Join The Mountains Friends and Family Club and get exclusive discounts and benefits!
The Mountains Hotel
Website privacy policies
Information on the privacy policy
This document regulates the privacy policy of the domain www.themountainshotel.es owned by Inversiones Galdana S.L. (with the trade name THE MOUNTAINS HOTEL SIERRA NEVADA or ZIRYAB HOTEL), hereinafter referred to as the "website", as well as the series of information on the protection of personal data to which the interested party may have access, in accordance with articles 13 and 14 of the General Data Protection Regulation and article 11 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
Information on the processing of personal data by Inversiones Galdana SL
About us We are Inversiones Galdana S.L. and we process your personal data as data controller. This means that we are responsible for how we use and protect your personal data.
What do we use your personal data for? We will use your data (online or in person), among other purposes, to manage the booking of your accommodation and additional services, to respond to your enquiries and, if you expressly request it, to send you our commercial communications.
Why do we use your data? We are entitled to process your personal data, mainly to fulfil the contract you enter into with us when you register to make a booking. We also use your data to respond to your requests or enquiries and to send you commercial communications that you have requested to receive.
Who do we share your data with? We will share your data with data processors with whom we have a contract, primarily service providers who help us provide support.
Your rights: You have the right to access, rectify, delete, oppose, limit or transfer your data as explained below.
Privacy Policy for Users of the Website
- Identification and contact details of the data controller
- General information: Application and description of the information contained in the privacy policy.
- Necessary and up-to-date information.
- Confidentiality.
- Secure environment.
- Links policy.
- Minors.
- Questions about this policy and your privacy.
- Updates to the privacy policy.
Identification and contact details of the data controller
Inversiones Galdana SL with NIF B- 053163857 and with registered office at Paseo Cristóbal Colón 20, Seville, Spain, is responsible for the processing of personal data of users who access the website www.themountainshotel.es, whose activity consists in the management and development of all types of tourism industries, including all services necessary for the proper development of said activity, as well as providing and allowing public access to information relating to the contents and activities and services offered by the hotel.
This policy provides information on the use that Inversiones Galdana S.L. will make of your personal data and the rights granted to users of this website under the General Data Protection Regulation ("GDPR").
If you have any questions regarding the processing of your personal data, you can contact us at gm@ziryabhotel.com
2. General information: Application and description of the information contained in the privacy policy
This privacy policy governs the processing of data carried out by Inversiones Galdana SL in relation to users who access or contact it through the website: www.themountainshotel.es, as well as any other processing that it may carry out. The above applies to the processing of personal data of:
- Customers and potential customers.
- Job candidates and staff.
- Suppliers and/or potential suppliers.
Therefore, this privacy policy broadly reflects the information relating to data processing with respect to different categories of data subjects.
What are the legal bases for processing your data?
The legal bases that authorise the processing of data by Inversiones Galdana SL for each of the purposes indicated in its Register of Processing Activities are, in general, the following:
- Consent of the data subject (Art. 6.1.a) GDPR):
- Sending advertising and commercial information about the products offered on the website.
- Requests for information and contact forms.
- Contractual performance and pre-contractual measures (Art. 6 (1) (b) GDPR):
- Execution of the contracted service or formalisation of the established relationship (purchase of products/bookings).
- Carrying out the proposal requested by the interested party.
- Communication necessary for the maintenance of the contractual relationship.
- Recruitment of personnel.
- Providing a Wi-Fi service to hotel users.
- Compliance with a legal obligation (Art. 6.1.c) GDPR):
- Providing information to authorities, regulators or government bodies where required by law, local regulations or to comply with regulatory obligations.
- Public interest (Art. 6.1e) GDPR):
- Recording of images to ensure the protection of people, property and hotel facilities.
- Legitimate interest of the controller (Art. 6.1.f) GDPR):
- Processing of contact data.
- Sending advertising and commercial information about the products and services offered by Inversiones Galdana SL by any means, including electronic, when there is a prior contractual relationship with the interested party, this being its own advertising (in relation to article 21.2 LSSICE).
How long will we store your data?
