Privacy

GRDP

Below we will provide you with information regarding the processing of your personal data carried out by Hipotels

Hipotels as a brand encompasses the following companies that may act as controllers of your personal data if you have contracted services or maintain a commercial, business, contractual or employment relationship with the following hotel establishments;

ANGULA S.A, with V.A.T No.: A07178908, is the data controller for the following hotel establishments:

· HOTEL HIPOCAMPO, C/ BONANZA, 4 (CALA MILLOR 07560)

· BAHIA CALA MILLOR, C/ CASTELL, 3 (CALA MILLOR 07560

· HOTEL HIPOCAMPO PALACE, C/ S´ESTANYOL nº 13 (CALA MILLOR 07560)

· HOTEL DON JUAN, PASEO JUAN LLINAS, S/N (CALA MILLOR 07560)

· APTEL. CALA MILLOR PARK, C/ S´ESTANYOL Nº 1 (CALA MILLOR 07560)

· HOTEL MEDITERRANEO, SES SAVINES S/N (07560 SA COMA)

· MEDITERRANEO CLUB, SES SAVINES S/N (07560 SA COMA)

· MEDITERRANEO GARDEN, SES SAVINES S/N (07560 SA COMA)

· HOTEL SHERRY PARK, AVDA ALVARO DOMEQ 11(11405 JEREZ)

JUMARI S.A, with V.A.T No.: 07084940, is the data controller for the following hotel establishments:

· HOTEL HIPOCAMPO PLAYA, AVDA SA COMA 45 (CALA MILLOR 07560)

· HOTEL GRAN CONIL, PLEAMAR, 2 (CONIL DE LA FRONTERA 11140)

· HOTEL PLAYA LA BARROSA, URB NOVO SANCTI PETRI (CHICLANA 11130)

· HOTEL FLAMENCO CONIL, URB FUENTE DELGALLO S/N (11140 CONIL)

· HOTEL SAID, AVDA BON TEMPS, Nº23(CALA MILLOR 07560)

· LAVANDERÍA CENTRAL, C/FRANCESC DE BORJA MOLL POLIG. IND. CA S'HEREU (07550 SON SERVERA)

HOTEL SAID S.A., with V.A.T No.: A07109846, is the data controller for the following hotel establishments:

· HOTEL BARROSA PALACE, URB NOVO SANCTI PETRI (CHICLANA 11130)

· LAVANDERÍA PELAGATOS, RONDA PONIENTE (PARCELA 15/16 POLIGONO IND.PELAGATOS

· HOTEL BARROSA GARDEN, URB NOVO SANCTI PETRI (CHICLANA 11130)

· HOTEL FLAMENCO, AVDA SA COMA ,13 (CALA MILLOR 07560)

· GRAN PLAYA DE PALMA, AVDA. FRA JOAN LLABRES ,20 (07600 PALMA DE MALLORCA)

· PLAYA DE PALMA PALACE, AVDA. FRA JOAN LLABRES ,20 (07600 PALMA DE MALLORCA)

CALA MILLOR NOU S.L., with V.A.T No.: 08816233, is the data controller for the following hotel establishments::

· APARTHOTEL BAHIA GRANDE, AVDA CASTELL ,1 (CALA MILLOR 07560)

· APARTHOTEL COMA GRAN, C/ CARDS Nº2 (07560 SA COMA)

DUNAS CALA NAU S.A. with V.A.T No.: A07084932, is the data controller for the following hotel establishments:

· APARTHOTEL DUNAS, AVDA SA COMA, 47 (CALA MILLOR 07560)

LOJUMA S.A with V.A.T No.: A07178916, is the data controller for the following hotel establishments:

· HOTEL MARFIL PLAYA, C/ CARDS, 1 (07560 SA COMA)

EXPLOTADORA MERCEDES S.L., with V.A.T No.: B07597800, is the data controller for the following hotel establishments:

· APARTHOTEL MERCEDES, AVDA SA COMA, Nº1 CALA MILLOR 07560)

COMUNIDAD DE PROPIET.EUROTEL C.B. with V.A.T No.: E-07198906, is the data controller for the following hotel establishments:

· EUROTEL GOLF PUNTA ROTJA, AVDA. DEL PINAR, 32 COSTA DE LOS PINOS 07559

INMOBILIARIA EUROTEL S.A. with V.A.T No.: A-28257624, is the data controller for the following hotel establishments:

