1. Initial Information
This Privacy Policy has been designed in accordance with Llei 29/2021, of 28 d'octubre, Qualificada de Protecció de Dades Personals (LQPD) of the Principality of Andorra and, where applicable, Regulation (EU) 2016/679 (GDPR).
By providing us with your data, the user declares that they have read this Policy and give their unequivocal and express consent for the processing of their personal data in accordance with the purposes and terms indicated herein.
The owner may modify this Policy to adapt it to new legislation, case law, or criteria of the Andorran Data Protection Agency (APDA). This Policy is complemented by the Legal Notice, the Cookie Policy, and, where applicable, the Booking Conditions.
2. Details of the Data Controller and contact information for the DPO
Responsible: Grup SM Hotels, S.L.
NRT: L-721486-Z
Address: Ctra. de l'Escladella, 13 — Arinsal, La Massana (Andorra).
General email: info@hotelxaletbesoli.com.
Site domain: www.hotelxaletbesoli.com
Registration details: 26394
Data Protection Officer contact (if applicable): [DPO email address]
The Data Controller is committed to protecting user privacy and employing technology that provides a secure experience on the website.
3. Processing of personal data
We process the data you provide (for example, when requesting information, making a reservation, subscribing to the newsletter, or contacting us by email) to manage requests, reservations, and communications related to the hotel's services, as well as to comply with legal obligations. The specific data categories, purposes, legal bases, and retention periods are detailed in the Data Controller's Record of Processing Activities.
3.1 Data Transfers
No data transfers to third parties are foreseen, except those legally authorized (tax, commercial, telecommunications) or required by judicial/administrative authority, and the data processors necessary for the provision of services (for example, booking engine, payment gateway), in accordance with commission contracts and adequate guarantees.
3.2 International Transfers
No international transfers are made to countries or organizations that do not meet the guarantees required by data protection regulations. If such transfers are necessary (e.g., for services provided by suppliers located outside Andorra/EU), standard contractual clauses or other appropriate safeguards will be adopted, and the user will be informed.
4. Cookies
This website uses its own and third-party cookies to: (i) ensure the website functions correctly; (ii) remember preferences (such as language); and (iii) collect statistics to improve the user experience. Users can accept, configure, or reject non-technical cookies. For more information, please see the Cookie Policy.
5. Consent for electronic communications
In accordance with Law 20/2014 on electronic contracting, by checking the box “I accept the sending of electronic communications” the user authorizes the sending of information relating to Hotel Xalet Besolí (news, offers, surveys) to their email, telephone or other electronic means. The user may withdraw their consent at any time by following the procedure indicated in each communication or by writing to the contact email address.
6. Security measures
Appropriate technical and organizational measures have been adopted to ensure the security and confidentiality of personal data and to prevent its alteration, loss, unauthorized processing or access, taking into account the state of the art, the nature of the data and the risks, in line with art. 32 GDPR and LQPD 29/2021.
7. User Rights
The data subject may exercise the following rights, in the cases and to the extent provided for in the regulations: access, rectification, erasure, objection, restriction of processing, and data portability. They may also withdraw their consent at any time and object to automated decision-making (including profiling) where applicable.
8. How can I exercise my rights?
You may exercise your rights by submitting a written request to the Data Controller, attaching a document proving identity or representation, indicating: (i) name and surname; (ii) specific request; (iii) email or address for notification purposes; (iv) date and signature; and (v) supporting documentation, if applicable.
Postal address: Ctra. de l'Escladella, 13 — Arinsal, La Massana (Andorra).
Email: info@hotelxaletbesoli.com.
Optionally, you can contact the Andorran Data Protection Agency (APDA) for further information or to file a complaint.
9. Data update
The user guarantees that the information provided is accurate, complete and current, and undertakes to communicate any changes to keep it updated.
10. Withdrawal of consent
Consent given for a specific purpose may be withdrawn at any time, without retroactive effect on the lawfulness of the processing carried out before the withdrawal. After withdrawal, the data will no longer be processed for that purpose, except for compelling legitimate grounds or for the establishment, exercise, or defense of legal claims.
11. Changes to the Privacy Policy
This Policy may be updated to reflect regulatory or treatment changes. Any significant changes will be communicated through the website or by appropriate means so that the user can be aware of them and, where appropriate, give their explicit consent.
12. Confidentiality
The Data Controller guarantees the confidentiality and security of the personal data processed, applying policies and measures consistent with privacy regulations to prevent its alteration, loss, unauthorized processing or access.
