This Policy applies to visitors to this website (our website), to users of the services offered by Villa Valentina for the purposes described in section 4 of this Policy, and to all persons whose personal data (e.g. their images) may appear on our website or in the context of such services.

The only party responsible for the use of your personal data as indicated in the previous section is the owner of this website:

We have a Data Protection Delegate who can be contacted at info@villavalentinacapbonita.com.

Additionally, if you are in the European Union, you will be interested to know that our representative for data protection purposes is the company ... domiciled in ..., which you can contact by telephone ..., or (preferably) by e-mail ....

Villa Valentina is not responsible for the activities carried out by other websites, even if you access them through links on our website. That is why we strongly recommend that you carefully read the information provided by these other responsible parties before giving them your personal data (especially the privacy and cookie policies of each website you visit), and that you contact that responsible party if you have any concerns or questions.

In general, it is you who directly provide us with your personal data - for example, when you call us by telephone or fill in the forms on this website. The only exceptions to this rule are:

Your image, when eventually picked up by our video surveillance cameras;

Data provided to us by third parties (e.g. a company) who book or purchase products or services from Villa Valentina or any of Villa Valentina's affiliated and associated entities on your behalf;

Photographs in which you may appear from events we organise or participate in;

Images that correspond to a news item in which we consider that the public interest and the right to information prevail over the possible interests of the persons whose image or other personal data are published on our website;

Information about you that may appear in bookings for which the holder has made you a beneficiary, or that are provided to us about you in e-mails we receive;

The last four digits of your credit card, which together with the amount of the purchase and the transaction number are returned to us by our payment service provider, as they will be necessary in the event that you wish to consult or revoke the transaction;

Contact details provided to us by our service and product providers when you act as their commercial or contractual representative; and

Cookies on this website, about which you will find more information in our cookie policy.

To manage your reservations or purchases by phone

We process the data you provide in relation to the reservation or purchase of our products and services (for example, when you book a room) in order to formalise your purchase or reservation and to communicate to you by email or telephone any information related to the same, as well as to manage and issue documents accrediting the reservation or purchase and any related communication that is necessary for the formalisation of the same. Specifically, we may collect the number and expiry date of one of your credit cards, together with the name of the cardholder and the code on the back of the card, as a guarantee of the reservation and to control fraud.

We may also use the information you provide during the purchase or reservation to manage, administer, provide, extend and improve the services or products contracted, and to extract statistics in relation to the interest aroused by these and our promotions.

The basis for these processing operations is the sales contract or reservation agreement for the product or service that you sign when you complete the purchase or reservation, and our legitimate interest in improving the quality of the services we offer you.

To analyse how you rate our services and the interest in our marketing campaigns, in order to improve our marketing campaigns.

We may process the data you provide to us, for example, during the purchase or booking of products or services, to ask you to rate the service you received.

We may also extract aggregated statistics (i.e. statistics that do not include personal information of any kind) in relation to interest in our marketing campaigns.

The basis for these processing operations is our legitimate interest in improving the quality of our services and the events we manage or promote, as well as our marketing campaigns.

To send you information, promotions and discounts of your interest.

We process your e-mail address when you subscribe to our newsletter service, to inform you about news, events, exclusive content and promotions so that you can make the most of our facilities, services and products.

The legal basis for this processing is your consent, and you may withdraw your consent at any time by exercising your right as indicated below in this policy, or through the link at the bottom of each email. The only consequence of withdrawing your consent is that you will no longer receive the information we send you or be able to participate in promotions, contests or sweepstakes reserved for our subscribers.

To deal with your requests, queries or complaints

We collect the personal data you provide to us in your emails, by telephone, or through the form on the contact page or when you request us to exercise your rights, to deal with your requests, queries or complaints in relation to our services or your rights in relation to your personal data.

The legal basis for this processing is the consent you express by sending or giving us this data, our legal obligation to respond to your requests for rights, and our legitimate interest in responding to you. The provision of your personal data is therefore voluntary, but if you do not provide us with the personal data we require, we will not be able to process your request, query or complaint. You may revoke your consent whenever you wish, although such revocation will also make it impossible to continue processing your request, query or complaint.

To handle any future complaints

We retain data that may be necessary to handle your, or our, potential claims on the basis of our legitimate interest in defending ourselves in order to safeguard our rights.

