Privacy Policy

This legal text gives you details of how we collect and process your personal data through the use of our website https://www.mshoteles.com/, including any information you may provide to us through the site when you provide your data via the form enabled for this purpose.

By providing us with your data, we inform you that our services are not available to those who are legally prohibited from giving consent, so when you send us the forms you guarantee that you have the legal capacity to give consent.

Below, we inform you about the data protection policy of: Santa Clara Beach, SL

1. Data Controller.

Contact details of the responsible party:
Santa Clara Beach, SL, with Tax Identification Number (CIF): B29836590 and registered address at: Calle Los Nidos, nº 23, 29620 Torremolinos, Málaga, and telephone number: 952 38 47 00. We have a Data Protection Officer, whom you can contact at the email address: protecciondedatos@mshoteles.com

Registered in the Mercantile Registry of Malaga, on May 26, 2009, in Volume 1975, Book 888, Folio 62, S 8, Sheet MA 28143, I/A 4.

Santa Clara Beach, SL, is responsible for your data. (Hereinafter referred to as we or our).

2. What data do we collect?

The General Data Protection Regulation (GDPR) defines personal data as any information relating to an identified or identifiable natural person; that is, any information capable of identifying a person. This does not include anonymous or percentage-based data.

Personal data that may be collected directly from the interested party will be treated confidentially and will be incorporated into the corresponding processing activities, owned by Santa Clara Beach, SL

On our website we may process certain types of personal data, which may include:
- Identity details: name, surname, ID card and passport.
- Personal characteristics data: curriculum vitae.
- Contact information: email and phone number.
- Profile data: password.
- Marketing and communications data: preferences for receiving marketing communications from us and preferred means of communication.

We do not collect any data relating to special categories of personal data (those revealing your ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership and information concerning your health, genetic or biometric data).

If we require you to collect personal data by law or according to the terms of our contract and you refuse to provide it, we may not be able to perform the contract or provide the service, and you must notify us in advance.

3. How do we collect your personal data?

The means we use to collect personal data are:

- Through the form on our website, through our contact email, by phone or post, when:
- Request information about our products or services
- He's joining our club
- Request quotes
- You subscribe to one of our services or publications
- Send your CV

To ensure the quality of our portal, we reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we believe it does not meet these requirements or any other applicable law or regulation. If this occurs, we will attempt to explain the reasons for our decision, but we cannot guarantee that we will do so in every case.

- Through technology or automated interactions: On our site, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. This data is collected through cookies or similar technologies. For more information, please see our cookie policy here.

- Through third parties:
- Google: analytics data or search data. Outside the European Union.

4. Purpose and legitimacy for the use of your data.

The most common uses of your personal data are:
- For the formalization of a contract between Santa Clara Beach, SL and you.
- When you give your consent to the processing of your data.
- When we need them to comply with a legal or regulatory obligation.
- When necessary for our legitimate interest or that of a third party.

The User may revoke the consent given at any time by sending an email to protecciondedatos@mshoteles.com or by consulting the section on exercising rights below.

Below, we have included a table outlining how we will use your personal data and the legal basis for doing so, as well as the types of personal data we will process. We may process some personal data for additional legal reasons, so if you require further details, please email protecciondedatos@mshoteles.com

Form Purpose Data type Legitimacy for its treatment
Contact The purpose is to manage contacts and information requests received via the web - Name
- Email
- Phone		 Consent of the data subject (art. 6.1.a GDPR)

Pre-contractual measures (art. 6.1.b GDPR)

Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Newsletter The purpose is to manage the data provided for sending information about our services and promotions - Email Consent of the data subject (art. 6.1.a GDPR)

Pre-contractual measures (art. 6.1.b GDPR)

Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Send your resume Staff selection and job placement - Name
- Surnames
- Email
- Phone
- Curriculum Vitae		 Processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6.1b GDPR)

Processing necessary for compliance with a legal obligation to which the controller is subject (Art. 6.1.c GDPR)

Royal Legislative Decree 2/2015, of October 23, approving the consolidated text of the Workers' Statute Law
Join the Ms. More Social Club The purpose is the management of data provided to join the Club - Name
- Surnames
- Email
- Phone
- ID card/Passport
- Password		 Consent of the data subject (art. 6.1.a GDPR)

Pre-contractual measures (art. 6.1.b GDPR)

Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)
Access the club The purpose is the management of data provided to access the Club - Email
- Password		 Consent of the data subject (art. 6.1.a GDPR)

Pre-contractual measures (art. 6.1.b GDPR)

Processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6.1f GDPR)


Commercial communications: You will only receive communications if
- You requested information from us or contracted a product or service with us.
- If you provided us with your data, accepting the box enabled for this purpose in our form.
- Provided that you have not expressed your wish to stop receiving such communications.

