Privacy Policy

Welcome to our Website, and we invite you to learn about the Privacy Policy of our company. We believe that your privacy is essential, and thus, we apply a policy of transparency to all our processes, so you always have information and control over your personal data.

We kindly ask you to carefully read each of these terms, as they will regulate the relationship you will have with us.

We have taken all the necessary technical and organizational measures to safeguard the security of the systems and supports containing your personal data, as required by the Data Protection regulations. Additionally, we commit to adopting any other measures that may be established in the future due to technological advancements or legal requirements, informing you through our Website.

This Privacy Policy will apply to all individuals who have provided their personal data directly or through third parties to Masso House. This includes individuals who visit the facilities or contact us to learn about our products, request information, send resumes, or interact through the website, email, or social media. It also includes personnel from external service providers and/or suppliers and, in general, anyone whose personal data is processed by Masso House.

This Policy will apply regardless of the channel or medium, online or in-person, that you use to interact with us.

Principles

When we use your personal data, your rights are guaranteed. Below, you can see our principles regarding your privacy:

• Principle of lawfulness, fairness, and transparency: The data we request from you will be adequate, specific, and necessary in each case and will not be used for any purpose other than that for which they were collected, without your prior and express authorization.
• Principle of data minimization: Only the minimally necessary data will be requested from you in each case.
• Principle of storage limitation: Your data will be kept for the time strictly necessary to fulfill the purpose of the processing.
• Principle of integrity and confidentiality: Your data will be treated in a way that ensures their security and integrity, as well as confidentiality. We will take all necessary measures to prevent unauthorized access or misuse of your data by unauthorized third parties.

Applicable regulations

1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
2. Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, seeks to adapt Spanish legal regulations to Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, regarding the protection of natural persons with regard to the processing of their personal data and the free movement of such data, and to complete its provisions; and to guarantee the digital rights of citizens in accordance with the mandate established in article 18.4 of the Constitution.

• Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE), which regulates economic transactions through electronic means.

Data Controller

• Data Controller: Francisco Masso Yuste
• Address: Carrer de Torroella, No. 65, Palafrugell (Girona)
• Phone: 627471143
• Email: info@massohouse.com

Origin of Processed Data

We process your personal data, originating from the following sources:

• Provided by you, through:

– Contact forms on the website.

– Services contracted from our company.

– Sending resumes.

– Promotions and commercial campaigns.

– Your interaction with social networks, blogs, or Masso House's website.

• Other individuals and/or legal entities that provide us with your data.

Specifically, we may process the following categories of personal data:

• Identifying data: Name and surname, ID, and signature.
• Personal characteristic data, such as gender, date and country of birth, nationality, family situation, and language;
• Contact data: Address, phone number, email.
• Transaction data: Economic and transactional information, such as payment data, payment methods, bank account, etc.
• Data related to reservations and generated by your stay;
• Data related to customer preferences and profiles and commercial tracking data;
• In the case of services for children, health data provided by clients themselves to address special needs, such as allergies or medications, may be processed.
• IP address: IP address of a device, which could be an identifying piece of data.

Purpose of Data Processing

We process your data, obtained online or in-person, for the following purposes:

• For the management of your reservations, as well as the information generated by your stay at the hotel, the provision of contracted services, and the fulfillment of legal obligations.
• Customer service. Inquiries by phone, email, or through the website.
• For billing purposes to provide you with invoices for the acquired services.
• Commercial promotions related to the services provided by Masso House.
• Usability and quality analysis. If you access our website, please note that we may process your navigation data for analytical and statistical purposes, to understand how users interact with our website and make improvements accordingly.
• Actions necessary for the selection and hiring of personnel; Evaluation and management of the CVs you submit.
• Compliance with obligations and duties imposed on Masso House by the current laws at any given time.

Masso House reserves the right to decide whether or not to incorporate your personal data into its internal systems.

The data we request from you will not be used for a purpose other than those indicated here without your prior and express authorization.

Accuracy and Truthfulness of Data

The data you provide must be true, accurate, complete, and up-to-date. Please note that you will be responsible for any direct or indirect damage caused to Masso House or any third party if you provide false, inaccurate, incomplete, or outdated data, or data of third parties without obtaining their prior consent before communicating it to Masso House.

Data Retention Period

Your personal data will be retained for the minimum time necessary and may be retained until:

• Service contracting: During the necessary time to manage the provision of the service, including possible claims associated with the service.
• Invoices, receipts, etc.: 6 years, according to the Commercial Code.
• Management of CVs: Your CV will be retained for a maximum period of two years.

Legal Bases

The main legal basis for processing your data is the execution of a contract, which you accept when contracting our services, although there are other reasons that legitimize us to do so, such as the interest in addressing your inquiries or the consent you give us to send you commercial information, among others. Specifically, the legal bases for processing are:

• Execution of a contract.
  • When you request or acquire our services.
  • Resolution of incidents related to your requests.
• Consent of the data subject:
  • To address your requests or inquiries made through the Customer Service.
  • For the receipt or submission of your CV in the personnel selection processes.
  • For sending commercial communications addressed to individuals who are not Masso House customers. You can revoke consent at any time.
  • When you access or log in through a social network, you authorize the transfer of your data from the social network to our website.
• Compliance with a legal obligation.
  • Communication of your data when requested by the Tax Agency, covered by Law 58/2003, of December 17, General Tax Law.
  • Management of the collection of receipts corresponding to the payment for the acquired services. Covered by Law 16/2009 on Payment Services.
  • Any other legal obligation arising from the services you have acquired at Masso House, which establishes the need to communicate your personal data to the Administration, judges, or courts.
• Legitimate interest of the data controller.
  • Addressing requests or inquiries that you submit through the various available contact methods.
  • The prospective offer of products and services when you are already a customer of Masso House is based on the legitimate interest of the company, consisting of being able to offer you the contracting of other products or services similar to those you have already acquired.