To control access to our facilities, events or services by means of tickets or badges

We use your booking or invitation details and your ID card or passport, including proof of your Covid-19 protected status (the latter only if we are legally obliged to do so), to authorise or deny you access to our facilities and, eventually, to restricted areas of our events or services, as well as to analyse and control the occupancy and logistics of the different areas, and to ensure your health and safety (including preventing the spread of disease and contact tracing of Covid-19 affected persons).

The legal basis for this processing is the contract of sale of your room or the service contract to which you are a party, and in the event that we request documents proving your Covid-19 protection status, our legal obligation.

For the safekeeping and return of your lost property in our facilities.

If you have lost a mobile phone or any other item containing personal data, we will keep this personal data until the rightful owner of the lost item successfully claims it at our customer service point or, after a reasonable period of time, we hand it over to the police authorities to arrange for its safekeeping and eventual return.

Our legitimate basis for processing personal data from mobile phones, wallets, backpacks and other objects that may contain personal data is our legitimate interest in preventing their theft and returning them to you.

To provide media coverage of events

If you participate in person at our events, the independent press and our own professionals may record your image and, on pre-arranged occasions, your voice, in the context of the event or award ceremony.

The legal basis for this processing of your image is our legitimate interest in media coverage of events we organise or sponsor for the purpose of using the footage in their promotional materials, including our website and social media accounts.

You are not obliged to appear in a recording. If you wish, you have the right to object to our legitimate interest and ask us to remove the material in which you are identified. In order to assess your objection against our legitimate interest, and if necessary immediately remove the images that identify you, we will ask you to tell us where you have seen them.

To promote our facilities, products and services

If you have signed a contract or an image rights consent with us, we may collect photographs or videos of our facilities, products or services in which you are identified, and perhaps heard, to be used in promotional campaigns or published in the media such as national or international press, our website, or our social networks. If you have signed a consent of transfer of image rights, we inform you that you can revoke it at any time so that we can remove your image from our website and/or our networks, without the revocation having any effect on the dissemination of your image that has taken place before processing it.

In addition, we may graphically record the ambience of our premises to promote our premises and its products and services, and your image and voice may appear in such graphic material. Unlike in the previous paragraph, in this case the legal basis for the processing of your images is our legitimate interest, which you may object to at any time if you consider that it is contrary to your own interests. In order to assess your objection against our legitimate interest and, if necessary, immediately remove the images that identify you, we will ask you to tell us where you have seen them.

To initiate or maintain a relationship with our suppliers

If you represent a supplier of products or services, we collect your contact details and your signature for the purposes of:

Manage our relationships of all kinds with the supplier you represent.

Manage the corresponding file in our list of approved suppliers.

Manage the quotations and invoices of the supplier you represent.

The processing operations linked to purposes a) and b) are legitimised by the employment or service contract you have signed with the supplier you represent and our legitimate interest in contacting this supplier. And the processing operations linked to the purpose c) are legitimated to be necessary for the performance of the contract you have signed with us.

To preserve security through video surveillance

We collect your image through our video surveillance systems in order to preserve the security of people, property and our own facilities.

The legitimate basis for such processing is the public interest in public security, our legitimate interest in the security of our establishments, and the legitimate interest of third parties who wish to seek legal protection for a crime that can be proven by a few minutes of a recording.

To select and recruit our staff

We process the CV data that you voluntarily send us to manage the relationship with candidates for a job at Villa Valentina or one of the entities that host Villa Valentina, including the search process, filtering and storage of the CVs of potential candidates, the personnel selection process and the recruitment process.

The basis of legitimacy for the aforementioned processing is your consent, which you express by sending us your CV, the execution of pre-contractual measures, and if we do not have an open recruitment process or you are not selected and we consider that you may fit in future selection processes, our legitimate interest in keeping your CV to be included in such future processes.

To ensure the proper functioning of our website (functional cookies)

We use functional cookies to ensure the proper functioning of our website.

As these cookies are necessary for the proper functioning of the website, their use does not require your express consent, and the basis that legitimises us to use them is our legitimate interest in being able to offer you the services of our website.

You can find more information about these cookies in our cookie policy.

To extract aggregated statistics on visitors' use of our website (analytical cookies).

We use analytical or statistical cookies to identify the most and least visited pages, analyse what content is of most interest to our visitors, and measure the success of our information campaigns, all with the aim of improving the services we offer you through the Web. All these purposes provide aggregated results, in which it is not possible to identify the interests of any specific person.

As these cookies are not necessary, we will not use them until we have your consent, and not giving or withdrawing your consent will have no effect other than to hinder our aim of improving the website by analysing aggregated statistics on our visitors' browsing habits.

You can find more information about these cookies in our cookie policy.

