Privacy policy is shown below (hereinafter, "web privacy policy" or "policy"), that governs the Web Platform https://ohairesorts.com (hereinafter, "the Platform") under the ownership of OHAI OUTDOOR LIVING, S.L. (hereinafter, "OHAI" or "we"), a Spanish company with registered office at Paseo Castellana, 28 – 2nd Fl., 28046, Madrid - Spain, with Tax ID B-88077300 and registered in the Commercial Register of Madrid, Volume 37587, Folio 60, Section 8, Page M669917.
PLEASE TAKE A FEW MINUTES TO READ OUR PRIVACY POLICY, IT WILL NOT TAKE YOU LONG. WITH IT WE WANT TO EXPLAIN TO YOU IN A SIMPLE, CLEAR AND TRANSPARENT WAY HOW WE TREAT AND PROTECT YOUR PERSONAL INFORMATION AND YOUR RIGHTS. YOUR SECURITY AND THE SAFETY OF YOUR PERSONAL DATA IS ESSENTIAL TO OHAI AND WE TAKE ITS ADEQUATE PROTECTION VERY SERIOUSLY.
Content
1. TO WHOM IS THIS POLICY ADDRESSED AND APPLIED?
This policy applies to all users of the platform, whether or not they are guests of OHAI (hereinafter, equally "the user" or "users") who are considered individuals. By personal data, we mean any information about an identified or identifiable individual. If you are already an OHAI guest, because you have entered into a contract with us, you should also refer to the information contained in the specific privacy terms.
2. IF YOU BROWSE OR USE OUR WEB PLATFORM, WHO IS RESPONSIBLE FOR PERSONAL DATA PROCESSING?
We are responsible for the processing of your personal data:
Full name of the entity: OHAI OUTDOOR LIVING, LTD.
Registered office: Paseo Castellana, 28 – 2nd Fl., 28046, Madrid - Spain
TAX ID: B-88077300
Contact e-mail (general): rgpd@ohairesorts.com
3. WHO IS THE OHAI DATA PROTECTION OFFICER (DPO)?
OHAI has appointed a DATA PROTECTION OFFICER (DPO), with whom users, if they so wish, may contact regarding all matters regarding their personal data processing and for their rights exercise under the provisions of the Spanish GDPR. You can contact our DPO through the following contact details:
Postal address: Paseo Castellana, 28 – 2nd Fl., 28046, Madrid - Spain
Contact e-mail: mvelasco@ohairesorts.com or slascurain@ohairesorts.com
4. DATA PROCESSING CARRIED OUT THROUGH THE PLATFORM
| Treatment purposes | Additional information | Data categories | Legal basis | Conservation period |
| Surfing the web | Allowing you to access the information and content provided therein.
Furthermore, if you access our website, we inform you that we will process your browsing data for analytical, advertising and statistical purposes, providing that you have accepted the corresponding cookies in accordance with the Cookie Policy provided for this purpose, and you may configure your preferences at any time regarding processing of your personal data for these purposes. | Web browsing data (data from your web browsing supported by cookies, web pages you visit, connection time, etc.). | Your consent, particularly in the case of accepting or authorising the use of cookies that require it, in accordance with the provisions of our Cookie Policy (ex art. 6.1 a) of the Spanish GDPR).
The satisfaction of the legitimate interest, own or of third parties, associated with the proper technical usability, management, maintenance, development and evolution of the Platform, tools, network and associated information systems. | Your data will be kept for the essential and necessary time to enable you to browse and use our website and its contents correctly.
With regard to the data associated with your browsing profile, in relation to the analytical cookies that you have accepted, you should pay attention to the section relating to their time length (see Cookie Policy). |
| Dealing with your requests or applications. | For this purpose, a contact form is available in the "Contact" section of the platform, as well as the management of requests via telephone calls. | Name, e-mail and personal data that may be included in your message. | Consent | For the time strictly necessary to solve or attend to them. |
| Booking management | To stay at OHAI, it is necessary to make a reservation. In order to manage this reservation, we will need to process certain personal data, because without them, we will not be able to process it. | First name, surname, e-mail address, country, contact telephone number, comments related to the reservation, bank details. | Terms and conditions of service enforcement. | During the time strictly necessary to manage your reservation, as well as during the prescription periods of the actions that may be legally required under the applicable regulations, i.e. during the period of 6 years in compliance with art. 30 of the Spanish Commercial Code. |
| Sending commercial information (newsletter) | We will process your data in order to offer you, by any means of communication, including e-mail, or equivalent, commercial information about our services. | Name, e-mail address, postcode, preferred stay, type of accompanying persons | Your consent, unless the application of the exception provided for in art. 21.2 of the Spanish Law 34/2002, of 11th July, on information society services and electronic commerce. | Your personal data will be processed for this purpose for as long as you do not object to it and for up to two years after the end of your relationship with OHAI. |
| Sending communications in connection with my stay | In order to adjust to your preferences and requests, and only if you wish, we can communicate with you via WhatsApp. | Name and surname, telephone number | Consent | Until the end of your stay. |
| Commercial profiling | In order to carry out commercial actions and provide you with the services that best suit your profile, we will use your data derived from the management of our services, as well as the tastes, hobbies and needs that you have declared to us. We also inform you that no automated decisions will be taken on the basis of this profile. | Data associated with the user profile (services or products contracted; level of satisfaction with the services or products contracted by the user, etc.) are processed. | Your consent.