· EUROTEL PUNTA ROTJA, AVDA. DEL PINAR, 32 COSTA DE LOS PINOS 07559

ES RIVETO HOTELS AIE with V.A.T No.: V-57501272, is the data controller for the following hotel establishments:

· CALA BONA CLUB, COSTA DE LOS PINOS (SON SERVERA 07559)

CLUB LANZAROTE S. A. with V.A.T No.: A-35013416, is the data controller for the following hotel establishments:

· HOTEL LA GERIA, C/ JÚPITER, 5 (35510 PUERTO DEL CARMEN) LANZAROTE

· HOTEL NATURA PALACE, C/ LANZAROTE, 8 35580 PLAYA BLANCA

MILLOR AZUL S.L. with V.A.T No.: B-07968332, is the data controller for the following hotel establishments:

· OFICINAS CENTRALES HIPOTELS, C/S´ESTANYOL N.º 18 (07560 CALA MILLOR)

SERNILLOR S.L. with V.A.T No.: B-07802614, is the data controller for the following hotel establishments:

· CONSTRUCTORA, CARRER CIUTAT N.º 22 07570 ARTA

HIPOTELS S.A. with V.A.T No.: A07782030, is the data controller for the following hotel establishments:

· OFICINAS CENTRALES HIPOTELS, C/S¨ESTANYOL N.º 18 (07560 CALA MILLOR)

MILLOR SOL S.A with V.A.T No.: A 07143134, is the data controller for the following hotel establishments:

· HOTEL MILLOR SUN, AVDA. JUAN SERVERA CAMPS S/N (CALA MILLOR 07560)

HERCA HOTELS S.L with V.A.T No.: B07767221, is the data controller for the following hotel establishments:

· APARTAMENTOS TROPICANA, C/ FLORS S/N 07560 CALA MILLOR

HOTEL PLAYA DEL MORO S.A, with V.A.T No.: A07008543, is the data controller for the following hotel establishments:

· HOTEL CASTELL DE MAR, C/ BONANZA 1 (07560 CALA MILLOR)

· HOTEL MALLORCA PALACE, AVDA. SES SAVINES, 148 (07560 SA COMA)

· HOTEL PLAYA DEL MORO, C/ ALONDRA S/N (07560 CALA MILLOR)

HOTEL SABINA S.A. with V.A.T No.: A07007826, is the data controller for the following hotel establishments:

· HOTEL SABINA, C/ NA PENYAL S/ N 07560 CALA MILLOR

· HOTEL SABINA PLAYA, C/ ES RAFAL 4 (07560 CALA BONA)

With registered Address: C/ S’ESTANYOL N.º 18, BALEARES, 07560, CALA MILLOR E-mail: lopd@hipotels.com, Phone number: +34 971 58 75 12. Data Protection Officer: CONTACT: http:wwwprotecmir.com / Email: protecmirlegal@protecmir.com.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF CUSTOMERS RESERVATIONS

In accordance with the provisions of the General Data Protection Regulation GDPR EU 679/2016 and Organic Law 3/2018 of 5 December on Data Protection and Guarantee of Digital Rights, you are provided with the following information on how your personal data is processed:

RESPONSIBLE / MANAGER: Club Lanzarote, S.A., with V.A.T. No: A35013416, Anluga, S.A., with V.A.T. No: A07178908, Jumari, S.A. with V.A.T. No: A07084940, Hotel Said, S.A., with V.A.T. No: A07109846, Cala Millor Nou, S.L., with V.A.T. No: B08816233, Dunas Cala Nau, S.A., With V.A.T. No: A07084932, Lojuma, S.A., with V.A.T. No: A07178916, Explotadora Mercedes, S.L., with V.A.T. No: B07597800, Comunidad De Propiet. Eurotel, C.B., with V.A.T. No: E07198906, Inmobiliaria Eurotel, S.A., with V.A.T. No: A28257624, Es Riveto Hotels Aie, with V.A.T. No: V57501272, Millor Azul, S.L., with V.A.T. No: B07968332, Sernillor, S.L., with V.A.T. No: B07802614, with registered Address at C/ S’ESTANYOL Nº 18, 07560, Cala Millor, Telephone: +34 971587512, email address: lopd@hipotels.com. You can contact the data protection officer at the following Email Address: DATA PROTECTION OFFICER: CONTACT: / Http://www.protecmir.Com / E-MAIL: protecmirlegal@protecmir.com.

