LEGAL NOTICE

In compliance with the duty of information provided in Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) of July 11, the following general information about this website is provided below:

Company name: SABEL DE SERVICIOS, S.L.U.

Tax Identification Number: B58875048

Registered office: Plaza España, 6

Contact: rigoletto@cataloniahotels.com

Registered in the Mercantile Registry of Barcelona in volume, Folio, Section, Page T36446 F196 H-B55800

PRIVACY POLICY

IDENTIFICATION OF THE DATA CONTROLLER

In accordance with the provisions of current regulations on Personal Data Protection, we inform you that the data controller of your personal data is Catalonia Hotels & Resorts.

You can contact us by email: rigoletto@cataloniahotels.com or you can also contact our Data Protection Officer (DPO): LENER ABOGADOS.

OBLIGATION TO PROVIDE YOUR PERSONAL DATA

The personal data that we will request from you, in the forms accessible from the Website or App, are generally mandatory (unless otherwise specified in the required field) to comply with the established purposes. Therefore, if they are not provided or are not provided correctly, we will not be able to attend to your service request.

The User:

Guarantees that he/she is of legal age or legally emancipated, where applicable, fully capable, and that the data he/she provides us is true, accurate, complete and up to date. For these purposes, the User will keep the information provided conveniently updated. For the purposes of the requested services, the User must be over 16 years of age.

INFORMATION AND CONSENT

By reading this Privacy Policy, the User is informed about the way in which we request, collect, process and protect the personal data provided to them through the website https: www.latraviatarestaurant.com (hereinafter, the “website”) and any other data that they may provide us in the future through any request or form, or any other means valid under law.

As a User, you must read this Privacy Policy with special attention, which we hope will be clear and simple for you to understand, and will facilitate and freely and voluntarily determine your desire to provide us with your personal data.

WHAT PERSONAL DATA WILL WE PROCESS?

We will process the following categories of data, depending on the request made by the User.

For example: we will ask for your telephone number, your email address and your first and last name when you request a reservation on our web service and you can accept our Privacy Policy by checking the Check Box provided on our reservation form.

Identification data: name, surname, date of birth, if applicable, ID or document proving your identity.

Contact details: Email address, mobile phone number, postal address.

Exceptionally, data on food intolerances or food allergies in cases related to our Restaurant service.

If you provide us with third party data, you guarantee that you have the consent of the third party and undertake to transfer to the owner of the data the information contained in this Privacy Policy, exempting the data controller from any liability regarding the provision of third party data. In any case, we will carry out the verifications and due diligence measures that correspond in accordance with the Data Protection regulations.

WHAT WILL BE THE PURPOSE OF THE PROCESSING OF YOUR DATA?

We inform you that the data we request from you are adequate, pertinent and strictly necessary for the purpose for which they are collected. Depending on the User’s requests, the personal data collected will be processed by us, in accordance with the following purposes:

Manage the reservations made and the management of your requests and applications.

Manage the sending of personalized commercial communications, by electronic and/or conventional means, in cases where the User expressly consents to this, by checking the corresponding box, or shows his/her opposition to said processing.

Manage your requests for contact or information through the channels provided for these purposes.

WHAT IS THE LEGITIMATION OF THE DATA PROCESSING?

The main basis for legitimation of the processing is the execution of the contract subject to the request for the services requested by the User.

The basis of legitimacy for informational purposes regarding news about our products and services or third-party products, offers, events or news relevant to Users related to the service

LEGAL NOTICE

In compliance with the duty of information provided in Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) of July 11, the following general information about this website is provided below:

Company name: SABEL DE SERVICIOS, S.L.U.

Tax Identification Number: B58875048

Registered office: Plaza España, 6

Contact: rigoletto@cataloniahotels.com

Registered in the Mercantile Registry of Barcelona in volume, Folio, Section, Page T36446 F196 H-B55800

PRIVACY POLICY

IDENTIFICATION OF THE DATA CONTROLLER

In accordance with the provisions of current regulations on Personal Data Protection, we inform you that the data controller of your personal data is Catalonia Hotels & Resorts.

You can contact us by email: rigoletto@cataloniahotels.com or you can also contact our Data Protection Officer (DPO): LENER ABOGADOS.

OBLIGATION TO PROVIDE YOUR PERSONAL DATA

The personal data that we will request from you, in the forms accessible from the Website or App, are generally mandatory (unless otherwise specified in the required field) to comply with the established purposes. Therefore, if they are not provided or are not provided correctly, we will not be able to attend to your service request.

The User:

Guarantees that he/she is of legal age or legally emancipated, where applicable, fully capable, and that the data he/she provides us is true, accurate, complete and up to date. For these purposes, the User will keep the information provided conveniently updated. For the purposes of the requested services, the User must be over 16 years of age.

