• RGPD art. 6.1.b) Processing necessary for the performance of a contract to which the data subject is a party (Agency registration contract).
• Communication of data: Companies of the commercial brand Coral Hotels; company providing services.
• Deletion: During the contractual relationship and, once it has ended, during the legally established period for possible claims.

COMPANIES
• Purpose: Management of applications to register as a Company.
• Legitimation: RGPD:
• 6.1.a) Express consent of the interested party to process the registration request.
• RGPD art. 6.1.b) Processing necessary for the performance of a contract to which the data subject is a party (contract for registration as a Company).
• Communication of data: Companies of the commercial brand Coral Hotels; company providing services.
• Deletion: During the contractual relationship and, once finalized, during the legally established period for possible claims.

WIFI ACCESS
• Purpose: Management of access to the Wifi network provided by the hotels and apartments to their guests.
• Legitimation: RGPD: 6.1.a) Express consent of the interested party.
• Communication of data: State Security Forces and Corps; Wifi network provider; companies of the commercial brand Coral Hotels; company providing services.
• Deletion: They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data.

CURRICULUM
• Purpose: Management of job applications that candidates send to the members of the Coral Hotels Group commercial brand.
• Legitimation: RGPD: 6.1.a) Express consent of the interested party.
• Communication of data: Companies of the Coral Hotels trademark
• Deletion: 2 years from the collection of the curriculum vitae.

B. ADDITIONAL INFORMATION


GUESTS
• Purpose: Management of check-in and check-out of customers of the hotels and apartments.
• Legitimation:
• RGPD art. 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or for the implementation upon request of the data subject of pre-contractual measures (accommodation contract).
• RGPD art. 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller. ORDER INT/1922/2003, of July 3, 2003, on registration books and entry forms for travelers in hotel establishments and other similar establishments.
• Communication of data: State Security Forces and Corps; web booking manager; companies of the commercial brand Coral Hotels; software and hardware computer companies of the responsible party; company providing services.
• Deletion: The provisions of ORDER INT/1922/2003, of July 3, 2003, on registration books and entry reports of travelers in hotel establishments and other similar establishments shall apply.

VIDEO SURVEILLANCE
• Purpose: Surveillance of the company's hotels and apartments, as well as labor control of the company's personnel.
• Legitimation: RGPD art. 6.1.f) Processing necessary for the satisfaction of legitimate interests pursued by the data controller or by a third party.
• Communication of data: State Security Forces and Corps; security camera maintenance companies.
• Deletion: 30 days from the capture of the image.

SUPPLIERS
• Purpose: Administrative management of orders, purchases and payments to suppliers.
• Legitimation:
• RGPD: 6.1.b) Processing necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures.
• RGPD: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller Law 58/2003, of 17 December, General Taxation.
• Communication of data: Tax Administration, Banks, savings banks; account auditors, companies of the commercial brand Coral Hotels; software and hardware computer companies of the controller; company providing services; tax and accounting advisors.
• Deletion: They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise from that purpose and the processing of the data.
INVOICING
• Purpose: To carry out the billing management of the responsible party.
• Legitimation:
• GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures.
• RGPD: 6.1.c) Processing necessary for compliance with a legal obligation applicable to the data controller Law 58/2003, of December 17, General Taxation Law.
• Communication of data: Tax Administration, Banks, savings banks; account auditors, companies of the commercial brand Coral Hotels; software and hardware computer companies of the controller; company providing services; tax and accounting advisors.
• Deletion: They will be kept for the time necessary to comply with the purpose for which they were collected and to determine the possible responsibilities that may arise from said purpose and the processing of the data.

SOCIAL NETWORKS


We use social networks in order to publish information of interest to our users.
The personal data that you may provide to Coral Hotels through social networks will be treated in accordance with the provisions of this privacy policy.

RIGHTS OF THE INTERESTED PARTY AND DATA PROTECTION DELEGATE


In the event that you deem it appropriate, you may exercise your ARCO-POL Rights of access, rectification, deletion and portability of your data, and the limitation or opposition to its processing, at any time, by means of a written document accompanied by a document that identifies you, addressed to our Data Protection Delegate at Avda. Noelia Afonso, Nº10, Playa de Las Américas, 38660 Arona - S/C de Tenerife, or in the mail lopd@coral-hotels.es. In the case of not having obtained satisfaction in the exercise of your rights, you can file a complaint before the Control Authority, which in Spain is the Spanish Data Protection Agency, through the web www.agpd.es.

MODIFICATIONS TO THE PRIVACY POLICY


Coral Hotels may modify this Privacy Policy when necessary in accordance with current applicable regulations. All modifications will be published in order to keep users always informed.