PRIVACY AND DATA PROTECTION POLICY

In accordance with the provisions in the General Data Protection Regulation GDPR EU 679/2016 and the Organic Law 3/2018 of December 5, on Personal Data Protection and Digital Rights Guarantee, the following information about the processing of your personal data is provided:

Who is responsible for processing your personal data?

Data controller: SANS GAYÀ HERMANOS SL, Tax ID: B07614373, Address: PAGUERA BOULEVARD, No. 36, Postal Code: 07160, PAGUERA, Telephone 971686093, Email: booking@florhotels.com. DATA PROTECTION OFFICER: CONTACT: / http://www.protecmir.com / EMAIL: protecmirlegal@protecmir.com.

What data do we process?

At SANS GAYÀ HERMANOS SL, we handle the personal data provided by you through the completion of forms enabled for this purpose on this website, personal data derived from the provision or contracting of our services or products and/or the personal data derived from the commercial relationship you maintain with us.

Additionally, we process personal data generated in the context of your activity on our website, including your browsing data obtained through the website.

It is important for us to keep your personal data up to date. You have the obligation to keep us informed about any changes or errors in your personal data as soon as possible by contacting us at the following email address: booking@florhotels.com.

For what purpose do we process your personal data?

Purpose: SANS GAYÀ HERMANOS SL may process your personal data for the following purposes:

Management and maintenance of the services provided through the website.
Management and handling of inquiries and information requests made by users through the contact form. The email address and personal data that you provide us through the contact form on the website will be used exclusively to address the queries you raise through this means.
Compliance with applicable legal obligations.
Sending commercial communications and newsletters, as well as advertising our services and products.
Management of the hiring of our services and/or products.
Management of information requests or budget requests for our services or products.
Registration in the user area.
Reception and management of your Curriculum Vitae to participate in the personnel selection processes of the entity.
In case of having provided consent and in order to offer services according to your interests, your personal data may be used to create a commercial profile. Automated decisions will not be made based on this profile.

We retain your personal data in our systems and files for the necessary time to carry out the purposes of the processing and to comply with the provisions of the applicable legislation. Your personal data will be kept as long as there is a contractual and/or commercial relationship with you, or as long as you do not exercise your right to erasure and/or limitation of the processing of your data. The retention period for personal data will vary depending on the purposes of the processing and, in general:

The personal data that you provide to us in the cases of contracting our services or products will be kept for the duration of the contractual relationship and, once it has ended, for the period of limitation of any legal actions that may arise from it.
The personal data that you provide us to manage information requests or inquiries through the contact form will be kept until you request its deletion or cancellation.
The personal data you provide us to subscribe to our Newsletter or informational bulletins will be retained as long as you do not request its deletion, opposition, and/or limitation.
The personal data that you provide us by sending your curriculum vitae will be retained for a period not exceeding 1 year.
The personal data obtained from your browsing and consumption habits, as well as the commercial profile obtained, will be retained as long as you do not request its deletion or cancellation.

Your personal data will be retained as long as they are useful for the purposes indicated, and, in any case, during the legal periods and necessary time to address potential liabilities arising from the processing.

What is the legal basis for processing your data?

Legitimization: The legitimization for processing your personal data is based on:

The execution and maintenance of a contractual and commercial relationship with you, such as contracting of products and services from the entity, management and requests for quotes of the entity's products and/or services, all in accordance with the provisions of Article 6.1.B of the GDPR (EU) 679/2016 and the Organic Law 3/2018, of December 5 (LOPDPGDD).
Your express consent for one or more purposes, such as the sending of advertising communications or newsletters from ourselves or third parties, management of CV submissions, participation in activities or competitions, all in accordance with the provisions of article 6.1.A of the GDPR (EU) 679/2016 and the Organic Law 3/2018, of December 5 (LOPDPGDD).
The compliance with various legal obligations, all in accordance with the provisions of article 6.1.C of the GDPR (EU) 679/2016 and the Organic Law 3/2018, of December 5 (LOPDPGDD).
The satisfaction of legitimate interests pursued by the data controller or by a third party, for example, for security reasons, to improve our services and/or to manage your requests or inquiries.

During the data collection process, and at each location on the web where personal data is requested, the user will be informed, either through a hyperlink or by including the appropriate references in the form itself, of the mandatory or non-mandatory nature of the collection of their personal data.

