Privacy Policy

Personal Data Protection according to GDPR

ALORA GESTION HOTELERA, S.L., in application of the current regulations regarding personal data protection, informs that the personal data collected through the forms on the website: www.alorahoteles.com, are included in the specific automated files of users of the services of ALORA GESTION HOTELERA, S.L.

The collection and automated processing of personal data aims to maintain the business relationship and carry out tasks related to information, training, advice, and other activities of ALORA GESTION HOTELERA, S.L.

These data will only be shared with entities that are necessary solely to fulfill the purposes stated above.

ALORA GESTION HOTELERA, S.L. adopts the necessary measures to guarantee the security, integrity, and confidentiality of the data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing the previous LOPD, as well as the new Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (LOPDGDD).

The user may exercise at any time the rights of access, opposition, rectification, cancellation, restriction, and portability recognized in the aforementioned Regulation (EU). These rights can be exercised by the user via email at: ncardoso@alorahoteles.com or at the address: C/ Arte 21, 3º C, C.P. 28033 – Madrid, Spain.

The user declares that all data provided are true and correct and agrees to keep them updated by communicating any changes to ALORA GESTION HOTELERA, S.L.

Purpose of personal data processing:

For what purpose do we process your personal data?

At ALORA GESTION HOTELERA, S.L., we will process your personal data collected through the website: www.alorahoteles.com for the following purposes:

1. To comply with commercial, labor, corporate, and accounting obligations of the company.
2. Sending commercial information and newsletters about new services offered on the website and in the sector.
3. To execute a distance contract with the user.
4. To provide the services contracted by the user.
5. To send promotional information electronically.
6. To provide the information requested by the user through the forms.

You are reminded that you may object to receiving commercial communications by any means at any time by sending an email to the address indicated above.

The fields in these records are mandatory; it is impossible to fulfill the stated purposes without providing these data.

How long is the personal data retained?

The personal data provided will be retained as long as the business relationship is maintained or until you request its deletion, and for the period during which legal responsibilities may arise from the services provided.

Legal basis:

The processing of your data is based on the following legal grounds:

1. The request for information and/or the contracting of services from ALORA GESTION HOTELERA, S.L., whose terms and conditions will be made available to you in all cases prior to any potential contract.
2. Free, specific, informed, and unequivocal consent, as we provide this privacy policy which, after reading, you can accept through a declaration or a clear affirmative action, such as checking a box provided for this purpose.

If you do not provide your data or provide it incorrectly or incompletely, we will not be able to process your request, making it impossible to provide the requested information or carry out the contracting of services.

Recipients:

Data will not be shared with any third party unrelated to ALORA GESTION HOTELERA, S.L., except when legally required.

If a web user contracts services from ALORA GESTION HOTELERA, S.L. through the booking of one of the accommodations, their data will be shared with other companies in the group in accordance with Recital 48 of the GDPR.

Data collected by users of the services

When a user uploads files containing personal data to shared hosting servers, ALORA GESTION HOTELERA, S.L. is not responsible for the user’s non-compliance with the GDPR.

Intellectual property rights www.alorahoteles.com

ALORA GESTION HOTELERA, S.L. holds all copyright, intellectual property, industrial property, know-how, and other rights related to the content of the website www.alorahoteles.com and the services offered therein, as well as the software required for its implementation and related information.

Reproduction, publication, and/or use of the content, in whole or in part, of www.alorahoteles.com is not allowed without prior written consent.

Software intellectual property

The user must respect third-party programs provided by ALORA GESTION HOTELERA, S.L., even if they are free or publicly available.

ALORA GESTION HOTELERA, S.L. holds the necessary intellectual property and exploitation rights for the software.

The user does not acquire any rights or license to the software necessary for the service, nor to technical information for monitoring the service, except for the rights and licenses necessary to fulfill the contracted services and only during their duration.

Any action exceeding contract fulfillment requires written authorization from ALORA GESTION HOTELERA, S.L., and the user is prohibited from accessing, modifying, or viewing the configuration, structure, and files of servers owned by ALORA GESTION HOTELERA, S.L., assuming civil and criminal liability for any incident resulting directly from negligent or malicious actions.

Intellectual property of hosted content

The use of services provided by ALORA GESTION HOTELERA, S.L. in violation of intellectual property laws is prohibited, particularly:

1. Use that contravenes Spanish law or infringes third-party rights.
2. Publication or transmission of content that, in ALORA GESTION HOTELERA, S.L.’s opinion, is violent, obscene, abusive, illegal, racist, xenophobic, or defamatory.
3. Cracks, program serial numbers, or any other content that infringes third-party intellectual property rights.
4. Collection and/or use of personal data of other users without their express consent or contrary to Regulation (EU) 2016/679.
5. Use of the domain email server and addresses for sending unsolicited mass emails.

The user is fully responsible for the content of their website, transmitted and stored information, hyperlinks, third-party claims, and legal actions related to intellectual property, third-party rights, and protection of minors.

The user is responsible for complying with applicable laws and regulations concerning online services, e-commerce, copyright, public order, and universal principles of Internet use.

The user shall indemnify ALORA GESTION HOTELERA, S.L. for any expenses arising from claims against ALORA GESTION HOTELERA, S.L. attributable to the user, including legal fees and defense costs, even in the case of non-final judicial decisions.

Protection of hosted information

ALORA GESTION HOTELERA, S.L. performs backups of the content hosted on its servers; however, it is not responsible for accidental data loss or deletion by users. Total restoration of deleted data is not guaranteed, as the data may have been modified or removed since the last backup.

Except for specific backup services, restoration of content stored in ALORA GESTION HOTELERA, S.L.’s backups due to user-caused loss is not included; in such cases, a fee will be determined based on the complexity and volume of recovery, subject to user acceptance.

Restoration of deleted data is only included in the service price when loss is attributable to ALORA GESTION HOTELERA, S.L.

Commercial communications

In accordance with LSSI, ALORA GESTION HOTELERA, S.L. will not send advertising or promotional communications by email or equivalent electronic means without prior request or express authorization from recipients.

For users with a prior contractual relationship, ALORA GESTION HOTELERA, S.L. is authorized to send commercial communications regarding products or services similar to those initially contracted by the client.

In all cases, the user may request, after verifying identity, not to receive further commercial information through Customer Service channels.