We obtain your express consent before sending you any communication, and you can request at any time that we stop sending you communications by emailing protecciondedatos@mshoteles.com

When you choose to stop receiving our communications, your personal data will continue to be stored as a result of the contract you entered into to comply with legal requirements.

Purpose: We will only use your data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason, notifying you beforehand so that you are informed of the legal reason for its processing and provided that the purpose is compatible with the original purpose.

5. How long will we keep your data?

They will be kept for the time necessary to fulfill the purpose for which they were collected and to determine any potential liabilities that may arise from said purpose and the processing of the data. The provisions of the various regulations regarding retention periods will apply, insofar as they are applicable to this processing.

Data of subscribers by email or form: From the time the user subscribes until they unsubscribe.

6. Minors.

Santa Clara Beach, SL does not authorize individuals under 14 years of age to provide their personal data through the means enabled on this website (completion of web forms for service requests, contact forms, or by sending emails). Therefore, individuals who provide personal data using these means formally declare that they are over 14 years of age, and Santa Clara Beach, SL is exempt from any liability for non-compliance with this requirement.

If your child, who is under the established age limit, has provided personal information to Santa Clara Beach, SL, please contact us to request the exercise of your applicable rights.

In those cases where the services offered by Santa Clara Beach, SL are intended for children under 14 years of age, the means will be enabled to obtain the authorization of the parents or legal guardians of the child.

7. Exercising Data Protection Rights:

How to exercise these rights? Users may send a communication to the registered office of Santa Clara Beach, SL or to the email address protecciondedatos@mshoteles.com, including in both cases a photocopy of their ID card or other similar identification document, to request the exercise of the following rights:

- Access to your personal data: you can ask Santa Clara Beach, SL if it is using your personal data.
- To request their rectification , if they are not correct, or to exercise the right to be forgotten with respect to them.
- To request the limitation of the processing , in this case, they will only be kept by Santa Clara Beach, SL for the exercise or defense of claims.
- To object to its processing: Santa Clara Beach, SL will stop processing the data in the way you indicate, unless for legitimate reasons or for the exercise or defense of possible claims, they must continue to be processed.
- Regarding data portability : if you wish your data to be processed by another firm, Santa Clara Beach, SL, will facilitate the portability of your data to the new controller.

You may use the templates provided by the Spanish Data Protection Agency to exercise your aforementioned rights: Here

Complain to the AEPD's DPO: If you believe there is a problem with how Santa Clara Beach, SL is processing your data, you can first address your complaints to the Data Protection Officer, who will mediate for the correct resolution of the conflict.
- DPO Email: protecciondedatos@mshoteles.com
- Address: Calle Los Nidos, nº 23, 29620 Torremolinos Málaga.

If it is not possible to resolve the conflict, you can always go to the relevant supervisory authority, which in Spain is the Spanish Data Protection Agency.

We will request specific information from you to help us confirm your identity and ensure your right to access your personal data (or exercise any of the other rights mentioned above). This is a security measure to ensure that personal data is not disclosed to anyone who does not have the right to receive it.

We will process all requests within the legally mandated timeframe of one month. However, it may take us longer than one month if your request is particularly complex. In this case, we will notify you and keep you updated.

8. Data communication: provision of services.

In the course of our work, we may need the help of third parties, who will only process the data to provide the contracted service, and with whom we have the corresponding measures in place to guarantee your rights:
- Service providers that provide systems administration and information technology services.
- Professional advisors including lawyers, auditors and insurers who provide banking, legal, insurance and accounting consulting services.

All data processors to whom we transfer your data will respect the security of your personal data and will process it in accordance with the GDPR.

We only allow these processors to process your data for specific purposes and in accordance with our instructions. However, in the interest of transparency, you can request a list of these companies that provide us with services by emailing us at protecciondedatos@mshoteles.com

9. Data Security.

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Furthermore, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know such data. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have implemented procedures to deal with any suspected breach of your personal data and will notify you and the Supervisory Authority should a security breach occur, as regulated in the GDPR in Articles 33 and 34.