The personal information requested in the forms on the website are generally mandatory (unless stated otherwise in the required field) in order to fulfill the established purposes. Therefore, if the requested personal information is not provided, or not provided correctly, the purposes cannot be met.

There is an obligation to provide your personal data in cases of hiring a service or product, and/or in those cases of requesting estimates or offers.

The sending of advertising communications, newsletters or informational bulletins about our products and services is based on the consent that we request from you, and in no case will the withdrawal of this consent condition the contractual or commercial relationship that you maintain with us.

If you have authorized us to send advertising about our services and products, your personal data may be used to manage the sending of advertising offers and newsletters via electronic means. In these cases, article 20 and 21 of law 34/2002, of July 11, on information society services and electronic commerce, apply to the use and treatment of your personal data with the aim of managing the sending of advertising through electronic means.

In case you have selected the option to receive advertising, or if you have subscribed to our newsletter or information bulletin, you can cancel this option at any time.

Who will your data be communicated to?

Recipients: Generally, your personal data will not be communicated to any third party outside of the entity, except when legally obliged. However, please be informed that third-party providers may have access to your personal data as data processors, within the framework of providing a service for the entity responsible for processing. You may request a full list of recipients who may receive your personal data as data processors or third-party recipients by transfer to the email: booking@florhotels.com. In addition to the above, the entity may make transfers or communications of personal data to meet its obligations to public administrations in cases that are required, in accordance with current legislation.

To carry out the data processing activities detailed above, we may transfer the data to countries outside of the European Economic Area (EEA), and store said data in physical or digital databases managed by entities acting on our behalf. The database management and data processing are limited to the purposes of the processing, and are carried out in accordance with the current laws and regulations on data protection. In the event that the data is sent outside of the EEA, the company will use suitable contractual measures to guarantee the protection of the data, which may include, among others, contracts based on the standard data protection clauses adopted by the European Commission applicable to the sending of personal data outside of the EEA.
By contracting our services, you are authorizing us to transfer your personal data to the company FLEXMYROOM INSURETECH, S.L., domiciled in Benidorm (03503 – Alicante), Calle Gerona, 13, Local CA 18, with CIF number B42687616, for the sole purpose of protecting your reservation through the insurance services and products it offers. Only the strictly necessary data for the activation of the insurance (name and surname, identity number, postal address and contact details) will be transferred, in our common interest. This entity will cancel your personal data once the service has ended and the legally established periods have been met. You may exercise your rights of access, rectification, deletion, limitation of processing, data portability, and opposition to processing and to not be subject to automated decisions at the e-mail address datos@flexmyroom.com.

This reservation system is managed by Mirai España S.L., which guarantees the protection of any type of personal data provided by users, in accordance with the provisions of the General Data Protection Regulation.

All data provided by users to MIRAI SPAIN S.L., or its staff, will be included in an automated personal data file created and maintained under the responsibility of MIRAI SPAIN S.L., essential for providing the services requested by the users.

The provided data will be processed according to the terms set out in the General Regulation on Personal Data Protection. In this regard, MIRAI ESPAÑA S.L. has adopted the legally required levels of protection and has installed all available technical measures to prevent loss, misuse, alteration, unauthorized access by third parties. Nevertheless, the user should be aware that security measures on the Internet are not impregnable. In the event that the user deems it appropriate for his personal data to be transferred to other entities, the user will be informed of the data transferred, the purpose of the file and the name and address of the transferee, so that he can give his unequivocal consent in this respect.

In compliance with the provisions of the GDPR, the user may exercise their rights of access, rectification, cancellation/deletion, opposition, limitation or portability. To do this, they should contact Mirai España S.L., at c/ Fuencarral 6 4th. 28004 Madrid or protecciondatos@mirai.com.

In order to ensure compliance with regulations regarding the protection of personal data, Mirai Spain S.L. has received consulting and advisory services from www.clickdatos.es.

What rights do you have regarding the processing of your personal data?

