In compliance with the obligations established in Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, you are provided with information regarding the processing of your personal data:

Who is responsible for processing your data?

PROMOCIONES TURISTICAS MONTEMAR, S.A.. Company Number: A33012170

Address: C/ JOSE ENRIQUE ROZAS GUIJARRO, 8 33500, LLANES.

Tel: 985400100

Email: laquintaesencia@hotelesmontemar.com

Web: www.hotelquintaesencia.com

Data Protection Officer: –

You can address us in any way you like.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of the modifications.

If you are part of any of the following groups, please consult the drop-down information:

+ GUESTS

For what purposes will we process your personal data?

We inform you that your data will be processed for the purpose of managing your reservation, your stay at the hotel and ensuring payment of expenses arising from said stay.

Your data will be communicated to the Security Forces and Corps in compliance with current legislation, as well as to the travel agencies or operators involved.

The data will be retained for a minimum of 6 years in compliance with tax, commercial, consumer, and traveller log regulations.

What is the legal basis for processing your data?

The legal basis is your consent.

+ WEBSITE OR EMAIL CONTACTS

What data do we collect via the website?

We can process your IP address, what operating system or browser you use, and even the duration of your visit, anonymously.

If you provide us with data via the contact form, you will be identified so we can contact you if necessary.

For what purposes will we process your personal data?

• To answer your queries, requests or demands.
• Manage the requested service, respond to your request, or process your application.
• Information via electronic means, relating to your request.
• Commercial information or event information by electronic means, provided there is express authorisation.
• Carry out analysis and improvements on the website, regarding our products and services. Improve our commercial strategy.

What is the legal basis for processing your data?

The data subject's acceptance and consent: In those cases where, in order to make a request, it is necessary to fill in a form and click on the submit button, doing so will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to said form or acceptance of the privacy policy.

All our forms feature the * symbol on mandatory data. If you do not provide these fields, or do not tick the privacy policy acceptance checkbox, the submission of the information will not be permitted. It generally takes the following formula: “□ I am over 14 and have read and accept the Privacy Policy.".

+ CUSTOMERS

For what purposes will we process your personal data?

• Budget preparation and its monitoring through communication between both parties.
• Information via electronic means, relating to your request.
• Commercial information or event information by electronic means, provided there is express authorisation.
• To manage the administrative, communications, and logistics services provided by the Manager.
• Invoicing and filing the relevant taxes.

• Carry out the corresponding transactions.
• Control and recovery management.

+ SUPPLIERS

For what purposes will we process your personal data?

• Information via electronic means, relating to your request.
• Commercial information or event information by electronic means, provided there is express authorisation.
• To manage the administrative, communications, and logistics services provided by the Manager.
• Billing.

• Carry out the corresponding transactions.
• Timely invoicing and tax declarations.
• Control and recovery management.

What is the legal basis for processing your data?

The legal basis is the acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products through any channel.

+ SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?

• To answer your queries, requests or demands.
• Manage the requested service, respond to your request, or process your application.
• To connect with you and build a community of followers.

What is the legal basis for processing your data?

The acceptance of a contractual relationship within the relevant social network environment, and in accordance with its Privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

X http://x.com/privacy

LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Pinterest https://about.pinterest.com/es/privacy-policy

YouTube http://www.google.com/intl/es/policies/privacy/

For how long are we going to keep the personal data?

We can only view or restrict your data because you have a specific profile. We will process them for as long as you allow us by continuing to follow us, being friends or clicking “like”, “follow” or similar buttons.

Any rectification of your data, restriction of information, or posts must be carried out through your profile or user settings within the social network itself.

JOB SEEKERS

For what purposes will we process your personal data?

• Organisation of selection processes for the recruitment of employees.

• To invite you for job interviews and assess your application.
• If you have given us your consent, we may share it with partner or affiliated companies, with the sole aim of helping you find employment.
• By ticking the privacy policy acceptance checkbox, you give us your consent to pass on your job application to the entities that make up the group of companies in order to include you in their recruitment processes

Furthermore, we would like to inform you that one year after receiving your curriculum vitae, we will proceed with its secure destruction.

