Privacy Statement

Effective Date: April 2018

This Privacy Statement applies to https://www.hotelcasavirreyes.com owned and operated by Hotel Casa Virreyes. This Privacy Statement describes how we collect and use the information, which may include personal data, that you provide on our web site. It also describes the options available to you regarding our use of your personal data and how you can access and update this data.

Data collection

The types of personal data we collect include:

• Your first name, last name, email address, telephone number, and home address; Credit card details (card type, credit card number, name on card, expiration date, and security code); Data of the guest's stay, including the date of arrival and departure, special requests made, comments on their service preferences (including room preferences, facilities or any other services used); Data that you provide regarding your marketing preferences or in the course of your participation in surveys, contests or promotional offers;

You can always choose what personal data (if any) you want to provide to us. However, if you choose not to provide certain details, some of your transactions with us may be affected.

Data we collect automatically

When using our website, we also collect information automatically, some of which may be personal data. This includes data such as language settings, IP address, location, device settings, device operating system, registration information, usage time, requested URL, status report, user agent (information about browser version), system operating, result (viewer or reservation), browsing history, user reservation ID and type of data displayed. We may also collect data automatically through cookies. For information on how we use cookies, click here.

Processing purposes

We use your personal data for the following purposes:

• A. Reservations: We use your personal data to complete and manage your reservation online B. Customer Service: We use your personal data to provide customer service. C. Guest Comments: We may use your contact details to invite you by email to write a guest comment after your stay. This can help other travelers choose the accommodation that suits them best. If you submit a guest review, your review may be published on our website. Marketing activities: We also use your data for marketing activities, as permitted by law. When we use your personal data for direct marketing purposes, such as business newsletters and marketing communications about new products and services or other offers that we think may be of interest to you, we include an unsubscribe link that you can use if you do not wish to. us to send messages in the future. Other Communications: There may be other times when we contact you by email, post, telephone, or text message, depending on the contact details you share with us. There may be several reasons for this:

to. We may need to respond to and manage the requests you have made. If you have not completed an online reservation, we may send you an email reminder to continue with your reservation. We believe that this additional service is useful to you because it allows you to continue with a reservation without having to search for the accommodation again or fill in all the reservation details from scratch. When you use our services, we may send you a questionnaire or invite you to provide a review of your experience with our website. We believe that this additional service is useful for you and for us, as we may improve our website based on your feedback.

• F. Analysis, improvements and research: We use personal data for research and analysis. We can involve a third party to do this on our behalf. We may share or disclose the results of such research, including to third parties, in an anonymous and aggregated way. We use your personal data for analytical purposes, to improve our services, to improve the user experience and to improve the functionality and quality of our online travel services. Security, fraud detection and prevention: We use the information, which may include personal data, to prevent fraud and other illegal or infringing activities. We also use this information to investigate and detect fraud. We may use personal data for security and risk assessment purposes, including user authentication. For these purposes, personal data may be shared with third parties, such as law enforcement authorities as permitted by applicable law and outside advisers. H. Legal and Compliance: In certain cases, we need to use the information provided, which may include personal data, to handle and resolve legal disputes or complaints, for regulatory investigations and compliance, or to enforce agreements or to comply with legal requests. of law enforcement to the extent required by law.If we use automated means to process personal data that produces legal effects or significantly affects you, we will implement appropriate measures to safeguard your rights and freedoms, including the right to obtain the human intervention.

Legal bases

• In view of purposes A and B, we rely on the performance of a contract: the use of your data may be necessary to perform the contract you have with us. For example, if you use our services to make an online reservation, we will use your data to fulfill our obligation to complete and manage that reservation under the contract we have with you. In view of the purposes of CH, we rely on your legitimate interests: We use your data for our legitimate interests, such as providing you with the best appropriate content for the website, emails and newsletters, to improve and promote our products and services and the content from our website, and for administrative, fraud detection and legal purposes. When we use personal data to serve our legitimate interests, we will always balance your rights and interests in protecting your information with our rights and interests. With respect to purpose H, we also rely, where applicable, on our obligation to comply with the law.

Where necessary under applicable law, we will obtain your consent before processing your personal data for direct marketing purposes.

If necessary in accordance with applicable law, we will ask for your consent. You can withdraw your consent at any time by contacting us at any of the addresses at the end of this Privacy Statement.

If you wish to object to the processing set out in CF and there is no opt-out mechanism available to you directly (for example, in your account settings), to the extent applicable, please contact karmenlr@stayberry.com.

Data retention

We will retain your information, which may include personal data for as long as we deem necessary to provide you services, comply with applicable laws, resolve disputes with any party, and otherwise as necessary to enable us to conduct our business, including to detect and prevent fraud or other illegal activities. All personal data that we retain will be subject to this Privacy Statement. If you have any questions about a specific retention period for certain types of personal data that we process about you, please contact us using the contact details below.

Changes to the Notice

Just as our business changes constantly, this Privacy Statement may also change from time to time. If you would like to see changes made to this Privacy Statement from time to time, we invite you to access this Privacy Statement to view the changes. If we make material changes or changes that will have an impact on you (for example, when we start to process your personal data for purposes other than those set out above), we will contact you before starting that processing.