LEGAL WARNING

In compliance with the duty of information provided in Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) of July 11, the following general information about this website is provided below:

Company name: Mikado, S.L.U.

Tax Identification Number: B08367898

Registered office: Calle Castellnou, 61

Contact: verdi@cataloniahotels.com

Registered in the Mercantile Registry of Barcelona in volume, Folio, Section, Page T34668 F88 H-B72771

PRIVACY POLICY

IDENTIFICATION OF THE DATA CONTROLLER

In accordance with the provisions of current regulations on Personal Data Protection, we inform you that the data controller of your personal data is Catalonia Hotels & Resorts.

You can contact us by email: verdi@cataloniahotels.com or you can also contact our Data Protection Officer (DPO), LENER ABOGADOS.

OBLIGATION TO PROVIDE YOUR PERSONAL DATA

The personal data that we will request from you, in the forms accessible from the Website or App, are generally mandatory (unless otherwise specified in the required field) to comply with the established purposes. Therefore, if they are not provided or are not provided correctly, we will not be able to attend to your service request.

The User:

Guarantees that he/she is of legal age or legally emancipated, where applicable, fully capable, and that the data he/she provides us is true, accurate, complete and up to date. For these purposes, the User will keep the information provided conveniently updated. For the purposes of the requested services, the User must be over 16 years of age.

INFORMATION AND CONSENT

By reading this Privacy Policy, the User is informed about the way in which we request, collect, process and protect the personal data provided to them through the website https: www.sibariusrestaurant.com (hereinafter, the “website”) and any other data that they may provide us in the future through any request or form, or any other means valid under law.

As a User, you must read this Privacy Policy with special attention, which we hope will be clear and simple for you to understand, and will facilitate and freely and voluntarily determine your desire to provide us with your personal data.

WHAT PERSONAL DATA WILL WE PROCESS?

We will process the following categories of data, depending on the request made by the User.

For example: we will ask for your telephone number, your email address and your first and last name when you request a reservation on our web service and you can accept our Privacy Policy by checking the Check Box provided on our reservation form.

Identification data: name, surname, date of birth, if applicable, ID or document proving your identity.

Contact details: Email address, mobile phone number, postal address.

Exceptionally, data on food intolerances or food allergies in cases related to our Restaurant service.

If you provide us with third party data, you guarantee that you have the consent of the third party and undertake to transfer to the owner of the data the information contained in this Privacy Policy, exempting the data controller from any liability regarding the provision of third party data. In any case, we will carry out the verifications and due diligence measures that correspond in accordance with the Data Protection regulations.

WHAT WILL BE THE PURPOSE OF THE PROCESSING OF YOUR DATA?

We inform you that the data we request from you are adequate, pertinent and strictly necessary for the purpose for which they are collected. Depending on the User’s requests, the personal data collected will be processed by us, in accordance with the following purposes:

Manage the reservations made and the management of your requests and applications.

Manage the sending of personalized commercial communications, by electronic and/or conventional means, in cases where the User expressly consents to this, by checking the corresponding box, or shows his/her opposition to said processing.

Manage your requests for contact or information through the channels provided for these purposes.

WHAT IS THE LEGITIMATION OF THE DATA PROCESSING?

The main basis for legitimation of the processing is the execution of the contract subject to the request for the services requested by the User.

The basis of legitimacy for informative purposes regarding news about our products and services or third-party products, offers, events or news relevant to Users related to the service provided and/or cwith food products, and with the hotel, tourism and transport sector itself, will be consent.

These purposes linked to the provision of consent will only be carried out if the User consents to the processing of their contact details, by sending an SMS or by telephone, when the User consents by checking the box provided for these treatments in the ad hoc form.

In any case, the User may revoke their consent at any time, through the procedure reported in the Exercise of Rights section, indicating their refusal to receive them through the unsubscribe option provided in each of the commercial communications sent. Likewise, if the User withdraws their consent to any of the treatments, this will not affect the legality of the treatments carried out previously.

Likewise, in cases where it is necessary to process the User’s data to comply with a legal obligation, the processing would be legitimized by being necessary for the fulfillment of said purposes. Furthermore, if the processing carried out for the purpose of conducting surveys and/or evaluations relating to the quality of the services provided by the data controller will be carried out based on the legitimate interest of the controller.

TO WHICH RECIPIENTS WILL WE COMMUNICATE YOUR DATA?

The User’s data may be communicated to:

Companies involved in or belonging to the Catalonia Hotels & Resorts business group and entities operating the hotels managed by the business group, solely for internal administrative purposes (www.cataloniahotels.com);

Entities operating the hotels managed by CATALONIA HOTELS & RESORTS, solely for internal administrative purposes and/or for the purposes indicated above.

Suppliers of the data controller or of the hotel operators necessary for the proper fulfillment of legal obligations and/or the purposes indicated above.

Partners and collaborating companies for the fulfillment of the purposes indicated above and/or, if the User so authorizes, for the sending of commercial communications, information, events or membership in loyalty programs.

Public Administrations in the cases authorized by Law.

The recipients indicated in this section may be located within or outside the European Economic Area, in the latter case the international data transfers being duly legitimized.

HOW LONG WILL WE KEEP YOUR DATA?

The User’s data will be kept for the period necessary to fulfill each purpose or until the User requests their withdrawal, opposes the processing or revokes their consent.

HOW TO EXERCISE YOUR RIGHTS?

The User may send a letter to verdi@cataloniahotels.com with the Reference “Data Protection”, attaching a photocopy of their valid identity document or passport, at any time and free of charge, to:

Revoke the consents granted.

Oppose the processing.

Receive confirmation as to whether we are processing their personal data.

Access their personal data.

Rectify inaccurate or incomplete data.

Request the deletion of their data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Obtain the limitation of the processing of data when any of the conditions provided for in the data protection regulations are met.

Request the portability of your data.

Likewise, the User is informed that at any time they may file a claim regarding the protection of their personal data with the competent control authority or the Spanish Data Protection Agency (www.aepd.es)

June 2024 version