PURPOSE: At Hipotels, we process the information you provide us in order to provide you accommodation in our hotel and/or the services of our establishments, in addition to managing the sending of information and commercial research and invoicing thereof. We will develop a commercial profile based on the information provided in order to be able to offer you our services in accordance with your interests. No automated decisions will be made based on this profile. The personal data provided will be retained for the duration of the commercial relationship and as long as no request has been received to delete the same by the interested party, for a duration of 5 years from the last time you contract and/or make any reservation. In any event, your personal data will be retained while they remain useful for the purpose indicated, and in any event for the legally established periods and for the time needed to address any possible liabilities resulting from said processing.

LEGAL BASIS: Personal data processing is based on the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into the contract; we are also obliged to process your personal information to comply with a legal obligation that applies to the data controller. In any event, you have given your consent for your personal information to be processed for one or more specific purposes, in accordance with the provisions of the Regulation (EU) 2016/679 (ART. 6.1. A.B.C.) and LOPDPGDD. Act 1/1992, modified by Organic Law 4/2015, of 30 March, regarding Protection of Citizen Security, shall apply. Royal Decree 933/2021, of 26 October, which establishes the documentary registration and information obligations of natural or legal persons who carry out accommodation and motor vehicle rental activities, is applicable. Organic Law 7/2021, of 26 May, on the protection of personal data processed for the purposes of the prevention, detection, investigation and prosecution of criminal offences and the execution of criminal sanctions also applies. Articles 20 and 21 of the Act 34/2002, of 11 July, on Information Society Services and Electronic Commerce, for the use of telecommunications to send commercial offers shall apply. While the prospective offer of services is based on the consent you are requested to provide, the withdrawal of this consent will not condition the contract for the purchase and/or provision of the service under any circumstances. The personal data must be provided, otherwise the hotel accommodation service and/or the requested offer cannot be provided. While the prospective offer of products and services is based on the consent you are requested to provide, the withdrawal of this consent will not condition the contract for the purchase of any product and/or service under any circumstances.

RECIPIENTS: No personal data will be shared with any third party not connected to the company, unless it is a legal requirement to do so. However, you are informed that third-party providers may have access to your personal data, as data processors or joint controllers of the processing, within the framework of the provision of a service for the Data Controller company . You are informed that you can request a complete list of the recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: lopd@hipotels.com You are informed that MILLOR AZUL, S.L. (tax code): B07968332 shall act in all circumstances as data processors in the terms set out in article 28 of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679. Furthermore, if you agree, your data will be processed by the companies belonging to Hipotels: ANGULA S.A, with V.A.T No.: A07178908, JUMARI S.A, with V.A.T No.: 07084940, HOTEL SAID S.A., with V.A.T No.: A07109846, CALA MILLOR NOU S.L., with V.A.T No.: 08816233, DUNAS CALA NAU S.A. with V.A.T No.: A07084932, LOJUMA S.A with V.A.T No.: A07178916, EXPLOTADORA MERCEDES S.L., with V.A.T No.: B07597800, COMUNIDAD DE PROPIET.EUROTEL C.B. with V.A.T No.: E-07198906, INMOBILIARIA EUROTEL S.A. with V.A.T No.: A-28257624, ES RIVETO HOTELS AIE with V.A.T No.: V-57501272, CLUB LANZAROTE S. A. with V.A.T No.: A-35013416, MILLOR AZUL S.L. with V.A.T No.: B-07968332, SERNILLOR S.L. with V.A.T No.: B-07802614, HIPOTELS S.A. with V.A.T No.: A-07782030, MILLOR SOL S.A. with V.A.T No.: A-07143134, HERCA HOTELS S.L with V.A.T No.: B-07767221, HOTEL PLAYA DEL MORO S.A with V.A.T No.: A-07008543, HOTEL SABINA S.A. with V.A.T No.: A-07007826 In addition to the above, your data may be transferred to the State Security Forces and Corps. No data is expected to be transferred to third countries.

RIGHTS: Interested parties have the right to obtain access to their personal information, as well as to request that any inaccurate data be rectified or, where appropriate, to request the removal of said data when, among other reasons, the information is no longer needed for the purposes for which it was obtained. In certain circumstances, interested parties may request that the processing of their data be limited, in which case we will only retain it for the purpose of filing or defending complaints. Additionally, and for purposes related to their particular situation, interested parties may oppose the processing of their data, in which case their personal information will no longer be processed for those purposes to which they have stated their opposition. When technically possible, the interested party may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, the parties concerned may write to Hipotels at C/ S’ESTANYOL Nº 18, 07560, Cala Millor, enclosing a copy of a document accrediting their identity (national identity document), or email lopd@hipotels.com. You have the right to file a complaint with the Regulatory Authority: The Spanish Agency for Data Protection (www.agpd.es). Origin of personal data: the data subject.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF PASSENGER REGISTRATION PARTS.