For these purposes, your data will be kept for the time necessary to provide the services requested or to carry out the commercial transactions accepted, until you withdraw your consent.
Subsequently, your data will be kept for the purposes of judicial, administrative or fiscal claims, during the limitation periods of the legal actions provided for by the applicable regulations.
You can request more information about our data retention policy by sending an email to administracion@themountainshotel.es, specifying the particular processing about which you would like information.
What type of data do we collect and how do we collect it?
The data collected are never specially protected, but are categorised as academic or professional data; identifiers (such as your name, surname, image, language and country from which you interact with us, contact details, etc.); economic and transactional data (such as your payment or card details); connection, geolocation and navigation data (such as location data, device identification number or advertising ID); commercial information (such as if you have subscribed to our newsletter); data about your tastes and preferences, if you have sent them to us.
Where does the data come from?
The personal data processed by Inversiones Galdana SL comes directly from the interested party:
- When you contact us. The data provided through the contact form will be processed for the purpose of fulfilling the request.
- When you make a booking for accommodation or additional services through the guest contact form, we collect your contact and billing information (name, surname, address, email, postal address, bank details and credit card details) in order to manage your booking.
- When you book accommodation at our hotel using a travel metasearch engine for accommodation, such as booking.com, they will send us your data so that we can make the booking correctly.
- When you use our website, we will collect information such as the type of browser and device you are using, your IP address, your location, the website from which you linked to our site, what you did or did not do on our site, and the website to which you linked after visiting our site. For additional information on how we collect this information, please see our cookies policy.
- When you use any of the social media features on our website and make a social media post, the social media site will provide us with some information about you.
- When you subscribe to our lists through the newsletter form, we will send you commercial communications to keep you informed of products, services, events or news.
- When you are in our facilities, your image may be captured by our video surveillance cameras, which are installed to meet our obligations for the security and protection of persons and property. They are located in the facilities, labelled and provided with the first level of information required for data protection purposes.
We also use the information you provide for the following purposes:
- Carry out the correct provision of the service. We process your data in order to maintain the business relationship and to carry out our own information, advisory, administrative and other activities.
- Comply with our legal obligations. We will process your data to comply with a legal obligation to do so, for example, to respond to legal proceedings or a request from a competent regulatory authority.
- Support and improve the services offered on this website. When you browse our website, non-identifiable data may be collected, including IP addresses, geographical location, a record of how the services and sites are used, and other data that cannot be used to identify the user. Among the non-identifying data are also those related to your browsing habits through third-party services. We use this information to analyse trends, administer the site, track users' movements around the site and collect demographic information about our user base as a whole. You can consult our cookies policy for more information.
- Manage social media. The domain associated with themountains.sierranevada has a presence on social media. The processing of data by people who become followers of the hotel's official websites on social networks is governed by this section, as well as by the conditions of use, privacy policy and access rules applicable to the social network in question and previously accepted by the user. Inversiones Galdana S.L. will process your data in order to correctly manage your presence on the social network, to inform you about the activities, products or services of the provider, as well as for any other purpose that the regulations of the social media allow. Under no circumstances will we use the profiles of our followers on the social networks to send them advertising on an individual basis.
- Advertise on the internet. We run advertising campaigns on social media networks (Facebook/Instagram, Google Ads, etc.) where the audience can be segmented by demographics (age, gender, etc.), interests (activities, hobbies, etc.), what they buy online and through other channels. The data obtained through the advertising platforms are subject to this privacy policy from the moment the user leaves their data in the form on this website to subscribe to the newsletter. Under no circumstances will information from these platforms be used for any other purpose.
- Remarketing. The remarketing function allows us to reach people who have visited our website before and associate a specific audience with a specific message. Remarketing is a method of encouraging people who have visited a website to do so again. As a user of our website, we inform you that we are collecting information for this remarketing function. The information we collect through this feature is collected by Facebook Ads and Google Adwords cookies. If you do not want your information to be collected by these cookies, you can disable the use of Google cookies through the Google Ads Settings. You can also opt out of the use of cookies from a third party provider through the Network Advertising Initiative opt-out page. This type of service allows you to interact with social networks or other external platforms directly from the pages of this website. The interactions and information obtained by this website will always be subject to the user's privacy settings in each social network. If a service is installed that allows interaction with social networks, it is possible that although users do not use the service, it collects web traffic data relating to the pages on which it is installed.