INFORMATION AND CONSENT

By reading this Privacy Policy, the User is informed about the way in which we request, collect, process and protect the personal data provided to them through the website https: www.latraviatarestaurant.com (hereinafter, the “website”) and any other data that they may provide us in the future through any request or form, or any other means valid under law.

As a User, you must read this Privacy Policy with special attention, which we hope will be clear and simple for you to understand, and will facilitate and freely and voluntarily determine your desire to provide us with your personal data.

WHAT PERSONAL DATA WILL WE PROCESS?

We will process the following categories of data, depending on the request made by the User.

For example: we will ask for your telephone number, your email address and your first and last name when you request a reservation on our web service and you can accept our Privacy Policy by checking the Check Box provided on our reservation form.

Identification data: name, surname, date of birth, if applicable, ID or document proving your identity.

Contact details: Email address, mobile phone number, postal address.

Exceptionally, data on food intolerances or food allergies in cases related to our Restaurant service.

If you provide us with third party data, you guarantee that you have the consent of the third party and undertake to transfer to the owner of the data the information contained in this Privacy Policy, exempting the data controller from any liability regarding the provision of third party data. In any case, we will carry out the verifications and due diligence measures that correspond in accordance with the Data Protection regulations.

WHAT WILL BE THE PURPOSE OF THE PROCESSING OF YOUR DATA?

We inform you that the data we request from you are adequate, pertinent and strictly necessary for the purpose for which they are collected. Depending on the User’s requests, the personal data collected will be processed by us, in accordance with the following purposes:

Manage the reservations made and the management of your requests and applications.

Manage the sending of personalized commercial communications, by electronic and/or conventional means, in cases where the User expressly consents to this, by checking the corresponding box, or shows his/her opposition to said processing.

Manage your requests for contact or information through the channels provided for these purposes.

WHAT IS THE LEGITIMATION OF THE DATA PROCESSING?

The main basis for legitimation of the processing is the execution of the contract subject to the request for the services requested by the User.

The basis of legitimacy for informational purposes regarding news about our products and services or third-party products, offers, events or news relevant to Users related to the service or loaned and/or with food products, and with the hotel, tourism and transport sector itself, will be consent.

These purposes linked to the provision of your consent, will only be carried out if the User consents to the processing of your contact data, through sending via SMS or via telephone, when the User consents through of the marking of the box provided for these treatments on the ad hoc form.

In any case, the User may revoke their consent at any time, through the procedure described in the Exercise of Rights section, by indicating the refusal to receive it through the unsubscribe option provided in each of the commercial communications sent . Likewise, in the event that the User withdraws consent to any of the treatments, this will not affect the legality of the treatments carried out previously.

Likewise, in the cases where it is necessary to process the User’s data for the fulfillment of a legal obligation, the treatment would be legitimate because it is necessary for the fulfillment of the aforementioned purposes. In addition, if the treatment carried out for the purpose of carrying out surveys and/or evaluations relating to the quality of the services provided by the person in charge of the treatment will be carried out on the basis of the legitimate interest of the person in charge.

TO WHICH RECIPIENTS WILL WE COMMUNICATE YOUR DATA?

The User’s data may be communicated to:

Participating companies or of the Catalonia Hotels & Resorts business group and operating entities of the hotels managed by the business group, solely for internal administrative purposes (www.cataloniahotels.com);

Entities operating the hotels managed by CATALONIA HOTELS & RESORTS, solely for internal administrative purposes and/or for the purposes indicated above.

Suppliers of the person in charge of the treatment or of the hotel operators necessary for the proper fulfillment of the legal obligations and/or the purposes indicated above.

Partners and collaborating companies for the fulfillment of the previously indicated purposes and/or, in case the User so authorizes, for the sending of commercial communications, information, events or affiliation to loyalty programs.

Public administrations in cases authorized by law.

The recipients indicated in this section can be located inside or outside the European Economic Area, and in the latter case international data transfers are duly legitimated.

HOW LONG WILL WE KEEP YOUR DATA?

The User’s data will be kept for the period necessary for the fulfillment of each purpose or until the User requests the cancellation, opposes the treatment or revokes the consent.

HOW TO EXERCISE YOUR RIGHTS?

The User can send a letter addressed to rigoletto@cataloniahotels.com with the Reference “Data Protection”, attaching a photocopy of your valid identity document or passport, at any time and free of charge, for:

Revoke granted consents.

Object to treatment.

Receive confirmation on whether we are processing your personal data.

Access your personal data.

Rectify inaccurate or incomplete data.

Request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes collected.

Obtain the limitation of data processing when any of the conditions provided for in the data protection regulations are met.

Request the portability of your data.

Likewise, the User is informed that at any time he can lodge a claim regarding the protection of your personal data with the competent control authority or the Spanish Data Protection Agency (www.aepd.es)

June 2024 version