Rights: You have the right to access your personal data, as well as to request the correction of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, you may request a limitation on the processing of your data, in which case we will only keep it for the exercise or defense of claims. Similarly, and for reasons related to your particular situation, you can oppose the processing of your data, in which case your personal information will stop being processed for those purposes regarding which you have expressed your opposition. When technologically feasible, you can request the portability of your data to another data controller. To exercise these rights, in accordance with current legislation, you can send a letter by mail, attaching a copy of a document attesting your identity (ID), to SANS GAYÀ HERMANOS SL at BULEVAR PAGUERA, Nº 36, CP: 07160, PAGUERA or to the email booking@florhotels.com. You have the right to file a Complaint with the Control Authority: Spanish Agency for Data Protection (www.agpd.es). Origin of Personal Data: the interested party.

You expressly agree to the inclusion of personal data collected during browsing on the website and/or provided by filling out any form, as well as those derived from a possible business relationship, in the automated personal data files of the entity.

The entity guarantees the confidentiality of users’ personal data. However, the entity will disclose to the competent public authorities the personal data and any other information in its possession or accessible through its systems that may be required, in accordance with the legal and regulatory provisions applicable to the case. Personal data may be stored in the files owned by SANS GAYÀ HERMANOS SL even once the commercial relations formalized through the entity’s website have ended, exclusively for the purposes indicated above and, in any case, during the legally established time periods, available to administrative or judicial authorities.

Use of social networks

When you interact with our website through various social networks, such as when you connect with us, follow us, or share our content on social networks (Facebook, Twitter, LinkedIn, Instagram, or others), we may receive information from these social networks, including information about your profile, user ID associated with your social network account, and any other public information that you allow to be shared with third parties on the social network.

The entity uses social networks to inform about the services it offers, as well as any other activity or event that is carried out and wants to be promoted, but at no time will it obtain personal data from the users who interact on them, unless there is express authorization.

These data are only used within the social network itself and are not incorporated into any processing system.

Social networks have their own terms of use and privacy policies that you are obliged to take into account and ensure compliance with if you use them.

Below we provide you with information on the processing of your personal data by SANS GAYÀ HERMANOS SL.

Information from articles 13 and 14 of the GDPR related to the processing of personal customer / reservation data.

In accordance with the provisions of the General Data Protection Regulation GDPR EU 679/2016 and the Organic Law 3/2018 of 5th December, on Personal Data Protection and Guarantee of Digital Rights, the following information is provided regarding the processing of your personal data:

Responsible: SANS GAYÀ HERMANOS SL.
TIN/VAT: B07614373
Address: PAGUERA BOULEVARD, No. 36, Postal Code: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL., we process your personal data in order to provide you with the hotel accommodation service at our establishment, manage the sending of information and commercial prospecting, and carry out the billing for the contracted services. In order to offer you services according to your interests, we will develop a commercial profile based on the information provided. No automated decisions will be made based on this profile. The personal data provided will be kept as long as the business relationship is maintained and its deletion is not requested, for a period of 5 years from the last contract and/or reservation made. In any case, your personal data will be kept as long as they are useful for the indicated purpose, and, in any case, during the legal periods and for the necessary time to attend to possible liabilities arising from the processing.

Legitimacy: The processing of your personal data is based on the execution of a contract in which the interested party is a part or for the application, at their request, of pre-contractual measures. Additionally, we must process your data to comply with a legal obligation applicable to the data controller. In any case, you have given your consent to process your personal data for one or several specific purposes, in accordance with the provisions of the General Data Protection Regulation (GDPR) EU 679/2016 (Art. 6.1.A, B, and C) and Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPDPGDD). Law 1/1992 is also applicable, modified by Organic Law 4/2015, of March 30, on the Protection of Citizen Security. The Information Society Services Law 34/2002 articles 20 and 21 are also applicable for the sending of commercial offers through telecommunications. The prospective offer of services is based on the consent requested from you, and under no circumstances will the withdrawal of this consent condition the contract for the purchase and/or provision of service. There is an obligation to provide personal data, and otherwise, the hotel accommodation service cannot be provided and/or the requested offer facilitated. The prospective offer of products and services is based on the consent requested from you, and under no circumstances will the withdrawal of this consent condition the contract for the purchase of a product and/or provision of service.

Recipients: The data will not be communicated to any third party outside the entity, except by legal obligation. However, we inform you that third-party providers may have access to your personal data, as data processors, in the context of providing a service for the entity responsible for the processing. You can request information regarding the data processors at the following email address: booking@florhotels.com. Your personal data will be communicated to the State Security Secretary and may only be processed by Security Forces and/or competent authorities. There is no provision for data transfer to third countries.

