In compliance with the applicable data protection regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are informed that the Data Protection and Privacy Policy of Hotel Riberies & SPA by RdA Hotels is as follows.

Data Controller

The data controller is the legal entity that determines the purposes and means of the processing.

• Identity: Home Feeling Gestión y Proyectos S.L.

• Tax ID: B10676872

• Registered office: c/ Sebastià Ramonich, 7, 25580 Esterri d'Àneu

• Phone: +34 711 261 475

• Email address: riberies@rdahotels.com

The data controller, as the website owner, declares that it has implemented appropriate technical and organizational measures, in accordance with the state of the art, the nature of the data processed, and the associated risks, in order to guarantee the confidentiality, integrity, and availability of personal data.

Personal data

Personal data means any information about an identified or identifiable natural person. An identifiable person is one whose identity can be determined, directly or indirectly, by reference to identifiers such as a name, an identification number, location data, online identifiers, or to one or more factors specific to their physical, economic, cultural, or social identity.

Personal data includes, among other things, first and last name, contact information, identification document number, IP address, or browsing data.

Processing of personal data

Personal data processing includes any operation performed on personal data, whether automated or not, such as collection, recording, storage, consultation, use, disclosure, restriction, erasure, or destruction.

Purpose of data processing

The personal data provided by the data subjects will be processed exclusively for the following purposes:

• Reservations, registration, and service contracting: Manage online reservations, service contracting, the contractual relationship, corresponding billing and collection, as well as necessary communications related to the reservation.

• Guest registration log: Collect and report the data required by current public safety regulations applicable to hotel establishments.

• Inquiries: Attend to and respond to inquiries or requests for information made by users.

• Access to the private area "My Reservation": Manage the user registry and allow access to, view, modify, or cancel reservations.

• Commercial communications: Send commercial communications about our own products and services, promotions, or news, only when the interested party has given their express consent.

• Completion of incomplete reservations: Contact the user to find out the reasons why a reservation was not completed.

• Job Board: Manage resumes and recruitment processes.

• Communication of Legal Changes: Informing about relevant changes to the privacy policy, legal notice, or cookie policy.

• Statistics and service improvement: Conduct statistical analyses and market research, without adopting automated decisions with legal effects.

The data will not be processed for purposes other than those indicated, except as required by law or court order.

Data Retention Period

Personal data will be retained for as long as necessary to fulfill the purpose for which it was collected and, subsequently, for the periods established by law. In general, data will be retained for up to five years from the last interaction, without prejudice to a longer retention period when necessary to comply with legal obligations or to defend claims.

Lawfulness of processing

The legal basis for the processing of personal data is:

• The performance of a contract or pre-contractual measures.

• The fulfillment of legal obligations applicable to the data controller.

• The express consent of the data subject, which may be withdrawn at any time.

• The controller's legitimate interest, where applicable.

Refusal to provide certain data may prevent the provision of services such as reservations or accommodation.

Data recipients

Personal data may be disclosed to:

• Companies within the corporate group, for internal administrative purposes.

• Service providers acting as data processors (IT services, tax, legal or accounting advisory, reservation systems, etc.), with whom the corresponding contracts have been formalized.

• Public authorities, security forces and bodies, courts and tribunals, when legally required.

International data transfers outside the European Union are not planned, except in cases arising from the use of third-party technological services, in accordance with their legal guarantees.

Rights of data subjects

Data subjects may exercise the following rights:

• Right of access

• Right to rectification

• Right to erasure

• Right to object

• Right to restriction of processing

• Right to data portability

• Right not to be subject to automated decisions

• Right to withdraw consent

Exercise of rights

You may exercise your rights by submitting a written request to Home Feeling Gestión y Proyectos S.L., c/ Sebastià Ramonich, 7, 25580 Esterri d'Àneu, or by email to riberies@rdahotels.com, with the subject "Data Protection," attaching a copy of an identification document.

Recourse Options

If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency or with the competent supervisory authority.

Processed Information

The categories of data that may be processed include identifying data, contact data, financial and billing information, data related to reservations and contracted services, web browsing data, and, where applicable, academic and professional data.

Special categories of data are not processed.

The data subject guarantees that the data provided are accurate and undertakes to notify any changes.

Commercial Communications

The submission