What is the legal basis for processing your data?

The legal basis is your unequivocal consent, by sending us your CV.

+ CCTV

For what purposes will we process your personal data?

• Ensure the security of and access to the premises.
• Monitoring of the work of employees and other similar personnel.
• Evaluate the quality of the service.

What is the lawful basis for processing your personal data?:

• Protect the public interest

To whom may we disclose your personal data?

State law enforcement agencies, and/or the judges and courts:

• In cases of the commission of criminal acts, verification of gross misconduct, and similar situations.
• To exercise legitimate actions based on our right to effective judicial protection.

For how long are we going to store your personal data?

For a maximum of a 30-day period.

Do we include personal data of third parties?

No, as a general rule we only process data provided to us by the data subjects themselves. If you provide us with third-party data, you must, beforehand, inform those individuals and obtain their consent, otherwise you release us from any liability for the breach of this requirement.

And data on minors?

We do not process data of minors under the age of 18. Therefore, please refrain from providing such data if you are under that age or, where applicable, from providing data of third parties who are under the aforementioned age. PROMOCIONES TURISTICAS MONTEMAR, S.A. disclaims any liability for the breach of this provision.

Shall we communicate by electronic means?

• We will only carry them out to manage your request, if it is one of the contact methods you have provided us.
• If we undertake commercial communications, they will have been previously and expressly authorised by you.

What safety measures do we apply?

You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle, and we have implemented all available technical means and measures, in accordance with the state of the art, to prevent the loss, misuse, alteration, unauthorised access, and theft of Personal Data.

Who will your data be communicated to?

Your data will not be passed on to third parties, except where there is a legal obligation. Specifically, they will be communicated to the State Agency for Tax Administration and to banks and financial institutions for the collection of the service provided or product acquired, as well as to the data processors necessary for the execution of the agreement.

In the event of a purchase or payment, if you choose any application, website, platform, bank card or other online service, your data will be passed on to that platform or processed within its environment, always with the utmost security.

When instructed, the web development and maintenance company, or the hosting company, will have access to our website. They will have signed a service agreement that obliges them to maintain the same level of privacy as us.

What rights do you have?

• To know if we are processing your data or not.
• To access your personal data.
• To request the rectification of your data if they are inaccurate.
• To request the erasure of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
• To request the restriction of processing of your data, in some cases, in which event we shall only retain it in accordance with current regulations.
• To transfer your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send it to the new controller you designate. This is only valid in certain cases.
• To lodge a complaint with the Spanish Data Protection Agency or competent supervisory authority, if you believe we.
• To revoke consent for any treatment for which you have given consent, at any time.

If you modify any details, please let us know so that we can keep them up to date.

Would you like a form for exercising rights?

• We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use those drawn up by the Spanish Data Protection Agency or third parties.
• In the event that there are reasonable doubts regarding the applicant's identity, these forms must be electronically signed or accompanied by a photocopy of their ID document.
• Forms can be submitted in person, sent by post or by email to the address of the Data Controller at the beginning of this text.

How long do we take to reply to your Exercise of Rights?

It depends on the law, but at the latest within one month of your request, and two months if the matter is very complex and we notify you that we need more time.

Shall we have some cookies?

If we use cookies other than those that are strictly necessary, you can consult the cookie policy at the corresponding link from the homepage of our website.

How long are we going to keep your personal data?

• Personal data will be retained for as long as you remain associated with us.
• Once you unsubscribe, the personal data processed for each purpose will be kept for the legally established periods, including the period in which a judge or court may require them, taking into account the statute of limitations for legal actions.
• The processed data will be kept until the aforementioned legal periods expire, should there be a legal obligation for retention, or if no such legal period exists, until the data subject requests its erasure or withdraws the consent granted.
• We will keep all information and communications relating to your purchase or the provision of our service for the duration of the product or service warranties, in order to handle any potential claims.

Date of last modification: 27-04-2026