- Manage surveys and/or evaluations on the quality of the services provided by the hotel and/or the perception of its image as a company.
- Customise the products and services you request according to the preferences indicated on the guest contact form.
- Provide a Wi-Fi service. The data of hotel users will be processed for the purpose of providing access to the Wi-Fi network.
Who do we share your data with?
We inform you that we do not communicate your personal data to third parties, except in the case of legal obligations (tax authorities, judges and courts, security forces and corps, OCU, AEPD, etc.).
However, your personal data may be accessed by Inversiones Galdana SL's data processors, i.e. service providers who need to access your personal data in order to carry out their functions. The service providers that access your personal data are generally dedicated to the sectors of information systems, technology, telecommunications, cloud computing and network security, reservation management services (Bookassists/Automatic Netware Ltd in Ireland and Bookassists/Softdoc Netware SLU in Spain), tourism asset managers (GAT Gestión de Activos Turísticos), travel agencies and complementary activities (GAT X SL) or ski equipment rental (CEROGRADOS).
However, you can request more information about the recipients of your data by sending an email to gm@ziryabhotel.com, specifying the particular processing about which you would like information.
Potential international data transfers.
For these purposes, we indicate that no international data transfers are expected.
For these purposes, some of our processing involves the international transfer of data to technology service providers in the United States, for which the relevant standard contractual clauses, the EU-US Privacy Shield and binding safeguards are in place.
What are your rights when you provide us with your data?
You may exercise the following rights:
- Right of access to your personal data, to know if and which data are being processed and the specific processing operations carried out with them, including the purposes, the categories of data processed and the recipients, among other information.
- Right to rectify any inaccurate personal data.
- Right to delete your personal data when, among other reasons, they are no longer necessary for the purposes for which they were collected, and unless the legitimising basis that enables us to process them is a legal obligation.
- Right to object to the processing of your personal data, provided that the legitimate basis that enables us to process it is the legitimate interest of Inversiones Galdana SL or a third party. Inversiones Galdana S.L. will stop processing your data, unless it can prove an overriding legitimate interest for the processing, or in the event that it is simply blocked for the formulation, exercise or defence of claims.
- Right to request the restriction of the processing of your personal data where the accuracy, lawfulness or necessity of the data processing is in doubt, in which case we may retain the blocked data for the exercise or defence of claims.
- Right to portability of your data, i.e. to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to you or to another controller, provided that the lawful basis allowing us to process it is the existence of a contractual relationship or your consent.
- Right not to be subject to automated decisions that have legal effects or significantly affect you, while such decisions are being taken.
- Right to revoke the consent granted to Inversiones Galdana SL for the processing of your data, provided that the lawful basis that enables us to process it is your consent.
You can exercise your rights at any time and free of charge by using the following link: exercise of rights form.
You can also contact us by sending a request to Inversiones Galdana SL, with address at Paseo Cristóbal Colón, 20, Seville, (Spain) or to the following email address: gm@ziryabhotel.com.
Finally, if you would like more information about your rights as a data subject, or if you wish to lodge a complaint if you consider that there has been a breach of data protection legislation with regard to the processing of your personal data, you may contact Inversiones Galdana SL or the Spanish Data Protection Agency, located at Calle Jorge Juan, 6, 28001, Madrid (www.aepd.es).
Sending of commercial communications
Inversiones Galdana S.L informs the user that the commercial communications requested, or if the user has not objected to their receipt by ticking the appropriate boxes in the forms, will be sent through the tool [Mailchimp, managed by The Rocket Science Group LLC], whose servers are located in the US. Therefore, your data may be transferred outside the European Economic Area. However, we inform you that these entities provide adequate privacy safeguards by adhering to the EU-US Privacy Framework, which the European Commission has declared to provide an adequate level of protection, or by signing standard contractual clauses approved by the European Commission.