Depending on the case, the satisfaction of the legitimate interest, associated with the targeting of users' interests (ex art. 6.1 f) of the Spanish GDPR), will also apply. | Your personal data will be processed for this purpose for as long as you do not object to it and for up to two years after the end of your relationship with OHAI. |
When the legitimate basis for personal data processing is your consent, we remind you that you have the right to withdraw your consent at any time simply and free of charge by writing to us at rgpd@ohairesorts.com.
Regarding conservation period, generally speaking, when personal data is no longer necessary for the purposes which they were collected for, they will be blocked, staying available only to the competent authorities for possible clarification of legal responsibilities during their processing, always in accordance with the applicable regulations, and may not be used for other purposes. Once the corresponding legal deadlines have elapsed in the event of blocking, your data will be deleted in accordance with the applicable regulations, and may also, if applicable, be securely anonymised by OHAI (anonymised/non-personal data).
5. WHAT ARE THE CONSEQUENCES OF NOT PROVIDING US WITH YOUR DATA?
We try to request or apply the minimum and essential data necessary to carry out personal data processing in full development of our corporate purpose and objectives. All of this is in accordance with the principles contained in the applicable regulations.
However, failure to provide your personal data may make it impossible for you to: 1) browse our website correctly (disable technical cookies); 2) process your specific request or application (for example, due to the lack of or insufficient completion of the forms provided on the platform).
In any case, the information and personal data you provide must be sufficient, adjusted, and limited to what is requested through the platform forms; 2) accurate, updated and truthful, in order to be able to properly verify your identity and to be able to access platform services.
Users shall be fully responsible for the personal data and information they provide to OHAI within the framework of the platform and, where appropriate, for the services they require or contract.
6. DO WE SHARE YOUR PERSONAL DATA WITH THIRD PARTIES?
General speaking, we do not share your information with third parties, nor do we sell or offer it to them. However, as a guest or user of OHAI, your personal data may be shared with the entities that make up OHAI, in the manner and for the purposes described in the contracts signed with our clients and for internal administrative purposes. For the aforementioned purposes, your personal data may be communicated, where appropriate, to the following recipients:
Similarly, certain third parties may be able to access your personal information in the course of providing services to OHAI. For example, in the case of third party cookies that are applied on the platform (see cookie policy).
Likewise, OHAI has various data processors for the processing of personal data under its control, allowing access to them, as trusted suppliers, and to the extent strictly necessary for the provision of the services contracted with them. Such data processors operate under a service contract under the terms, conditions and guarantees contained in article 28 of the Spanish GDPR, and OHAI carries out the corresponding controls, inspections and audits in this area to verify that such data processors strictly comply with the contracts signed for this purpose and the applicable regulations.
7. ARE YOUR PERSONAL DATA TRANSFERRED INTERNATIONALLY?
We inform you that, generally speaking, international transfers of your personal data are not foreseen, and OHAI will adopt the necessary measures and guarantees in this area in accordance with current personal data protection regulations. Notwithstanding the foregoing, in our cookie policy you will find information on the use of cookies by third parties that could make international transfers of personal data. You can consult the privacy information of third parties that serve cookies on this website, through our Cookie Policy.
8. WHAT RIGHTS DO YOU HAVE, WHAT DO THEY MEAN AND HOW CAN YOU EXERCISE THEM?
You may exercise your rights of access, rectification, deletion, portability, processing limitation and opposition by sending a letter to the registered office of the company, Paseo Castellana, 28 – 2nd Fl., 28046, Madrid (Spain) or by e-mail to rgpd@ohairesorts.com , accompanied, if necessary to prove your identification, by a copy of your national identity card or equivalent identification document (passport, N.I.E...).
We also inform you that if you do not consider that your personal rights have been duly addressed, you may file a complaint with the competent supervisory authority, in this case, the Spanish Data Protection Agency (Spanish abbreviation AEPD). For more information, please visit the website www.aepd.es.
However, we recommend that before submitting any complaint or claim to the AEPD you contact us, and especially the DPO of OHAI (mvelasco@ohairesorts.com or slascurain@ohairesorts.com) in order to analyse the specific situation and try, if necessary, to find an effective and amicable solution.
9. ARE SECURITY MEASURES AND PROTECTION OF YOUR PERSONAL DATA APPLIED?
Taking into account the nature, scope, context and stated purposes of the processing, as well as the risks of different likelihood and severity to your rights and freedoms, OHAI implements (and will implement) appropriate technical and organisational measures to ensure appropriate security and protection of your personal data by meeting privacy by design and default criteria, as well as applying a system approach to concurrent risk which will be reviewed and updated by OHAI as necessary. The use of Hyper Text Transfer Protocol (HTTPS) on our platform is an enhanced guarantee for the security of your personal data.
10. VALIDITY AND MODIFICATION OF PRIVACY POLICY
This policy is effective as of 28 October 2024.
OHAI reserves the right to modify this policy in order to adapt it to future legislative, doctrinal or jurisprudential developments that may be applicable, or for technical, operational, commercial, corporate and business reasons, informing you in advance and reasonably of the changes that may occur whenever possible. In any case, it is recommended that, each time you access this platform, you read this policy in detail, as any modification will be published through the same.