PRIVACY
POLICY

Last updated: 27 of June 2025.

DATA CONTROLLER

ANIMUA, S.A., with registered address at Plaça Urquinaona, number 1, Principal Second (08010) Barcelona, Tax ID A08520876, and contact email hello@wittmorehotel.com.

PERSONAL DATA

The data controller will collect exclusively personal data that is adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed, as applicable in each case.

The user guarantees the authenticity of the data provided and will be solely responsible for any false or inaccurate statements.

This website may contain links to external websites. The data controller assumes no responsibility for the contents or any other aspect related to these external websites.

The data controller reserves the right to modify this privacy policy at its discretion, or due to legal, jurisprudential, or doctrinal changes by the Spanish Data Protection Agency or the corresponding European authorities. The use of the website after the implementation of these changes will imply acceptance thereof.

PURPOSES OF THE PROCESSING

The personal data received will be processed for the following purposes, as applicable:

• Inquiry and, where appropriate, investigation and response to received messages.
• Management of reservations and invoicing, including control and processing of the reservation, contact with the client, and management and control of invoice payment.
• Registration and control of visits to the hotel facilities.
• Sending communications related to news, updates, promotions, and events.
• Management of special requests, preferences, or food intolerances communicated at the time of booking.
• Prevention, detection, and control of abuse and fraud committed on or through the website.
• Compliance with legally established obligations.

LEGAL BASIS FOR PROCESSING

The legal basis for the processing of personal data will be the application of the requested pre-contractual measures and the performance of the contract, for the following purposes:

• Consultation and, where appropriate, investigation and response to the messages received.
• Management of the reservation and its invoicing, which will include the control and processing of the reservation, contact with the client, as well as the management and control of the corresponding invoice payment.
• Management of special requests communicated with the reservation.

The processing of personal data for the above-mentioned purposes is necessary for the data controller to apply the requested pre-contractual measures and to fulfil their contractual obligations.

Likewise, the legal basis for the processing of personal data will be compliance with a legal obligation, for the following purposes:

• Management of the reservation and its invoicing, which will include the control and processing of the reservation, contact with the client, as well as the management and control of the corresponding invoice payment.
• Management of allergies or food intolerances communicated by the data subject, where applicable.
• Management of the fulfilment of legally stipulated obligations.

The processing of personal data for the above-mentioned purposes is necessary for ANIMUA, S.A. to comply with the obligations imposed by applicable legislation.

On the other hand, the legal basis for the processing of personal data will be the consent of the user, if given, for the following purposes:

• Management of dietary preferences communicated by the data subject.
• Sending communications regarding news, updates, promotions, and events.

The user shall have the right to withdraw their consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

Finally, the legal basis for the processing of personal data will be the legitimate interest of the data controller in the following cases:

• Consultation and, where appropriate, investigation and response to the messages received. The legitimate interest is based on the will of the data controller to manage the messages voluntarily sent by the user.
• Registration and control of visits to the hotel’s facilities. The legitimate interest is based on ensuring the security of its facilities, as well as the goods and the people present therein.
• Prevention, detection and control of abuses and frauds committed on the website or through it. The legitimate interest is based on the will of the data controller to maintain the website as a secure site.

RECIPIENTS

ANIMUA, S.A. may contract services from third parties located outside the European Economic Area, in countries that do not have regulations equivalent to those of the European Union, thereby carrying out international data transfers. Specifically, The Rocket Science Group LLC (MailChimp) will have access to the personal data necessary to provide theservices subcontracted to them as data processors, through a program used to send communications related to updates, news, promotions, and events. The EU-U.S. Data Privacy Framework applies. You can obtain a copy of it here: https://mailchimp.com/es/legal/data-processing-addendum

DATA RETENTION PERIODS

When the legal basis for the processing consists of the fulfilment of the data controller's legal obligations, the data shall be retained for the entire period of time stipulated by the applicable law.

When the legal basis for the processing consists of the performance of the contract and the legitimate interest of the data controller, the data shall be retained for the entire period of time necessary to fulfil these purposes.

On the other hand, in cases where the legal basis for the processing is the user's consent, the data will be retained until such consent is withdrawn.

Notwithstanding all of the above, in any case, personal data shall be retained for the entire period of time during which liabilities may be claimed from the data controller, as stipulated by the applicable law, proceeding, where appropriate, to the blocking of the data until the corresponding statute of limitations has expired.

USER RIGHTS

You have the right at any time to access, rectify, erase, restrict processing, object to processing, and data portability regarding your personal data in accordance with data protection regulations. To exercise these rights, you can send a written request to Plaça Urquinaona, number 1, Principal Second (08010) Barcelona or by email to rgpd@animua.com.

Specifically, you may:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Request the erasure of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Exercise the restriction of the processing of the data when any of the conditions provided for in data protection regulations are met.
• In certain circumstances and for reasons related to your particular situation regarding the processing of your data, data subjects may object to the processing. In such cases, the data controller will stop processing the data, except for compelling legitimate grounds, or for the exercise or defense of possible claims.
• Obtain human intervention, express your point of view and contest the automated decisions made by the data controllers, where appropriate.
• Request the portability of your data.

If you are dissatisfied with the processing of your data, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).