PURPOSE: At Hipotels, we process the information you provide us with in order to provide you with the requested hotel accommodation service and to comply with the documentary registration and information obligations set forth in Royal Decree 933/2021, of 26 October, for companies that carry out accommodation and hotel accommodation activities. No automated decisions will be made based on this profile. The data that you provide us with and that we process in a digital register must be kept for a minimum period of three years from the end of the service or provision contracted. In any event, your personal data will be retained while they remain useful for the purpose indicated, and in any event for the legally established periods and for the time needed to address any possible liabilities resulting from said processing.

LEGAL BASIS: Personal data processing is based on the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into the contract. We are also obliged to process your personal information to comply with a legal obligation that applies to the data controller, in accordance with the provisions of the Regulation (EU) 2016/679 (ART. 6.1. B.C.) and LOPDPGDD. Royal Decree 933/2021, of 26 October, which establishes the documentary registration and information obligations of natural or legal persons who carry out accommodation and motor vehicle rental activities, shall apply. Organic Law 7/2021, of 26 May, on the protection of personal data processed for the purposes of the prevention, detection, investigation and prosecution of criminal offences and the execution of criminal sanctions, shall also apply. The personal data must be provided, otherwise the hotel accommodation service cannot be provided.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF CUSTOMER SATISFACTION SURVEY

PURPOSE: At Hipotels, we process the information you provide us in order to know your level of satisfaction for your stay at our establishment. We will develop a commercial profile based on the information provided in order to be able to offer you our products and services in accordance with your interests. No automated decisions will be made based on this profile. We keep your personal data in our systems and files for as long as is needed to carry out the purposes of the processing, and to comply with applicable legislation. Your personal data will be kept for as long as there is a contractual and/or commercial relationship with you, or as long as you do not exercise your right to the deletion and/or restriction of processing of your data.

LEGAL BASIS: Personal data processing is based on your consent for one or more specific purposes, in accordance with the provisions of the GDPR EU 679/2016 (ART. 6.1. A) and Organic Law 3/2018 of 5 December (Data Protection and Guarantee of Digital Rights: LOPDPGDD). Articles 20 and 21 of the Information Society Services Act 34/2002, for the use of telecommunications to send commercial offers, shall apply. While the prospective offer of services is based on the consent you are requested to provide, the withdrawal of this consent will not condition the contract for the purchase and/or provision of the service under any circumstances. Personal data must be provided or otherwise the satisfaction survey cannot be completed. The personal data must be provided, otherwise the requested offer cannot be provided. Consent must be provided in order to be able to make prospective offers and send you commercial information.

RECIPIENTS: No personal data will be shared with any third party not connected to the company, unless it is a legal requirement to do so. However, you are informed that third-party providers may have access to your personal data, as data processors, within the framework of the provision of a service for the Data Controller company. You are informed that you can request a complete list of the recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: lopd@hipotels.com. You are informed that MILLOR AZUL, S.L. (tax code): B07968332 shall act in all circumstances as data processors in the terms set out in article 28 of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679. Furthermore, if you agree, your data will be processed by the companies belonging to Hipotels: ANGULA S.A, with V.A.T No.: A07178908, JUMARI S.A, with V.A.T No.: 07084940, HOTEL SAID S.A., with V.A.T No.: A07109846, CALA MILLOR NOU S.L., with V.A.T No.: 08816233, DUNAS CALA NAU S.A. with V.A.T No.: A07084932, LOJUMA S.A with V.A.T No.: A07178916, EXPLOTADORA MERCEDES S.L., with V.A.T No.: B07597800, COMUNIDAD DE PROPIET.EUROTEL C.B. with V.A.T No.: E-07198906, INMOBILIARIA EUROTEL S.A. with V.A.T No.: A-28257624, ES RIVETO HOTELS AIE with V.A.T No.: V-57501272, CLUB LANZAROTE S. A. with V.A.T No.: A-35013416, MILLOR AZUL S.L. with V.A.T No.: B-07968332, SERNILLOR S.L. with V.A.T No.: B-07802614, HIPOTELS S.A. with V.A.T No.: A-07782030, MILLOR SOL S.A. with V.A.T No.: A-07143134, HERCA HOTELS S.L with V.A.T No.: B-07767221, HOTEL PLAYA DEL MORO S.A with V.A.T No.: A-07008543, HOTEL SABINA S.A. with V.A.T No.: A-07007826 No data is expected to be transferred to third countries.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF WEBSITE USERS