Rights: Interested individuals have the right to access their personal data, as well as to request the correct inaccurate data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes it was collected. In certain circumstances, interested individuals can request the limitation of their data processing, in such case we will only keep it for the exercise or defense of claims. Also, for reasons related to their particular situation, interested individuals may oppose the processing of their data in which case their personal information will no longer be processed for those purposes against which they have expressed their opposition. When technically possible, the interested party may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, interested individuals can contact us by postal mail, attaching a copy of a document proving their identity (ID), to SANS GAYÀ HERMANOS SL. at BULEVAR PAGUERA, Nº 36, C.P .: 07160, PAGUERA, or by email at booking@florhotels.com. You have the right to file a complaint with the Control Authority: Spanish Agency for Data Protection (www.agpd.es). Origin of Personal Data: the interested party themselves.

Information from articles 13 and 14 of the GDPR regarding the processing of personal data in a passenger report.

In accordance with the provisions of Regulation (EU) 679/2016, the new General Data Protection Regulation (GDPR), and Organic Law 3/2018, of December 5, on Personal Data Protection and the guarantee of digital rights (LOPDPGDD), the following information is provided on the processing of your personal data:

Responsible: SANS GAYÀ HERMANOS SL.
Tax Identification Number: B07614373
Address: BULEVAR PAGUERA, No. 36, ZIP Code: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL, we handle the information you provide us with in order to provide the requested hotel accommodation service and meet the documentation and information record-keeping obligations set forth in the Royal Decree 933/2021, of October 26, which establishes the documentation and information record-keeping obligations for individuals or legal entities that carry out accommodation and motor vehicle rental activities. No automated decisions will be made based on this profile. The data you provide us with and we process on a computer record must be retained for a period of three years from the completion of the contracted service or provision. In any case, your personal data will be retained as long as they are useful for the indicated purpose, and, in all cases, for the legal periods and for the time necessary to address possible liabilities arising from the processing.

Legitimization: The processing of your personal data is based on the execution of a contract in which the interested party is part or for the application, at the request of this, of pre-contractual measures. Also, we need to process your information to comply with a legal obligation applicable to the data controller in accordance with Regulation (EU) 679/2016 (art. 6.1. B and C) and LOPDPGDD. Law 1/1992, as amended by Organic Law 4/2015, of March 30, on the protection of citizen security, applies. Royal Decree 933/2021, of October 26, also applies. Organic Law 7/2021, of May 26, on the protection of personal data processed for the purposes of prevention, detection, investigation, and prosecution of criminal offenses and enforcement of criminal penalties, also applies. The obligation to provide personal data exists and, otherwise, the hotel accommodation service cannot be provided.

Recipients: The data will not be communicated to any third party outside the entity, except by legal obligation. However, we inform you that third-party providers may have access to your personal data, as data processors, within the framework of providing a service for the entity responsible for data processing. You can request information regarding the data processors at the email: booking@florhotels.com. Your personal data will be communicated to the Secretary of State for Security and its treatment may only be carried out by the Security Forces and/or competent authorities. There is no provision for data transfer to third party countries.

Rights: Interested parties have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims. Likewise, for reasons related to their particular situation, interested parties may object to the processing of their data, in which case their personal information will stop being processed for those purposes for which they have expressed their opposition. When technically possible, the interested party may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties can contact by postal mail, attaching a copy of a document proving their identity (ID), to SANS GAYÀ HERMANOS SL. at BULEVAR PAGUERA, NO. 36, POSTCODE: 07160, PAGUERA, or by email to booking@florhotels.com. You have the right to file a complaint with the Control Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the interested party himself.

Information on articles 13 and 14 of the GDPR regarding the processing of personal data in satisfaction surveys.

In accordance with the provisions of Regulation (EU) 679/2016, the new General Data Protection Regulation (GDPR), and Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDPGDD), the following information is provided to you about the processing of your personal data:

Responsible: SANS GAYÀ HERMANOS SL.
Tax Identification Number: B07614373
Address: BULEVAR PAGUERA, No. 36, ZIP: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL., we process the information you provide us in order to know your level of satisfaction regarding your stay in our establishment. In order to offer you products and services according to your interests, we will create a business profile based on the provided information. No automated decisions will be made based on this profile. The personal data provided will be kept as long as the business relationship is maintained and its deletion is not requested by the interested party, for a period of 5 years from the last contract and/or booking made. In any case, your personal data will be kept as long as they are useful for the purpose indicated, and, in all cases, during the legal periods and for the time necessary to attend to possible responsibilities arising from the processing.