Data Transfers

Masso House will not transfer or communicate your personal data to any third party, except in cases legally established, or when necessary for the contractual relationship with a Data Processor.

Under the first premise, your data must be transferred to the following recipients, in compliance with legal obligations:

• Tax Authorities, including the State Tax Administration Agency and the corresponding Autonomous Communities.
• State Security Forces and Corps.
• Others, such as notaries, solicitors, and lawyers, for the satisfaction of legal needs that may arise for the legal defense of Masso House's interests.
• In the event it is requested, your data may be transferred to the Labor and Social Security Inspectorate.
• To the corresponding banking entities, for the management of collections and payments.

Masso House may process your data directly or through third parties acting on its behalf as data processors. Data processors may only access the personal data that are strictly necessary to perform their functions and may not use them for other purposes. Furthermore, they must process your personal information in accordance with this Privacy Policy and applicable data protection laws. Specifically, the following will act as data processors:

• Providers of Web hosting and email services, and their security.
• Providers of Web design and maintenance services.
• Providers of logistics and transportation services.
• Providers and collaborators of marketing and advertising services.
• Providers of labor, tax, and accounting advisory services.

If you contact us or contract our services, you accept that your personal data may be partially or fully provided to Data Processors whenever necessary. For the provision of the indicated services, Masso House will sign a data processor agreement with different providers. You can refuse the transfer of your data to Data Processors by written request, but you should consider that such refusal could prevent the provision of our services under the agreed conditions.

All providers to whom such data may be transferred are in the EU, and there are no planned international data transfers to countries located outside the EU territory.

User Rights

Masso House commits to respect the confidentiality of your personal data and guarantees the exercise of your rights free of charge by sending an email to info@massohouse.com, indicating the reason for your request and the right you want to exercise. In order for us to identify you, you must attach a copy of your ID or other identifying document to the email.

In particular, you have the right to:

• Verify what type of personal data we have collected in our systems.
• Request its rectification, in case you see that they are inaccurate or incomplete.
• Object to its processing, under the terms established by the GDPR and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights.
• Request the Right to be Forgotten, which means that Masso House will promptly delete the personal data you have communicated to us.
• Request the Portability of your data. This means that you have the right to receive the personal data you have provided us in a structured, commonly used, and machine-readable format, in order to transmit them directly to another entity, whenever technically feasible.
• Right to Limitation of processing, which means that in certain cases, you can request us to temporarily suspend the processing of the data or to keep them beyond the necessary time, in case you may need them.
• You also have the right to effective judicial protection and to file a complaint with the supervisory authority at www.agpd.es if you consider that the processing of the personal data concerning you infringes the current regulations.

It is important that you inform us of any changes to your personal data in order to keep them up to date. Otherwise, Masso House will not be responsible for the accuracy of such data.

Personnel Selection

If you are interested in working with us, you can submit your curriculum vitae through the Website, email, or letter.

The data included in the CV will be used solely for the purpose of evaluating your qualifications and suitability for the advertised position, as well as for subsequent personal interviews. The submission of the curriculum vitae implies explicit authorization for Masso House to process these data for its personnel selection processes. The personal data you send us in your curriculum vitae will be strictly necessary and relevant to the development of the selection process, they are confidential, and used exclusively for the indicated purpose.

Your curriculum vitae will be retained for the intended purposes for a maximum period of two years, after which it will be destroyed, ensuring total respect for the confidentiality of the data, both in their processing and in their deletion. In this sense, after said period, and if you wish to continue participating in the selection processes developed by Masso House, you must resend your curriculum vitae with the relevant updates.

Social Media

Masso House has a presence on the following social network: LinkedIn. The processing of your personal data when you become a follower of any of our social networks will be governed by this section, as well as by the terms of use, privacy policies, and access regulations belonging to the corresponding social network, which you accept before registering on that network.

Masso House will process your data for the purpose of properly managing your presence on our social network, informing you of activities, new products, services, or any other information we consider relevant. In the event that you leave a comment or interact on our social networks, you should know that your data may be published in the environment in which you act, that is, you are expressly authorizing the communication of your data, associated with the action you perform, to other users accessing the social network or website.

In our social networks, you can only publish personal data, photographs, information, or other content that you own or for which you have obtained the authorization of the affected third party.

Masso House is not responsible and cannot guarantee the confidentiality of the data processing carried out by LinkedIn, as well as by third parties that may access such data due to the provision of their services, the exercise of their activity, or third parties that establish hyperlinks to said social network.

Dispatch of Commercial Communications

In certain cases, Article 21.2 of the Law on Services of the Information Society and Electronic Commerce (Law 34/2002, of July 11) applies. This Law authorizes us to send you commercial communications via email, as long as you are a customer of Masso House and only for sending commercial information about products or services that are similar to those initially acquired.

If you do not wish to receive such commercial communications, you can contact us through the email address info@massohouse.com, and we will unsubscribe you from this service.

Cookies

Our Website uses data storage and retrieval devices (cookies) that allow the operation and provision of the services offered, and that will be installed on your terminal equipment, provided that you have given your consent and have been informed clearly and completely about their use. To this end, you can consult our Cookies Policy, which you should be aware of before starting to navigate the website.

Modifications to the Privacy Policy

Masso House reserves the right to modify this Privacy Policy in the future according to its own criteria or due to legislative, jurisprudential, or business practice changes, always respecting the current regulations on the Protection of Personal Data.

If Masso House makes any modifications to its Privacy Policy, they will be published on this same page, where you can become aware of the new policy, regarding which we will seek your agreement if necessary, without prejudice to your use of the right to erasure or right to be forgotten.