Privacy Policy

1. IDENTIFICATION

• Owner: Quinta San Francisco XXI. S.L. (hereinafter, “QSF”).
• NIF: B95970554
• Registered office: Carretera Hontanas 24, 09110 Castrojeriz (Burgos)
• Email: privacy@qsf.es
• Data Protection Delegate (DPO): The User can contact the DPO through the following address dpo@qsf.es, or by writing to the address of QSF for the attention of the “Data Protection Delegate”.

2. INFORMATION AND CONSENT

By reading this Privacy Policy, the User is informed about the way in which QSF collects, treats and protects the personal data that is provided through the website www.qsf.es (hereinafter, the “Website”, as well as the data of their connection and browsing through the Website (hereinafter, the “Browsing”) and any other data that they may provide in the future to QSF through the Accommodation Contract or any other channel enabled by QSF.

The User must carefully read this Privacy Policy, which has been written clearly and simply, to facilitate its understanding, and freely and voluntarily determine if they wish to provide their personal data, or those of third parties, to QSF.

3. OBLIGATION TO PROVIDE THE DATA.

The data requested in the forms accessible from the QSF Website are, in general, mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if they are not provided or are not provided correctly, the requested services will not be able to be provided.

4. FOR WHAT PURPOSES WILL QSF PROCESS THE USER’S PERSONAL DATA AND FOR HOW LONG?

Depending on the User’s requests, the personal data collected will be processed by QSF for the following purposes:

• Managing reservations, including payment processing (where appropriate) and managing booking requests and preferences.
• Managing subscriptions to the newsletter and subsequent submission of it.
• Managing contact requests with QSF through the channels provided for it.
• Sending tailored marketing communications, by electronic and / or conventional means, in those cases where the User expressly consents.
• Providing the contracted accommodation service, as well as any additional services requested during the stay.
• Managing surveys and / or evaluations regarding the quality of the services provided by QSF and / or the perception of its image as a company.

The User’s data will be kept for the period necessary for the fulfillment of each purpose or until the User requests their withdrawal from QSF, opposes or revokes their consent.

5. WHAT USER DATA WILL QSF PROCESS?

QSF may process the following categories of data, depending on the requests made by the User:

• Identifying data: name, surname
• Contact information: Postal address, mobile phone, email address.
• Personal characteristics: date of birth, sex, nationality, identity document or passport.
• Preference data.
• Payment details, necessary to pay for the reservation or to guarantee it, as well as to pay for the stay and any services associated with it.

In the event of registration and / or access through a third-party account, QSF may collect and access certain information from the User’s profile from the corresponding social network, solely for internal administrative purposes and / or for the purposes indicated above.

In the event that the User provides data from third parties, they declare that they have their consent and undertake to transfer to the interested party, the owner of said data, the information contained in this Privacy Policy, exempting QSF from any responsibility in this regard. However, QSF may carry out the necessary verifications to verify this, adopting the corresponding due diligence measures, in accordance with data protection regulations.

6. WHEN IS THE PROCESSING OF DATA LEGITIMIZED?

We will not carry out the data processing necessary for the fulfillment of the aforementioned purposes that require the consent of the User without the User’s consent.

Likewise, if the User withdraws their consent to any of the treatments, this will not affect the legality of the actions carried out previously.

To revoke said consent, the User may contact QSF through the following channels: By writing to Quinta San Francisco XXI S.L. Carretera Hontanas 24, 09100 Castrojeriz, or by e-mail to the address privacy@qsf.es, in both cases with the subject line “Data Protection”.

In the cases in which it is necessary to process the User’s data for the fulfillment of a legal obligation or for the execution of the existing contractual relationship between QSF and the User, such processing would be legitimate because it is necessary for the fulfillment of said purposes. For its part, the data processing linked to surveys and / or evaluations performed regarding the quality of the services provided by QSF and / or the perception of its image as a company will be carried out based on their being a legitimate business interest.

7. TO WHICH RECIPIENTS WILL THE USER DATA BE COMMUNICATED?

User data may be communicated to:

• Investee companies or the QSF business group, solely for internal administrative purposes and / or for the aforementioned purposes.
• Entities operating the hotels managed by QSF or in franchise, solely for internal administrative purposes and / or for the purposes indicated above.
• Suppliers of QSF or of the hotel operators as necessary for the adequate fulfillment of the legal obligations and / or of the aforementioned purposes.
• Partners and collaborating companies of QSF for the fulfillment of the aforementioned purposes and / or, if authorized, for the sending of commercial communications.
• Public Administrations, in the cases provided by Law.

The recipients indicated in this section may be located within or outside the European Economic Area, in the latter case being duly legitimized international data transfers.

8. USER LIABILITY

Each User:

• Guarantees that they are of legal age or legally emancipated where appropriate, fully capable, and that the data they provide to QSF is true, accurate, complete and up-to-date. For these purposes, the User is responsible for the veracity of all the data that they communicate and will keep the information provided suitably updated, in such a way that it responds to their real situation.
• Guarantees that they have informed the third parties who provide their data, if they do, of the aspects contained in this document. Likewise, they guarantee that they have obtained their authorization to provide their data to QSF for the indicated purposes.
• Will be responsible for the false or inaccurate information that they provide through the Website and for the direct or indirect damages that this causes to QSF or to third parties.

9. COMMERCIAL AND PROMOTIONAL COMMUNICATIONS

One of the purposes for which QSF processes User data will be to send commercial communications, by electronic and / or conventional means, with information regarding products, services, promotions, offers, events or relevant news for Users. Whenever any communication of this type is made, it will be directed solely and exclusively to those Users who have authorized their reception and / or who have not previously expressed their refusal to receive them.

To carry out the above work, QSF may analyze the data obtained, in order to develop User profiles that allow the customization of products and services that may be of interest to each User, to be defined in greater detail.

In the event that the User wishes to stop receiving commercial or promotional communications from QSF, they can request the cancellation of the service by sending an email to the following email address: privacy@qsf.es, as well as indicating their refusal to receive the same through the “unsubscribe” option provided in each of the commercial communications sent.

10. EXERCISE OF RIGHTS

The User can send a letter to Quinta San Francisco XXI S.L. Carretera Hontanas 24, 09100 Castrojeriz, or by email to the address privacy@qsf.es, in both cases, with the subject matter “Data Protection”, attaching a photocopy of their identity document or valid passport, at any time and free of charge, to:

• Revoke the consents granted.
• Obtain confirmation about whether QSF is treating personal data concerning the User or not.
• Access their personal data.
• Rectify inaccurate or incomplete data.
• Request the deletion of their data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Obtain from QSF the limitation of data processing when any of the conditions provided in the data protection regulations are met.
• Obtain human intervention, to express their point of view and to challenge the automated decisions made by QSF.
• Request the portability of their data.

Likewise, the User is informed that at any time they may file a claim regarding the protection of their personal data before the competent supervisory authority.

11. SECURITY MEASURES

QSF will treat the User’s data at all times in an absolutely confidential way, keeping the mandatory duty of secrecy with respect to the data in accordance with the applicable regulations. QSF will adopt for this purpose the necessary technical and organizational measures that guarantee the security of the User’s data and prevent its alteration, loss, treatment or unauthorized access, in each case considering the state of technology, the nature of the stored data and the risks to which they are exposed.