To send you personalised direct advertising (advertising cookies)

We use our own and third-party advertising cookies to send you personalised advertising, either from us or from our partners.

As these are not necessary cookies, we will not use them until we have your consent, and your failure to give or withdraw your consent will have no effect other than that your visit to our website cannot be used to improve the relevance of the advertising you receive.

You can find more information about these cookies in our cookie policy.

In order to use Google cookies

In addition, as an obligation that Google LLC, of which Google Ireland Ltd is a subsidiary, imposes on entities, such as ourselves, that use the Google Analytics and Google Ads tools, we inform you that these two services are operated by Google Inc. located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and that Google Inc. is a beneficiary of these services.

The information generated by the cookies about your use of this website and your advertising preferences is generally transmitted to a Google server in the USA and stored there. For more information, please refer to the page describing how Google uses the information on our website and/or Google's privacy policy regarding the aforementioned services.

Please note that we have activated the IP anonymisation feature on our website to add additional safeguards to the standard contractual clauses protecting this international transfer of data in the USA. With this, Google will shorten your IP address before transmitting it to the USA (identity obfuscation process). Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. Google guarantees that the IP address transmitted by your browser to Google Analytics will not be processed together with any other data held by Google.

You can view the categories of personal data processed by these services at privacy.google.com/businesses/adsservices.

For other purposes not incompatible with the foregoing

We may use your personal data for other purposes that are not incompatible with the above (such as archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes) provided that this is permitted by applicable data protection laws and, of course, acting in accordance with these and other applicable laws.

We do not pass on your personal data to anyone, unless:

Be the one to ask us.

We are legally obliged to do so (for example, we are legally obliged to provide copies of invoices to the Dominican Republic Tax and Border Department when requested to do so).

You contract our products or services through intermediaries (e.g. a personal shopper) to whom we have to deliver products or services purchased on your behalf.

We are jointly responsible for the collection of data, so that, always with your consent, other entities process them on our behalf. This is the case of:

Google Ireland Ltd, with registered office at 4 Gordon House Street, Barrow - Dublin, Ireland, which acts as a processor for Guinoptico SL for the processing of cookie data necessary to use its Analytics and Ads services, and as an independent data controller for all processing carried out on its behalf in accordance with its privacy policy. We transfer data to Google Ireland Ltd on the basis of the data protection agreement that this company located in the EU includes in the addendum to the standard contract for countries that comply with the RGPD, such as Andorra, to which we add the additional safeguard of activating the anonymisation of the IPs that collect the cookies.

We need to protect your rights, ours, those of our employees, or those of third parties (which may require disclosure to the police for security purposes or to health authorities to prevent the spread of disease, e.g. for contact tracing purposes). for example:

If our video surveillance cameras record a burglary at our premises, or

If a third party requests video surveillance images from us based on their legitimate interest in seeking effective judicial protection with respect to the commission of a crime or claiming compensation for damages based on the transferred images, and provided that said third party undertakes in writing to use them exclusively for the reporting of said crime or for the claim for damages suffered, and reducing the transfer of images to the minimum necessary to comply with the purpose pursued.

We need them to be processed by our service providers, on our behalf, and under the terms and conditions of the relevant processor contract.

You expressly authorise us to share data collected by advertising cookies with third-party advertising companies in order to publish their own advertisements in the spaces provided for this purpose on our website. We are jointly responsible for the collection of your personal data through these cookies, provided that you consent to it, since without our website such data would not be collected, and third party companies use them so that these third parties can show you more personalized ads according to the interests that can be deduced from your Internet browsing. In our cookies policy you will see which advertising cookies we offer you and how to configure them.

Any international transfers that we may need to make will comply with the provisions of the regulations in force at the time that apply to us.

Villa Valentina retains your personal data only for the duration of the processing that requires it and, thereafter, we will keep it blocked for as long as it takes for the legal liabilities that apply to us from time to time arising from the processing in question to expire (including the obligation to be able to demonstrate that we have complied with your request for the destruction of personal data).

For example:

We will retain video surveillance recordings for a maximum of 30 days when they contain no incidents, and, if exceptionally a security incident has occurred during that period or there is evidence of a crime (e.g. theft), we will extract a copy of the part of the recording that contains the incident which will be retained until it is handed over to the police or to the person concerned who requires it to prove their application for judicial protection.

We retain your email address for the purpose of sending you newsletters until you revoke your consent to receive them.

Where we do not have a legitimate purpose for processing some of your personal data, we will delete or anonymise it, and if this is not possible (for example, because it is backed up), we will store it securely and block it to isolate it from further processing until deletion is possible.