PURPOSE: We at Hipotels process the information that you provide us with in order to provide the services and/or sell the products that you have contracted through our website and to manage the sending of information and commercial research. We will develop a commercial profile based on the information provided in order to be able to offer you our services in accordance with your interests. No automated decisions will be made based on this profile. The personal data provided will be retained for the duration of the commercial relationship and as long as no request has been received to delete the same by the interested party, for a duration of 5 years from the last time you contract and/or purchase anything. In any event, your personal data will be retained while they remain useful for the purpose indicated, and in any event for the legally established periods and for the time needed to address any possible liabilities resulting from said processing.

LEGAL BASIS: Personal data processing is based on the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into the contract, and in any event you have given your consent for your personal information to be processed for one or more specific purposes, in accordance with the provisions of the GDPR EU 679/2016 (ART. 6.1. A. B) and Organic Law 3/2018 of 5 December (Data Protection and Guarantee of Digital Rights: LOPDPGDD). Articles 20 and 21 of the Information Society Services Act 34/2002, for the use of telecommunications to send commercial offers, shall apply. While the prospective offer of products and services is based on the consent you are requested to provide, the withdrawal of this consent will not condition the contract for the purchase of any product and/or service under any circumstances. The personal data must be provided, otherwise the service requested cannot be provided and/or the product sold and/or the requested offer cannot be provided and the sending out of commercial information cannot be managed.

RECIPIENTS: No personal data will be shared with any third party not connected to the company, unless it is a legal requirement to do so. However, you are informed that third-party providers may have access to your personal data, as data processors, within the framework of the provision of a service for the Data Controller company. You are informed that you can request a complete list of the recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: lopd@hipotels.com. You are informed that MILLOR AZUL, S.L. (tax code): B07968332 shall act in all circumstances as data processors in the terms set out in article 28 of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679. Furthermore, if you agree, your data will be processed by the companies belonging to Hipotels: ANGULA S.A, with V.A.T No.: A07178908, JUMARI S.A, with V.A.T No.: 07084940, HOTEL SAID S.A., with V.A.T No.: A07109846, CALA MILLOR NOU S.L., with V.A.T No.: 08816233, DUNAS CALA NAU S.A. with V.A.T No.: A07084932, LOJUMA S.A with V.A.T No.: A07178916, EXPLOTADORA MERCEDES S.L., with V.A.T No.: B07597800, COMUNIDAD DE PROPIET.EUROTEL C.B. with V.A.T No.: E-07198906, INMOBILIARIA EUROTEL S.A. with V.A.T No.: A-28257624, ES RIVETO HOTELS AIE with V.A.T No.: V-57501272, CLUB LANZAROTE S. A. with V.A.T No.: A-35013416, MILLOR AZUL S.L. with V.A.T No.: B-07968332, SERNILLOR S.L. with V.A.T No.: B-07802614, HIPOTELS S.A. with V.A.T No.: A-07782030, MILLOR SOL S.A. with V.A.T No.: A-07143134, HERCA HOTELS S.L with V.A.T No.: B-07767221, HOTEL PLAYA DEL MORO S.A with V.A.T No.: A-07008543, HOTEL SABINA S.A. with V.A.T No.: A-07007826 No data is expected to be transferred to third countries.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF INVOICES / ACCOUNTING

PURPOSE: At Hipotels we process the information that you provide us with in order to prepare and produce the invoices for products and/or services and in order to comply with tax and accounting obligations. The personal data provided will be retained for the duration of the commercial relationship and as long as no request has been received to delete the same by the interested party, for a duration of 5 years from the last time you contract and/or purchase anything. In any event, your personal data will be retained while they remain useful for the purpose indicated, and in any event for the legally established periods and for the time needed to address any possible liabilities resulting from said processing.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF CURRICULUM VITAE

PURPOSE: At Hipotels we process the information you provide us with in order to select staff and to allow the applicant to participate in the company’s employment selection process. Personal data provided will be kept, provided that it is useful for the indicated purpose, and, in any case, for the legal periods and for the time necessary in order to attend to potential responsibilities arising from the processing.