In addition, we will include a commercial communication unsubscribe link at the bottom of all communications we send, which you can access to unsubscribe from the specific category of commercial communication you have received.
3. Necessary, up-to-date and truthful information
All the fields requested through the various means enabled for this purpose, including Inversiones Galdana SL's digital portals, email, telephone channels, contact forms or newsletter forms, must be filled in, and failure to do so may make it impossible to send the communication or process the contract for the services provided. Similarly, by completing and submitting the required information, you declare that the information and data you have provided is accurate and truthful.
In order to ensure that the information provided is always up to date and accurate, you must inform Inversiones Galdana SL as soon as possible of any changes or corrections to your personal data, through our website www.themountainshotel.es, privacy policy, exercise of rights section.
We inform you that, in general, the simple browsing of the website does not involve the processing of your personal data, except, in specific cases, your IP address and the data relating to your browsing, for the management and optimisation of the website, based on Inversiones Galdana SL's legitimate interest in maintaining the security and integrity of the website.
4. Confidentiality
The personal data that we may collect through our website, portals, forms, as well as through the various electronic or telephone communications that we may have with you or your representative, will be treated confidentially by Inversiones Galdana SL and we undertake to keep it secret in accordance with the provisions of current legislation.
Inversiones Galdana S.L. will ensure that all parties authorised to process the client's data (including its employees, collaborators and suppliers) are bound by the obligation of confidentiality.
5. Secure environment
In order to comply with the legal requirements regarding the protection of personal data, access to some areas of Inversiones Galdana S.L. websites is carried out in a secure environment, which means that all operations and transactions are carried out on a secure server, access to which is restricted to certain users, and all information exchanged is encrypted, which guarantees the authenticity of the Inversiones Galdana S.L. website from which the personal data is collected, as well as the integrity and confidentiality of the personal data during its transmission.
The website is designed to provide our customers and potential customers with information about our company and our products and services. Inversiones Galdana S.L. does not sell or provide information to third parties for mailing lists or direct marketing companies, nor does it send communications that have not been previously requested or accepted by users.
It is understood that the user who sends a request by email will expect that Inversiones Galdana S.L. respond in the same way, including, where appropriate, sending the promotional information requested by the user.
Inversiones Galdana SL has adopted appropriate policies and technical and organisational measures to safeguard and protect your personal data against undesired actions such as illegal or unauthorised access, accidental loss or destruction, damage, illegal or unauthorised use and disclosure. Likewise, Inversiones Galdana S.L will take all reasonable precautions to ensure that employees who have access to your personal data have received appropriate training.
In any case, you are informed that any data transmission over the internet is not completely secure and, as such, is done at your own risk. Although we will make every effort to protect your personal data, Inversiones Galdana S.L cannot guarantee the security of personal data transmitted through our website.
6. Links policy
Inversiones Galdana S.L is not responsible for the content or information of third-party websites that the user can access through the links established on its website. Likewise, it will not guarantee the technical availability, accuracy, veracity, validity or legality of pages outside its property that can be accessed through the links. We recommend that you review the privacy policies of such sites.
7. Minors
In accordance with the provisions of articles 8 of the GDPR and 13 of the RDLOPD, only persons over 14 years of age may give their consent to the processing of their personal data in a lawful manner by Inversiones Galdana S.L. If they are under 14 years of age, the consent of the parents or guardians is required for the processing, and the processing is only lawful to the extent that the parents or guardians have given their consent.
8. Questions about this policy and your privacy
If you have any questions about this policy or privacy concerns regarding access to or correction of your personal information, you may contact us at gm@ziryabhotel.com.
While most access-related questions and issues can be handled quickly, complex requests may require more research and time. In such cases, the issues will be resolved within thirty days or you will be informed of the nature of the issue and the appropriate next steps.
9. Update of the privacy policy
Our privacy policy is subject to change from time to time to comply with new legislation. Therefore, you should review this policy periodically and, if possible, each time you access the Inversiones Galdana SL website, in order to be properly informed of the type of information collected and how it is processed. This privacy policy became effective on 28 October 28 2024.