ALOHAMUNDI informs users, through this Privacy Policy, about the processing and protection of personal data that may be collected through their browsing or contracting of services on this website or through other channels with the Entity. The use of this website by the user implies acceptance of this Privacy Policy.

ALOHAMUNDI adopts the necessary measures to guarantee the security, integrity and confidentiality of the data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data, and, for matters not provided for therein, Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce.

Purpose:

The data is collected for the following purposes:

1. To ensure the proper management of the requested accommodation services and the information relating to them:
   • Management of the sale of products and services offered on this website by ALOHAMUNDI.
   • To provide you with information related to ALOHAMUNDI, its range of products and services, as well as to answer queries regarding the purchasing process.

   Where the data is used for the purposes described above, the data processed will include identification data, postal or email addresses, and banking and credit card details for payment and collection management. The user may object to receiving commercial or advertising communications at any time by sending an email to the address indicated above.

   JOINT CONTROLLERSHIP IN DATA PROCESSING:
   With regard to the processing of personal data necessary for the stay at the booked accommodation, the owner of the accommodation shall be the controller responsible for processing your data and must inform you of the purposes, rights, legal basis and other matters set out in Article 13 of the GDPR. In any event, you may exercise your rights regarding your data before either controller. At the following link, you may download all the information regarding the joint controllership agreement between ALOHAMUNDI and the owners of the booked accommodations (link to document “6.7. Information on the agreement with joint controllers”).

2. Guest registration:
   • To comply with Article 25 of Organic Law 4/2015 of 30 March on the Protection of Public Safety, and Royal Decree 933/2021 of 26 October, which establishes documentary registration and information obligations for natural or legal persons carrying out accommodation and motor vehicle rental activities.
3. Website:
   • Processing of data obtained through Cookies (see the Cookie Policy).
   • Monitoring the use of the Website in order to prevent and detect fraudulent activity on it, as well as any unauthorised access.
4. Handling individuals’ rights:
   • To respond to requests from data subjects exercising the rights established by the General Data Protection Regulation.

Under no circumstances is the purpose of the processing to create profiles, nor do we make automated decisions.

We inform you that you may withdraw your consent in each commercial or advertising communication sent to you, and at any time, by notifying the Company at the address indicated above or by email at info@alohamundi.com.

Legal Basis and Retention Period:

The processing of the personal data provided by the user is carried out on the basis of the following legal grounds that legitimise such processing:

– The contracting of services requested from ALOHAMUNDI, whose terms and conditions will be made available to the user prior to any potential contract. In order to carry out this requested commercial relationship, the data subject is required to provide their data.

– Free, specific, informed and unambiguous consent, which is voluntary, in the event that the Entity sends marketing material by email, SMS or any other electronic means (promotions, news, etc.), as well as when including your data in any section of this Website, since after reading this Privacy Policy the user is informed and, if they agree, may accept it through a statement or a clear affirmative action, such as ticking a box provided for this purpose.

If the data subject does not provide the data, or if the data provided is incorrect or inaccurate, we will be unable to process their request and it will be impossible to provide the requested information.

As previously stated, you have the right to withdraw your consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal.

– The legal obligations that the Entity must comply with, for which the processing of your data is necessary, for example, issuing invoices or filing taxes with the public administration, or responding to the rights you exercise. Likewise, regarding the completion of the Guest Registration Book, we comply with Article 25 of Organic Law 4/2015 of 30 March on the Protection of Public Safety, and Royal Decree 933/2021 of 26 October.

– The legitimate interest that allows us to process contact data and, where applicable, data relating to the role or position held by natural persons providing services to a legal entity, where the processing refers solely to the data necessary for their professional contact and the purpose of the processing is solely to maintain relationships of any kind with the legal entity in which the data subject provides their services. ALOHAMUNDI also has a legitimate interest in ensuring the safety of people and our facilities, and therefore we may collect your image through video surveillance cameras.

– Data retention: The data will be retained for the duration of the contractual relationship and subsequently for the legally required periods. Where you have given us your consent to send you information about our activities, the data will be retained for this purpose for as long as such consent remains in force.

If the purpose of the processing consists of the sale of a service or access through a web platform, we inform you that, if this process is cancelled, suspended or interrupted, your data will remain registered in our database for the purposes of claims and, if you wish, you may also recover it through our support telephone numbers.

With regard to data collected pursuant to a legal obligation, such data will be retained for the legally required periods. Specifically, the data contained in the Guest Registration Book will be retained for 3 years from the date on which the contracted service or provision ends.

Recipients:

As a general rule, ALOHAMUNDI will not disclose this personal data to third parties, except where the provision of a service requires a contractual relationship with a data processor and this is strictly necessary to manage and maintain the relationship between the user and the aforementioned company, subject to the user’s prior express authorisation. This will only take place for the period strictly necessary to enable the performance of the data processing agreement, under the same conditions and with the same responsibilities required of the controller. Once the processing assignment has ended, the processor will return the personal data to the controller and delete any copies in its possession.

Furthermore, only third parties to whom ALOHAMUNDI has a legal or contractual obligation to provide such data will have the right to access this personal data, including, for example, Judges and Courts involved in proceedings relating to claims submitted. In the case of data collected for the Guest Registration Book, such data will be communicated to the State Secretariat for Security and to the Security Forces and Corps in the exercise of their respective powers in the prevention, detection and investigation of crime assigned to them. Likewise, within the exercise of their respective powers, the judicial authority and the Public Prosecutor’s Office will have access to such data.

No international data transfers are envisaged.

Rights of Data Subjects:

The user may exercise at any time, under the terms established by current legislation, the rights of access, rectification or erasure of data, request the restriction of processing, object to processing, request the portability of their data, as well as withdraw the consent given, all of which are rights recognised under the aforementioned Regulation (EU). The user may exercise these rights by contacting the following email address: info@alohamundi.com. In order to effectively exercise these rights, the user must prove their identity by providing their full name, a photocopy of their National Identity Document (DNI) or equivalent identification document proving their identity, a request specifying the action sought, an address for notification purposes, and the date and signature of the applicant.

Likewise, the user may lodge a complaint with the Agencia Española de Protección de Datos (AEPD), particularly where they have not obtained satisfaction in the exercise of their rights, by submitting a written complaint to C/. Jorge Juan, nº 6; Postal Code: 28001 – Madrid, or through the website: https://www.agpd.es.