LEGAL BASIS: The processing of your personal data is based on the execution of a contract to which the interested party is a party or for the application of precontractual means at the request of the latter. In any case, you have given your consent for the processing of your personal data for one or more specific purposes in accordance with the provisions of Regulation (EU) 679/2016 (art. 6.1. A and B) and the LOPDPGDD. There is an obligation to provide personal data, otherwise you will not be able to participate in the entity’s selection process.

RECIPIENTS: No personal data will be shared with any third party not connected to the company, unless it is a legal requirement to do so. However, you are informed that third-party providers may have access to your personal data, as data processors, within the framework of the provision of a service for the Data Controller company. You are informed that you can request a complete list of the recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: lopd@hipotels.com. You are informed that MILLOR AZUL, S.L. (tax code): B07968332 shall act in all circumstances as data processors in the terms set out in article 28 of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679. Furthermore, if you agree, your data will be processed by the companies belonging to Hipotels: ANGULA S.A, with V.A.T No.: A07178908, JUMARI S.A, with V.A.T No.: 07084940, HOTEL SAID S.A., with V.A.T No.: A07109846, CALA MILLOR NOU S.L., with V.A.T No.: 08816233, DUNAS CALA NAU S.A. with V.A.T No.: A07084932, LOJUMA S.A with V.A.T No.: A07178916, EXPLOTADORA MERCEDES S.L., with V.A.T No.: B07597800, COMUNIDAD DE PROPIET.EUROTEL C.B. with V.A.T No.: E-07198906, INMOBILIARIA EUROTEL S.A. with V.A.T No.: A-28257624, ES RIVETO HOTELS AIE with V.A.T No.: V-57501272, CLUB LANZAROTE S. A. with V.A.T No.: A-35013416, MILLOR AZUL S.L. with V.A.T No.: B-07968332, SERNILLOR S.L. with V.A.T No.: B-07802614, HIPOTELS S.A. with V.A.T No.: A-07782030, MILLOR SOL S.A. with V.A.T No.: A-07143134, HERCA HOTELS S.L with V.A.T No.: B-07767221, HOTEL PLAYA DEL MORO S.A with V.A.T No.: A-07008543, HOTEL SABINA S.A. with V.A.T No.: A-07007826 No data is expected to be transferred to third countries.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF SUPPLIERS

PURPOSE: We at Hipotels process the information that you provide us with in order to complete the order and invoice the services. While the commercial relationship remains in effect and no request for cancellation is made, the personal information provided will be retained for a period of 5 years after the last contract has been formalised. In any event, your personal data will be retained while they remain useful for the purpose indicated, and in any event for the legally established periods and for the time needed to address any possible liabilities resulting from said processing.

LEGAL BASIS: Personal data processing is based on the performance of a contract, in accordance with the provisions of the GDPR EU 679/2016 (ART. 6.1. B) and Organic Law 3/2018 of 5 December (Data Protection and Guarantee of Digital Rights: (LOPDPGDD).

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF NEWSLETTER / MAILING

PURPOSE: At Hipotels we process the information that you provide with the purpose of sending you personalised offers and/or services provided by the company, and to manage the sending of information and marketing surveys. We also process information on customers who have contracted our products and services with the purpose of sending them personalised offers and/or services provided by the company. We will develop a commercial profile based on the information provided in order to be able to offer you our products and services in accordance with your interests. No automated decisions will be made based on this profile. The personal information provided will be retained for as long as your explicit consent remains in effect and you do not request for it to be removed. In any event, your personal data will be retained while they remain useful for the purpose indicated, and in any event for the legally established periods and for the time needed to address any possible liabilities resulting from said processing.

LEGAL BASIS: Personal data processing is based on the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into the contract, and in any event you have given your consent for your personal information to be processed for one or more specific purposes, in accordance with the provisions of the GDPR EU 679/2016 (ART. 6.1. A.B) and Organic Law 3/2018 of 5 December (Data Protection and Guarantee of Digital Rights: LOPDPGDD). Articles 20 and 21 of the Information Society Services Act 34/2002, for the use of telecommunications to send commercial offers, shall apply.