Legitimation: The processing of your personal data is based on your consent for one or several specific purposes, in accordance with the provisions of Regulation (EU) 679/2016 (art. 6.1. A) and the LOPDPGDD. Law 34/2002, of July 11, on information society services and electronic commerce, articles 20 and 21, is applicable to the sending of commercial offers via telecommunications. The prospective offer of Services is based on the consent requested from you, with withdrawal of this consent not conditioning the acquisition and/or provision of service in any way. There is an obligation to provide consent in order to carry out prospective offers and send you commercial information.

Recipients: The data will not be communicated to any third party outside the entity, except for legal obligation. However, we inform you that third-party providers may have access to your personal data, as data processors, within the framework of providing a service for the data controller. You can request information about the data processors at the email address: booking@florhotels.com. In addition to the above, the entity may make assignments or communications of personal data to meet its obligations to public administrations in cases where this is required by law. There is no provision for data transfer to third countries.

Rights: Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims. Likewise, and for reasons related to their particular situation, the interested parties may oppose the processing of their data in which case their personal information will no longer be processed, for those purposes regarding which they have expressed their opposition. When technically possible, the interested party can request the portability of their data to another data controller. To exercise these rights, in accordance with current legislation, interested parties can get in touch by postal mail, attaching a copy of a document proving their identity (ID), to SANS GAYÀ HERMANOS SL. at BULEVAR PAGUERA, No. 36, P.C .: 07160, PAGUERA, or by email to booking@florhotels.com. You have the right to submit a claim to the Control Authority: Spanish Agency for Data Protection (www.agpd.es). Source of Personal Character Data: the interested party itself.

Information on articles 13 and 14 of the GDPR related to the processing of personal data for accounting / billing purposes.

In accordance with the provisions of the General Data Protection Regulation GDPR EU 679/2016 and Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights, the following information on the processing of your personal data is provided:

Responsible: SANS GAYÀ HERMANOS SL.
Tax Identification Number: B07614373
Address: PAGUERA BOULEVARD, No. 36, ZIP Code: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL., we process the information you provide us with the aim of preparing and creating invoices for the products and/or services contracted and for compliance with accounting and tax obligations. The personal data provided will be kept as long as the business relationship is maintained and its deletion is not requested, for a period of 5 years from the last contract and/or purchase. In any case, your personal data will be kept as long as they are useful for the indicated purpose, and, in any case, during the legal periods and for the time necessary to respond to possible liabilities arising from the processing.

Legitimation: The processing of your personal data is based on the execution of a contract in which the interested party is a participant, or for the application at their request of pre-contractual measures, in addition we must process your data to comply with a legal obligation applicable to the data controller, in accordance with the provisions of the General Data Protection Regulation GDPR EU 679/2016 (Art. 6.1. B and C) and the Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPDPGDD).

Recipients: The data will not be communicated to any third party outside the entity, except for legal obligation. However, we inform you that third party providers may have access to your personal data, as data processors, within the framework of providing a service for the entity responsible for processing. You can request information about the data processors at the email: booking@florhotels.com. In addition to the above, the Entity may make assignments or communications of personal data to fulfill its obligations to Public Administrations in cases that are required by current legislation. There is no provision for transferring data to third countries.

Rights: The interested parties have the right to obtain access to their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep it for the exercise or defense of claims. Likewise, and for reasons related to their particular situation, interested parties may object to the processing of their data, in which case their personal information will stop being processed, for those purposes for which they have expressed their opposition. Where technically possible, the interested party can request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties may contact us by post, attaching a copy of a document proving their identity (ID), to SANS GAYÀ HERMANOS SL. at BULEVAR PAGUERA, Nº 36, ZIP CODE: 07160, PAGUERA, or by email at booking@florhotels.com. You have the right to file a complaint with the Control Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the interested party himself.

Information on articles 13 and 14 of the G.D.P.R. regarding the processing of personal data from Curriculum Vitae.