You have the right to obtain confirmation as to whether or not Villa Valentina holds any of your personal data.

We remind you that, when you share personal data with other data controllers, you must exercise your rights directly with those controllers, following the instructions provided in their own privacy policies. Specifically, in relation to the data that our cookies share with Google, we inform you that you can install in your Chrome, Internet Explorer, Safari, Firefox and/or Opera browser, the add-on to not send data from Google Analytics to Google Inc.

Here we explain what other rights you have and how to exercise them.

Your rights

In accordance with the provisions of the LQPD and the RGPD, you can ask us to enforce the following rights:

Access to your personal data.

Rectification of any of your personal data, specifying the reason.

Deletion of some or all of your personal data.

Limitation of the processing of your data, specifying the reason for the limitation.

Opposition to the processing of your personal data.

Portability of your data when the basis of legitimacy of its collection has been your consent or a contract.

The right not to be subject to automated individual decisions.

Where and how you can exercise your rights

You can exercise your rights:

By sending a written request, addressed to Villa Valentina to our postal address indicated in section 4 of this policy, indicating a means of contact so that we can respond to your request, or ask you for more information if necessary. We would be grateful if you could indicate on the envelope "Exercise of Personal Data Protection Rights".

By sending the form associated with the right you wish to exercise, or a message containing such information, sent to the email address villavalentinacapbonita@info.com, indicating in the subject line Exercise of Personal Data Protection Rights. You will find these forms further on in this section of the privacy policy.

In both cases, if we are unable to verify that you are who you say you are, we will ask you to please send us proof of your identity, to ensure that we respond only to the data subject or their legal representative.

Likewise, if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may lodge a complaint with the national supervisory authority in your country, or by contacting the (insert country) Data Protection Agency (APDA) for this purpose.

Forms for exercising your rights

In order to make it easier for you to exercise your rights, we recommend that you use one of the following application forms:

• Form for exercising the right of access
• Form for exercising the right of rectification
• Form for exercising the right to object (Model A, y model B)
• Form for exercising the right of cancellation
• Form for exercising the right to restriction of processing
• Form for exercising the right to portability
• Form for exercising the right not to be subject to automated individual decisions

By providing us with your details, you guarantee that they are accurate and complete. Likewise, you confirm that you are responsible for the veracity of the personal data that you have provided us with and that you will keep them suitably updated so that they correspond to your real situation, and that you are responsible for any false or inaccurate personal data that you may provide us with, as well as for any damages, direct or indirect, that may arise from their inaccuracy.

You may not provide us with personal data of other persons unless this is justified in relation to the services you request from us. In any case, if you provide us with the personal data of third parties, you are responsible for informing such third parties prior to providing us with their personal data. The information that you must provide to third parties whose data you provide to us must include all the provisions set out in this privacy policy, and it is you who is responsible for the lawfulness of such personal data and for conveying to the data subjects the rights they have in relation to their personal data.

In cases where you are required to provide us with personal data of a child under the age of 16 or of a person whose rights are restricted, in doing so you are obliged to obtain the consent of the holders of parental authority or guardianship. Without this authorisation, you are prohibited from providing us with any personal data of such persons.

We are fully committed to protecting your privacy and your personal data. We have drawn up a record of all personal data processing activities carried out by Villa Valentina, we have analysed the risk that each of these activities may pose to you, and we have implemented appropriate legal, technical and organisational safeguards to prevent, as far as possible, the alteration of your personal data, its misuse, loss, theft, unauthorised access, or unauthorised processing. We keep our policies appropriately up to date to ensure that we provide you with all the information we have about how we process your personal data, and to ensure that our staff are given appropriate guidance about how they should treat your personal data. We have signed data protection clauses and data processor agreements with all our service providers, taking into account the need for each to process personal data. We restrict access to personal data to those employees who really need to know it in order to carry out any of the processing mentioned in this policy, and we have trained them and made them aware of the importance of confidentiality and maintaining the integrity and availability of their information, as well as the disciplinary measures that any possible infringement in this area would imply.

We will update this policy from time to time to reflect any changes to the law or our processing. If the changes are material, we will notify you before they take effect by sending you a notice or by prominently posting a notice on this website, and you will have the option to exercise your rights as set out in a previous section. In any event, we encourage you to periodically review this privacy policy to understand how we are protecting your personal information.

If you have any questions about this policy, please do not hesitate to contact us at villavalentinacapbonita@info.com.