RECIPIENTS: No personal data will be shared with any third party not connected to the company, unless it is a legal requirement to do so. However, you are informed that third-party providers may have access to your personal data, as data processors, within the framework of the provision of a service for the Data Controller company. You are informed that you can request a complete list of the recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: lopd@hipotels.com. You are informed that MILLOR AZUL, S.L. (tax code): B07968332 shall act in all circumstances as data processors in the terms set out in article 28 of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679. Furthermore, if you agree, your data will be processed by the companies belonging to Hipotels: ANGULA S.A, with V.A.T No.: A07178908, JUMARI S.A, with V.A.T No.: 07084940, HOTEL SAID S.A., with V.A.T No.: A07109846, CALA MILLOR NOU S.L., with V.A.T No.: 08816233, DUNAS CALA NAU S.A. with V.A.T No.: A07084932, LOJUMA S.A with V.A.T No.: A07178916, EXPLOTADORA MERCEDES S.L., with V.A.T No.: B07597800, COMUNIDAD DE PROPIET.EUROTEL C.B. with V.A.T No.: E-07198906, INMOBILIARIA EUROTEL S.A. with V.A.T No.: A-28257624, ES RIVETO HOTELS AIE with V.A.T No.: V-57501272, CLUB LANZAROTE S. A. with V.A.T No.: A-35013416, MILLOR AZUL S.L. with V.A.T No.: B-07968332, SERNILLOR S.L. with V.A.T No.: B-07802614, HIPOTELS S.A. with V.A.T No.: A-07782030, MILLOR SOL S.A. with V.A.T No.: A-07143134, HERCA HOTELS S.L with V.A.T No.: B-07767221, HOTEL PLAYA DEL MORO S.A with V.A.T No.: A-07008543, HOTEL SABINA S.A. with V.A.T No.: A-07007826 No data is expected to be transferred to third countries.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF MEMBERS‘ CLUB

PURPOSE: We at HIpotels process the information you provide us with in order to manage your membership of the Members' Club. We also do this so that it is easier for you to obtain benefits as a member, so that you can receive personalised [commercial] offers and so that you can receive notifications of reductions in the price of our services. We will develop a commercial profile based on the information provided in order to be able to offer you our products and services in accordance with your interests. No automated decisions will be made based on this profile. We keep your personal data in our systems and files for as long as is needed to carry out the purposes of the processing, and to comply with applicable legislation. Your personal data will be kept for as long as there is a contractual and/or commercial relationship with you, or as long as you do not exercise your right to the deletion and/or restriction of processing of your data.

RECIPIENTS: No personal data will be shared with any third party not connected to the company, unless it is a legal requirement to do so. However, you are informed that third-party providers may have access to your personal data, as data processors, within the framework of the provision of a service for the Data Controller company. You are informed that you can request a complete list of the recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: lopd@hipotels.com. You are informed that MILLOR AZUL, S.L. (tax code): B07968332 shall act in all circumstances as data processors in the terms set out in article 28 of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679. Furthermore, if you agree, your data will be processed by the companies belonging to Hipotels: ANGULA S.A, with V.A.T No.: A07178908, JUMARI S.A, with V.A.T No.: 07084940, HOTEL SAID S.A., with V.A.T No.: A07109846, CALA MILLOR NOU S.L., with V.A.T No.: 08816233, DUNAS CALA NAU S.A. with V.A.T No.: A07084932, LOJUMA S.A with V.A.T No.: A07178916, EXPLOTADORA MERCEDES S.L., with V.A.T No.: B07597800, COMUNIDAD DE PROPIET.EUROTEL C.B. with V.A.T No.: E-07198906, INMOBILIARIA EUROTEL S.A. with V.A.T No.: A-28257624, ES RIVETO HOTELS AIE with V.A.T No.: V-57501272, CLUB LANZAROTE S. A. with V.A.T No.: A-35013416, MILLOR AZUL S.L. with V.A.T No.: B-07968332, SERNILLOR S.L. with V.A.T No.: B-07802614, HIPOTELS S.A. with V.A.T No.: A-07782030, MILLOR SOL S.A. with V.A.T No.: A-07143134, HERCA HOTELS S.L with V.A.T No.: B-07767221, HOTEL PLAYA DEL MORO S.A with V.A.T No.: A-07008543, HOTEL SABINA S.A. with V.A.T No.: A-07007826 No data is expected to be transferred to third countries.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF PRIZE DRAWS

PURPOSE: We at HIpotels process the information you provide us with so that you can take part in the prize draws, competitions and activities organised by the entity.We will develop a commercial profile based on the information provided in order to be able to offer you our products and services in accordance with your interests. No automated decisions will be made based on this profile. We keep your personal data in our systems and files for as long as is needed to carry out the purposes of the processing, and to comply with applicable legislation. Your personal data will be kept for as long as there is a contractual and/or commercial relationship with you, or as long as you do not exercise your right to the deletion and/or restriction of processing of your data.

