PRIVACY POLICY
PRIVACY POLICY AND LEGAL NOTICE — VALENCIA STATIONHOSTEL S.L.
VALENCIA STATION HOSTEL S.L., with VAT/Tax ID B98679186, and registered office at C/ XATIVA 24, VALENCIA (46007), VALENCIA, with email address direccion@uphostel.com and telephone number 654805382.
Data Protection Officer
The data controller is responsible for the personal data collected through the browsing and use of this website, in accordance with the requirements established by REGULATION (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, as well as in accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE). By using this website, you are deemed to have read and understood the information provided regarding the processing of your personal data.
By using this website, you are deemed to have read and understood the information provided regarding the processing of your personal data.
Data Protection Policy
The data controller applies the principle of accountability in the processing of personal data, maintaining constant updates and promoting continuous improvement of the data protection system in accordance with applicable legal requirements, ensuring in all cases:
- respect for the fundamental freedoms and rights of natural persons;
- that personal data is processed lawfully, fairly, and transparently;
- that the data processed is accurate, adequate, relevant, and limited to what is necessary in relation to the purposes for which it is collected;
- that the purposes for which data is collected are explicit and legitimate, and that the data is not processed in a manner incompatible with those purposes.
The purpose of this document is to inform users about what we do with their personal data, how it is collected, the purposes for which it is used, the rights to which they are entitled, as well as all the legal information required under current legislation.
Data Protection Policy
The personal data processed are those provided by users through the forms available on this website and constitute the minimum necessary to:
- send you information about our products/services;
- respond to enquiries;
- process orders, as well as issue the corresponding invoices, inform you about the status of orders, handle complaints, and carry out any other management related to the provision of the service offered through this website.
These purposes are based on the legal principles for data processing established under current legislation: for the execution of a contract or the provision of a service to users, for compliance with legal obligations, based on legitimate interest, and with the consent of the users.
Web Forms
The personal data collected through the website contact form is used to respond to any enquiries submitted by the user through the form.
The personal data collected through the order form is used to process the information necessary for the correct management of your orders.
The processing of personal data is legitimised by the consent you provide by expressly accepting the terms of processing outlined in this Privacy Policy.
Recipients of the Data
The personal data obtained through the web forms is recorded and stored on electronic media controlled and supervised by the data controller.
Your personal data will not be shared with third parties, except where such disclosure is required by law or where it is necessary for the correct provision of the service or the execution of the contract. This includes sharing your data with third parties to process payments (payment gateways) and to manage the delivery of products (carriers), provided such sharing is necessary for the service. For payments made via other payment gateways, we recommend that users review the gateway’s privacy policy to understand how personal information is handled, for example:
- Redsys Servicios de Procesamiento, S.L. (“Redsys”), located in Madrid, Calle Francisco Sancha, 12, with CIF B-85955367, fully compliant with current data protection legislation and its own confidentiality commitments. Redsys has adopted the necessary technical measures to maintain the required level of security. You can view their privacy policy at:
https://www.redsys.es/legal/20180223_politica_de_privacidad_web_publica_redsys.pdf - PayPal (Europe) S.à.r.l. et Cie, S.C.A. (R.C.S. Luxembourg B 118 349), whose privacy policy establishes appropriate security measures for the proper processing of users’ personal data. You can view their privacy policy at:
https://www.paypal.com/es/webapps/mpp/ua/privacy-full?locale.x=es_ES#1
In cases where the sharing of data with third parties is not covered by the legal bases set out above, personal data will only be shared with other recipients if the user has given their explicit consent. Strict criteria are maintained when selecting data processors, and contractual commitments are in place with each to ensure compliance with data protection obligations.
In the event of international data transfers, VALENCIA STATION HOSTEL S.L. will ensure that the transfer of your personal data is carried out in accordance with applicable privacy laws and, in particular, that the necessary contractual, technical, and organisational measures are implemented, such as the standard contractual clauses approved by the European Commission.
For more information about the processing of personal data within our organisation, you may request it via email at: direccion@uphostel.com or access it through the following link:
Technical and Organisational Data Protection Measures
The systems have the necessary technical and organisational measures in place to ensure the confidentiality and preservation of the personal data obtained through the website. Personal data collected via the website is processed using the HTML protocol with a valid SSL certificate.
Personnel involved in data processing operations—such as access, editing, deletion, etc.—are trained, qualified, and committed to complying with this Data Protection Policy.
Data Retention
Personal data obtained through the contact form will be retained for as long as necessary to respond to the request or enquiry made. Personal data obtained through the order form will be retained while there is a contractual and/or commercial relationship with you, or until you exercise your right to deletion, cancellation, or restriction of the processing of your data.
Once the contractual relationship has ended, we will keep the information properly blocked, without using it, while it may be necessary for the exercise or defence of claims or where any judicial, legal, or contractual liability may arise from its processing, for which retrieval may be required.
If you have expressly consented to receive commercial information, we will retain your contact details until you inform us of your decision to opt out of such commercial communications.
Information on the Existence of Automated Decisions (including Profiling)
We do not normally make automated decisions; however, when we do, we will make it clear that such a decision is being taken. Nevertheless, VALENCIA STATION HOSTEL S.L., with CIF/NIF B98679186, collects certain information for the purpose of personalising services in order to display personalised advertising upon visiting its website, as well as for sending personalised communications.
VALENCIA STATION HOSTEL S.L., with CIF/NIF B98679186, acknowledges the possibility of profiling to improve its product offerings, personalise the sending of commercial offers, or provide a more tailored service to customers.
Objection to the Processing of Data for Advertising Purposes
If you have given your consent for your data to be used for advertising purposes and no longer wish to receive such communications, you may withdraw your consent at any time by sending an email to the data controller at direccion@uphostel.com.
Objection to the Processing of Data for Advertising Purposes
We may modify the information contained in this Privacy and Cookies Policy whenever we consider it appropriate. If we do so, we will notify you through various channels on the Platform (for example, via a banner, pop-up, or push notification), or we may even communicate the changes to your email address if the change is significant with respect to your privacy. This will allow you to review the changes, assess them, and, if applicable, object or unsubscribe from a service or feature. In any case, we recommend that you review this Privacy and Cookies Policy from time to time in case of minor changes or the introduction of interactive improvements.