The data controller of your personal data and owner of the website https://www.galleryhotel.com/en is Gallery Center S.L.U., a commercial company with its registered office at Avenida Diagonal 640, Planta 5ª E, 08017 – Barcelona and it is registered in the Commercial Registry of Málaga, Volume 5682, Folio 57, Sheet MA-142636 with Spanish Tax ID No. B-58120775.
Gallery Center, S.L.U. will act as the data controller of your personal data in its status as the owner company that manages the Hotel Gallery in Barcelona.
Similarly, MERIDIA CAPITAL PARTNERS SGEIC, S.A., the management company of GALLERY CENTER, S.L.U, with its registered address at Avenida Diagonal, 640, 5ª planta 08017 -BARCELONA, with Spanish Tax ID No. A-64214240 and registered in the Companies Registry of Barcelona on sheet B-329676.
Hereinafter, all of the aforementioned companies shall be referred to individually or collectively as GALLERY in this document.
GALLERY has taken the necessary technical and organisational measures to comply with data protection regulations in relation to the personal data it processes.
GALLERY’s contact details regarding data protection are:
+34 934 159 911
canaldenuncias@galleryhoteles.com
The data we collect, the way in which we obtain it, and the purpose of the processing is as follows:
2- Your personal data will only be used for the following purposes:
a. To register you in our database if you make a booking, in the event that you provide it personally or you make a booking online.
b. To carry out the necessary commercial and administrative management with our website users and our customers or potential customers.
c. GALLERY processes the information you provide to us in order to respond to any request for information you may send us, to provide you with information about our services, internally and externally manage your bookings or the provision of our services and any purchases from suppliers, as well as to comply with the legal obligations arising from such activities.
d. To communicate with you to respond to your inquiries and process your complaints or obtain your opinion regarding the quality of our Hotels, our services or the treatment received.
e. To record the images captured by our video surveillance cameras for security reasons. These images may be transferred to the Police or the judicial authority upon request.
f. To register the images captured at events in which you may participate and their use for advertising purposes or dissemination among our customers.
g. Similarly, the data that may be collected while you are browsing the website will be processed with the aim of providing access to the website’s online contents, as well as attending to the requests of website users, keeping a record of statistics of visits (IP addresses, browser data, country, web page accessed, etc.) in order to help us develop better services and products, optimise our offer and provide more effective customer service and improve the design and content of our websites.
h. Our customers and suppliers’ data will be processed, within the contractual relationship that binds us with them, in compliance with administrative, tax, accounting obligations and, where appropriate, in compliance with the citizen security law.
i. The data of our employees will be processed in order to manage our Hotels and establishments’ human resources. The candidates’ data will be processed for personnel selection.
In accordance with the Spanish Law on Information Society Services and Electronic Commerce (LSSICE in its Spanish acronym), we inform you that GALLERY does not carry out SPAM marketing, therefore, it does not send commercial correspondence by e-mail if it does not have the necessary legal basis. In any case, you will always be able to withdraw your consent to receive correspondence from us.
We will not process your personal data for any other purpose than those described in this Policy, unless there is a legal obligation or court order requesting us to do so.
Your personal data will not be the subject of decisions based on automated processing that may have effects on you.
We inform you that, if you have sent your Curriculum Vitae (CV) to Gallery Center S.L.U, as owner of the Hotel Molina Lario and Gallery Hotel, as well as the Matiz y Sintonía restaurants (hereinafter, referred to individually or together, as GALLERY), it will be the data controller of the personal data contained in your CV. We inform you that GALLERY has taken the appropriate measures to comply with the data protection regulations and, therefore, your CV will be processed with the appropriate confidentiality.
The legal basis for carrying out this processing is your express consent by providing us with your CV.
The purpose of the processing of the data contained in your CV is for the selection of personnel, we therefore inform you that:
Gallery Center S.L.U. is the company that manages the Human Resources of the two Hotels and their respective restaurants. For that reason, if you are included in a selection process, we may share your CV with the Hotel/Restaurant’s Management which could contract you.
If you do not match the profiles required by GALLERY, in compliance with the data protection regulations, your CV will be destroyed immediately, and we will not keep a copy of it.
If we think that your profile may match our needs, but there are currently no vacancies, we will retain it for a maximum of one year in case any vacancy arises within this period. After this period, if in the end no vacancy arises or if your profile does not match any of the processes we initiate, it will be destroyed. We will not keep any copies, although if it is in our interest we may decide to keep it on file and request an updated version from you.
If your profile matches a position that is currently vacant, we will contact you soon to initiate the selection process.
The legal basis that legitimises the processing of your personal data is your express consent granted to be able to carry out the purposes described above; this will be requested at the time you ask for information from us.
In the event of a commercial relationship being formed between you and GALLERY, whether as a customer, as a supplier or as an employee, the legal basis that will legitimise the processing of your personal data will be the execution of the contractual relationship that will have been generated, as well as, where appropriate, compliance with the corresponding legal obligations and information needs.
The legal basis that legitimises the processing of the images recorded by our video surveillance cameras is our legitimate interest in ensuring the security of our facilities.