In accordance with the provisions set out in the General Data Protection Regulation GDPR EU 679/2016 and the Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights, the following information about the processing of your personal data is provided:

Responsible: SANS GAYÀ HERMANOS SL.
TIN/VAT Number: B07614373
Address: PAGUERA BOULEVARD, No. 36, P.C.: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL. we process the information you provide us in order to carry out a personnel selection and for the applicant to participate in the company's job selection processes. The personal data provided will be kept as long as they are useful for the indicated purpose and, in any case, during the legal terms and for the time necessary to attend to possible responsibilities arising from the processing.

Legitimization: The processing of your personal data is based on the execution of a contract in which the interested party is part or for the application, at their request, of pre-contractual measures. In any case, you have given your consent to process your personal data for one or several specific purposes in accordance with the provisions of Regulation (EU) 679/2016 (art. 6.1. A and B) and the LOPDPGDD. There is an obligation to provide personal data or, otherwise, you will not be able to participate in the selection process of the entity.

Rights: Individuals have the right to gain access to their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, individuals can request the restriction of processing of their data, in which case we will only retain them for the exercise or defense of claims. Likewise, and for reasons related to their particular situation, individuals can object to the processing of their data, in which case their personal information will stop being processed, for those purposes about which they have expressed their opposition. When technically possible, the individual can request the portability of their data to another Person in Charge of the Processing. To exercise these rights, in accordance with current legislation, individuals can contact by post, attaching a copy of a document proving their identity (ID), to SANS GAYÀ HERMANOS SL, at BULEVAR PAGUERA, No. 36, C.P.: 07160, PAGUERA, or at the email booking@florhotels.com. You have the right to file a complaint with the Control Authority: Spanish Agency for Data Protection (www.agpd.es). Origin of Personal Data: the interested party itself.

Information from articles 13 and 14 of the G.D.P.R. regarding the processing of personal data from suppliers.

In accordance with the provisions of the General Data Protection Regulation GDPR EU 679/2016 and the Organic Law 3/2018 of December 5, on Personal Data Protection and Digital Rights Guarantee, the following information about the processing of your personal data is provided:

Responsible: SANS GAYÀ HERMANOS SL.
NIF/CIF: B07614373
Address: BULEVAR PAGUERA, No. 36, Postal Code: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL, we process the information you provide us with in order to complete an order and bill for services. The personal data provided will be retained as long as the business relationship is maintained and its deletion is not requested, for a period of 5 years from the last contract made. In any case, your personal data will be kept as long as they are useful for the purpose indicated, and, in any case, for legal periods and for the necessary time to attend to possible responsibilities arising from the processing.

Recipients: The data will not be communicated to any third party outside the entity, except under legal obligation. However, we inform you that third-party providers may have access to your personal data, as data processors, within the framework of providing a service for the entity responsible for processing. You can request information regarding the data processors at the email: booking@florhotels.com. In addition to the above, the Entity may make transfers or communications of personal data to meet its obligations with Public Administrations in cases that are required according to current legislation. There is no provision for data transfer to third countries.

Rights: Interested parties have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will retain them only for the exercise or defense of claims. Likewise, and for reasons related to their particular situation, interested parties can object to the processing of their data, in which case their personal information will cease to be processed, for those purposes for which they have expressed their opposition. When technically possible, the interested party may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties can address via postal mail, attaching a copy of a document proving their identity (ID), to SANS GAYÀ HERMANOS SL. at BULEVAR PAGUERA, Nº 36, C.P.: 07160, PAGUERA, or to the email booking@florhotels.com. You have the right to file a complaint with the Control Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the interested party themselves.

Information on articles 13 and 14 of the GDPR regarding the processing of personal data of web users

In accordance with the provisions of the General Data Protection Regulation GDPR EU 679/2016 and the Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights, the following information is provided regarding the processing of your personal data:

Responsible: SANS GAYÀ HERMANOS SL.
NIF/CIF: B07614373
Address: BULEVAR PAGUERA, No. 36, Postal Code: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL., we process the information you provide us with in order to provide the services and/or sell the products that you have contracted through our website. We also manage the sending of information and commercial prospecting. In order to be able to offer you services according to your interests, we will create a commercial profile, based on the information provided. No automated decisions will be made based on this profile. The personal data provided will be kept as long as the business relationship is maintained and its deletion is not requested, for a period of 5 years from the last contract and/or purchase made by you. In any case, your personal data will be kept as long as they are useful for the purpose indicated, and, in any case, during the legal periods and for the time necessary to attend to possible responsibilities arising from the processing.