RECIPIENTS: No personal data will be shared with any third party not connected to the company, unless it is a legal requirement to do so. However, you are informed that third-party providers may have access to your personal data, as data processors, within the framework of the provision of a service for the Data Controller company. You are informed that you can request a complete list of the recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: lopd@hipotels.com. You are informed that MILLOR AZUL, S.L. (tax code): B07968332 shall act in all circumstances as data processors in the terms set out in article 28 of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679. Furthermore, if you agree, your data will be processed by the companies belonging to Hipotels: ANGULA S.A, with V.A.T No.: A07178908, JUMARI S.A, with V.A.T No.: 07084940, HOTEL SAID S.A., with V.A.T No.: A07109846, CALA MILLOR NOU S.L., with V.A.T No.: 08816233, DUNAS CALA NAU S.A. with V.A.T No.: A07084932, LOJUMA S.A with V.A.T No.: A07178916, EXPLOTADORA MERCEDES S.L., with V.A.T No.: B07597800, COMUNIDAD DE PROPIET.EUROTEL C.B. with V.A.T No.: E-07198906, INMOBILIARIA EUROTEL S.A. with V.A.T No.: A-28257624, ES RIVETO HOTELS AIE with V.A.T No.: V-57501272, CLUB LANZAROTE S. A. with V.A.T No.: A-35013416, MILLOR AZUL S.L. with V.A.T No.: B-07968332, SERNILLOR S.L. with V.A.T No.: B-07802614, HIPOTELS S.A. with V.A.T No.: A-07782030, MILLOR SOL S.A. with V.A.T No.: A-07143134, HERCA HOTELS S.L with V.A.T No.: B-07767221, HOTEL PLAYA DEL MORO S.A with V.A.T No.: A-07008543, HOTEL SABINA S.A. with V.A.T No.: A-07007826 No data is expected to be transferred to third countries.

INFORMATION SECTION ON ARTICLES 13 AND 14 OF THE GDPR ON THE PROCESSING OF THE PERSONAL DATA OF VIDEO SURVEILLANCE

PURPOSE: At Hipotels we process the information obtained via video surveillance cameras for the purpose of ensuring the safety of persons and property, and the security of the facilities or establishment. It is also for the purpose of monitoring access to the establishment and facilities of the Company or Organisation. The personal information provided will be retained for a period of no more than 1 month following its recording. In any event, your personal information will be retained while it remains useful for the purpose indicated, and in any event for the legally established periods and for the time needed to address any possible liabilities resulting from said processing.

LEGAL BASIS: The processing of your personal data is based on the need to meet legitimate interests pursued by the data controller or by a third party in accordance with the provisions of the GDPR EU 679/2016 (Art. 6.1. F) and Organic Law 3/2018 of 5 December ( Data Protection and Guarantee of Digital Rights: LOPDPGDD). Articles 22 and 89 of Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights, shall apply. Article 20.3 of the Employment Rights Act shall also apply.

RECIPIENTS: No personal data will be shared with any third party not connected to the company, unless it is a legal requirement to do so. However, you are informed that, as data processors, third-party providers may have access to your personal data as part of the provision of a service for the data controller company. You are informed that images may be processed by the Data Processor in accordance with article 28 of the GDPR. You are informed that you can request a complete list of the recipients that may receive your personal data as processors or as third-party recipients transfer by emailing: lopd@hipotels.com. You are informed that MILLOR AZUL, S.L. (tax code): B07968332 shall act in all circumstances as data processors in the terms set out in article 28 of the General Data Protection Regulation (GDPR) Regulation (EU) 2016/679. In addition to the above, the company may share or communicate personal data in order to meet its obligations with public administrations when required to do so by law. In addition to the above, your data may be transferred to the State Security Forces and Corps. There is no arrangement in effect to transfer your data to third-party countries.

Data security

At Hipotels we have appropriate technical and organisational security measures in place to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage, and to ensure the integrity and confidentiality of your personal data. The technical and organisational security measures implemented make it possible to: guarantee the permanent confidentiality, integrity, availability and resilience of the processing systems and services; restore the availability of and access to personal data promptly in the event of a physical or technical incident; and regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing. These technical and organisational security measures have been designed taking into account our IT infrastructure, the state of the art in accordance with current standards and practices, the cost of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity of the processing to your personal data.