The legal basis that legitimises the processing of your personal data when you subscribe to our newsletter is your express consent.
The legal basis that legitimises the processing of the images captured during our events and in which you participate will be our legitimate interest and your express consent to publish it.
The legal basis that legitimises the transfer of your personal data to the authorities or public bodies is compliance with the current regulations.
The legal basis that legitimises the processing of candidates’ CVs is their express consent.
The personal data you provide will be kept for the period of time necessary to manage the information you request, as well as to manage the bookings made by our customers or to fulfil any contract that is generated between GALLERY and third parties.
The images recorded by our video surveillance cameras will be kept for 30 days, unless at the request of the police or a judicial authority they must be retained for a longer period. In these cases, they will be stored ensuring the data is locked.
Once the data has fulfilled the needs for which it was collected, we will delete it permanently. However, we will keep your data for a longer period if it is necessary for compliance with legal obligations. Similarly, it may be necessary to keep it for the time necessary for the statute of limitations of the legal responsibilities that may arise.
The data you provide us to initiate a personnel selection process at GALLERY will be retained for a maximum period of one year. Subsequently, if the candidate is not employed by GALLERY and is not within a selection process, their data will be deleted, and we will not keep a copy.
The personal data of our employees will be kept for the duration of their employment relationship with GALLERY and, subsequently, during the legally established periods.
Within our organisation your personal data will be processed by duly authorised personnel, and, if necessary or practical to be able to fulfil the purposes indicated above, it may be processed by third parties.
The categories of recipients to whom your personal data may be disclosed are as follows:
a.MERIDIA CAPITAL PARTNERS SGEIC, S.A., as the management company of the owner of the Hotels, may process the personal data of each of these companies for the purposes of management, analysis and control.
b.Appointed third-party data processors, such as IT providers, consultants and advisers and other companies providing ancillary services. In certain cases, we may transfer your data to technology companies based in the USA, but GALLERY guarantees the security and legality of these transmissions because, in any case, these companies have adhered to the corresponding approval protocols with the European data protection regulations.
c.Public entities and bodies, exclusively for the purpose of complying with the corresponding legal obligations.
d.Other providers to whom, where appropriate, your personal data may be transferred to financial institutions and fraud detection service providers, among others.
e.Video surveillance management company.
In any case, all the aforementioned third parties will have signed the corresponding commitment to confidentiality in advance, following our instructions in accordance with the current regulations on the protection of personal data. They will be subject to the duty of professional secrecy and will act in compliance with a legal obligation.
The information that you provide to us both through this website and by any other means will be hosted on GALLERY’s servers.
If you wish to exercise the rights that the data protection regulations grant you, please send us an e-mail to the following address: canaldenuncias@galleryhoteles.com, stating the right you wish to exercise in the subject line and attaching a copy of your national identity card or passport.
The rights that the current legislation recognises and which, where appropriate, you can exercise are:
Right of access to the data:
You have the right to be notified by GALLERY whether your personal data is being processed and, if the processing is confirmed, it will enable access by providing you with the following information:
-The purposes of the processing.
-The categories of data being processed.
-The data conservation period and criteria.
Right of rectification of the data:
You will have the right to ensure that GALLERY rectifies your data when it is inaccurate or incomplete by means of an additional corrective statement.
Right of erasure of the data:
The data subject will have the right to ensure that GALLERY deletes their data, when:
-The processing is illicit.
-The data subject has withdrawn their consent.
-It is no longer necessary in relation to the purposes for which it was collected or processed.
-The data subject has exercised the right of objection and other legitimate reasons for the processing do not prevail.
-The data must be erased in order to comply with a legal obligation applicable to GALLERY.
The data subject will not have the right to ensure that GALLERY erases their data when the processing is necessary:
-To exercise the right to freedom of expression and information.
-To comply with a legal obligation applicable to GALLERY.
-To formulate, exercise or defend claims.
-Due to public interest based on the current legislation for reasons of public health or for historical, statistical or scientific research purposes.
Right to the portability of the data:
You have the right to ensure that GALLERY transmits your data to another data controller or to the data subject themselves, using a structured, commonly used and machine readable format, when the processing is carried out by automated means and is based on:
-The consent of the data subject for specific purposes.
-The execution of a contract or pre-contract with the data subject.
The right to data portability shall not apply when:
-It is technically impossible to transmit.
-It may adversely affect the rights and freedoms of others.
-The processing is for reasons of public interest, based on current legislation.
Right to restrict the processing:
The data subject will have the right to object to the processing of their data carried out by GALLERY for reasons related to their particular situation, when the said processing is based on:
-Direct marketing.
-Profiling.
-Legitimate interest of the data controller or third parties, provided that the interests or rights and freedoms of the data subject do not prevail, especially if they are a child.
-Historical, statistical or scientific research, unless the processing is necessary for reasons of public interest.
Even if the data subject objects to the processing of their data, GALLERY may continue to process it provided that their legitimate interest prevails over the interests or the rights and freedoms of the data subject in a judicial procedure that justifies it.