Legitimation: The processing of your personal data is based on the performance of a contract in which you are a party, or the application at your request of pre-contractual measures. In any case, you have given your consent to process your personal data for one or several specific purposes, in accordance with the provisions of the EU GDPR 679/2016 (ART. 6.1. A. B) and the Organic Law 3/2018 of December 5, (LOPDPGDD). The Law of Information Society Services 34/2002, articles 20 and 21, applies for sending commercial offers via telecommunications. The prospective offer of products and services is based on the consent that is requested from you, without in any case the withdrawal of this consent conditioning the contract of purchase of the product and/or provision of the service. There is an obligation to provide personal data or, otherwise, it is not possible to provide the service and/or sale of the product and/or facilitate the requested offer and manage the sending of commercial information.

Recipients: The data will not be shared with any third party outside the entity, except under legal obligation. However, we inform you that third-party providers may have access to your personal data, as data processors, within the framework of providing a service for the data controlling entity. You can request information regarding the data processors at the email address: booking@florhotels.com. In addition to the above, the Entity may make assignments or communications of personal data to meet its obligations to Public Administrations in cases as required by current legislation. There is no plan to transfer data to third countries.

Rights: Interested parties have the right to gain access to their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep it for the exercise or defense of claims. Similarly, and for reasons related to their particular situation, interested parties may object to the processing of their data, in which case their personal information will stop being processed, for those purposes regarding which they have expressed their opposition. When technically possible, the interested party can request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties can send a letter by post, enclosing a photocopy of a document proving their identity (DNI), to SANS GAYÀ HERMANOS SL in BULEVAR PAGUERA, NO. 36, P.C.: 07160, PAGUERA, or to the email booking@florhotels.com. You have the right to file a complaint with the Control Authority: Spanish Agency for Data Protection (www.agpd.es). Origin of the Personal Data: the interested party himself.

Information on articles 13 and 14 of the GDPR relating to the processing of personal data from video surveillance.

Responsible: SANS GAYÀ HERMANOS SL.
NIF/CIF: B07614373
Address: PAGUERA BOULEVARD, NO. 36, ZIP CODE: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL, we process the information captured through surveillance cameras with the purpose of preserving the safety of people and property, as well as the safety of the facilities or establishment. In addition, we monitor the access to the company or Entity's establishment and facilities. The personal data provided will be kept for a maximum period of 30 days from its recording. In any case, your personal data will be kept as long as they are useful for the purpose indicated, and, in any case, during the legal periods and for the time necessary to address possible responsibilities arising from the processing.

Legitimization: The processing of your personal data is based on the need to satisfy legitimate interests pursued by the data controller or by a third party in accordance with the provisions of the EU GDPR 679/2016 (Art. 6.1. F) and the Organic Law 3/2018 of December 5 (LOPDPGDD). Articles 22 and 89 of Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights are applicable. Article 20.3 of the Workers' Statute is also applicable.

Recipients: The data will not be communicated to any third party outside of the entity, except as required by law. However, we inform you that third party providers may have access to your personal data, in the capacity of data processors, within the framework of providing a service for the entity responsible for data processing. You are informed that images may be processed by the data processor in accordance with Article 28 of the GDPR. In addition to the above, the entity may make assignments or communications of personal data to meet its obligations to Public Administrations in cases where this is required in accordance with current legislation. There are no plans to transfer data to third countries.

Rights: Interested parties have the right to gain access to their personal data, as well as request the rectification of inaccurate data or, if applicable, request their deletion when, among other reasons, the data are no longer needed for the purposes they were collected for. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims. Likewise, and for reasons related to their specific situation, interested parties may object to the processing of their data. In this case, the processing of their personal information will cease, for those purposes for which they have expressed their opposition. When technically possible, the interested party can request that their data be ported to another Responsible for Processing. To exercise these rights, in accordance with current legislation, interested parties can write via post mail, enclosing a copy of a document proving their identity (ID), to SANS GAYÀ HERMANOS SL., at BULEVAR PAGUERA, Nº 36, POST CODE: 07160, PAGUERA, or via the email booking@florhotels.com. You have the right to lodge a complaint with the Authority Control: Spanish Agency for Data Protection (www.agpd.es). Personal Data Source: the interested party himself/herself.