GALLERY must inform the data subject of the right to object to the processing of their data in a clear and explicit way, independent from any other information, at the time of the first communication with them.
Right of objection:
This is the right to not carry out the processing of this data or to stop doing so when your consent for the processing is no longer necessary, due to the concurrence of a legitimate and well-founded reason, referring to your specific personal situation, which justifies it, unless otherwise provided for by law.
Right to not to be subject to profiling:
The data subject shall have the right not to be subjected to profiling for the purpose of making individual decisions based on automated data processing and designed to evaluate, analyse or predict the following personal aspects:
-Professional performance.
-Economic situation.
-Health.
-Preferences or personal interests.
-Reliability.
-Conduct.
-Location or movements of the person.
When profiling is based solely on automated processing:
-The data subject shall have the right to be informed if the decision that may be taken could produce legal effects that significantly affect them.
-The data subject will have the right to obtain human intervention from GALLERY, to express their point of view and to challenge the decision, if the processing has been authorised by:
-The explicit consent of the data subject.
-A contract between GALLERY and the data subject.
The right to not to be subject to profiling will not be applicable when the decision that may be taken as a result of it is authorised by:
-The explicit consent of the data subject.
-A contract between GALLERY and the data subject.
-Processing based on the current legislation.
In the event that you consider that GALLERY has breached any of your rights protected by the regulations on the protection of personal data or that this has breached any obligation regarding the protection of personal data, you have the right to submit a complaint to the competent control authority, which in Spain is the Spanish Agency for Data Protection located at Calle Jorge Juan, 6. 28001 – Madrid.
Tel. 901 100 099 - 912 663 517
You can also submit an electronic complaint through the electronic site that is available on its website at: https://www.aepd.es.
This Privacy Policy is governed in each and every one of its legal points by Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Similarly, it is governed by Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights. Our website is also governed by Law 34/2002, of 11 July, on information society services and electronic commerce.
The users of this website are subject to Spanish legislation and jurisdiction to which they expressly submit, with the Courts and Tribunals of BARCELONA being competent for the resolution of all disputes arising or related to their use.
SECURITY MEASURES:
The data you provide us will be processed confidentially. GALLERY has adopted all the technical and organisational measures and all the necessary levels of protection to guarantee the security in the processing of the data and prevent its alteration, loss, theft, unauthorised processing or access, in accordance with the state of technology and the nature of the stored data. Similarly, it is also guaranteed that the processing and registration in files, programs, systems or equipment, premises and centres comply with the requirements and conditions of integrity and security established in the current regulations.
SSL (SECURE SOCKETS LAYER) CERTIFICATE
The SSL CERTIFICATE provides authentication, privacy and security of the information exchanged between GALLERY and the user. GALLERY has a security certificate that is used to make secure connections and is established using preset keys, encrypting and decrypting all of the data sent until the connection is closed.
SOCIAL MEDIA
We inform you that GALLERY may have a presence on social media. The processing of the data carried out on people who become followers on social media (and/or form any link or connection through social media) of GALLERY’s official pages will be governed by this section, as well as by the terms and conditions of use, privacy policies and access regulations that belong to the social network which are applicable in each case and which have been previously accepted by the user.
GALLERY will process your data for the purposes of properly managing your presence in the social network, informing you of activities, products or services of the provider, as well as for any other purpose that the regulations of the Social Media sites allow.
The publication of the following content is prohibited:
- That which is allegedly illicit according to national, community or international legislation or that carries out activities that are allegedly illegal or that contravene the principles of good faith.
- That threaten the fundamental rights of people, lack courtesy on the network, upset or may generate negative opinions in our users or third parties and in general any type of content that GALLERY deems inappropriate.
- And in general, that contravene the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection and intellectual and industrial property rights.
Similarly, GALLERY reserves the right to withdraw any content that is considered inappropriate from the website or the corporate social network, without prior notice.
In any case, if you send any personal information through the social network, GALLERY shall not be held liable with regards to the security measures applicable to this platform and the user, and if they would like to find out about them, they must consult the corresponding special terms and conditions of the network in question.
VIDEO SURVEILLANCE
Images are captured in our Hotels in order to preserve the security of people and goods, as well as the facilities.
The user is informed by means of a video surveillance poster located on a wall before the camera and sufficiently visible stating that the facilities have video surveillance.
No transfers are foreseen, except to the security forces and bodies, nor will any international transfer be made.
The images will be retained for a maximum period of 30 days from the date they were captured. Once this period has elapsed, the images must be cancelled in accordance with current regulations; which states: “the cancellation will result in the locking of the data, being retained only at the disposal of the Public Administrations, Judges and Courts, in order to attend to any possible responsibilities arising from the processing, during their statute of limitation period. After that period, the data shall be erased”
LANGUAGE
The language applicable to this Privacy Policy is Spanish. Therefore, if there are any contradictions in any of the versions provided in other languages, the Spanish version will prevail.
This Privacy Policy was last updated in May 2024 but may be updated at any time. We recommend that you consult it each time you access our page in case it has undergone any amendments.