Information from articles 13 and 14 of the GDPR related to the processing of personal data for newsletters / mailings.

Responsible: SANS GAYÀ HERMANOS SL.
NIF/CIF: B07614373
Address: BULEVAR PAGUERA, No. 36, Zip Code: 07160, PAGUERA
Phone: +34 971686093
Email: booking@florhotels.com
Data Protection Officer: Contact: http:wwwprotecmir.com / Email: [protecmirlegal@protecmir.com](mailto:protecmirlegal@protecmir.com)

Purpose: At SANS GAYÀ HERMANOS SL., we process the information you provide us with the purpose of sending you personalized offers about the company's products and/or services and managing the sending of information and commercial prospecting. In addition, we process the information of customers who have hired our products and services in order to send you personalized offers about the company's products and/or services. In order to be able to offer you our products and services according to your interests, we will develop a commercial profile based on the information provided. No automated decisions will be made based on this profile. The personal data provided will be kept, as long as your explicit consent is maintained and its deletion is not requested. In any case, your personal data will be kept as long as they are useful for the indicated purpose, and, in any case, during the legal terms and for the time necessary to attend to possible responsibilities arising from the processing.

Legitimation: The processing of your personal data is based on the execution of a contract in which you are party or for the application, at your request, of pre-contractual measures. In any case, you have given your consent to treat your personal data for one or more specific purposes, in accordance with the provisions of the EU GDPR 679/2016 (ARTICLE 6.1. A. B) and the Organic Law 3/2018 of December 5 (LOPDPGDD). The Services of the Information Society Law 34/2002, articles 20 and 21 are applicable. The prospective offering of products and services is based on the consent requested from you, without in any case the withdrawal of this consent conditioning the contract for the purchase of a product and/or provision of service. There is an obligation to provide personal data and consent to manage the sending of advertising information and commercial prospecting.

Recipients: Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, those concerned may request the limitation of the processing of their data, in which case we will only retain them for the exercise or defense of claims. Likewise, and for reasons related to their particular situation, interested parties may object to the processing of their data, in which case their personal information will cease to be processed for those purposes regarding which they have expressed opposition. When technically possible, the interested party can request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, interested parties can contact us by postal mail, attaching a copy of a document proving their identity (ID), to SANS GAYÀ HERMANOS SL. at BULEVAR PAGUERA, Nº 36, ZIP CODE: 07160, PAGUERA, or by email to booking@florhotels.com. You have the right to file a complaint with the Control Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the interested party himself.

Rights: Interested parties have the right to obtain access to their personal data, as well as to request the correction of inaccurate data or, if applicable, request their deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims. Also, for reasons related to their particular situation, the interested parties may oppose the processing of their data, in which case their personal information will cease to be processed, for those purposes to which they have expressed opposition. When technically possible, the interested party may request the portability of their data to another Data Controller. To exercise these rights, in accordance with current legislation, the interested parties may send a letter by mail, attaching a copy of a document that confirms their identity (national identification card), to SANS GAYÀ HERMANOS SL. at BULEVAR PAGUERA, Nº 36, C.P.: 07160, PAGUERA, or to the email booking@florhotels.com. You have the right to file a complaint with the Supervisory Authority: Spanish Data Protection Agency (www.agpd.es). Origin of Personal Data: the individual concerned.

Data Security

We have appropriate technical and organizational security measures in place to protect your personal data against unauthorized or illicit processing and against accidental loss, destruction or damage, ensuring the integrity and confidentiality of the data. The implemented technical and organizational security measures allow us to: ensure the ongoing confidentiality, integrity, availability and resilience of the processing systems and services; restore the availability of and access to personal data quickly in the event of a physical or technical incident; and regularly test, assess and evaluate the effectiveness of the technical and organizational measures implemented to guarantee the security of the processing.

These technical and organizational security measures have been designed considering our IT infrastructure, the state of the art in accordance with current standards and practices, the cost of implementation, and the nature, scope, context, and purposes of the processing, as well as the risks of diverse likelihood and severity that the processing involves for your personal data.