At Mythic, we believe that transparency of information is essential to establishing a relationship of trust with our customers, users, suppliers and other people who interact with us.

The protection of the personal data of those who place their trust in us is particularly important. Through this Privacy Policy, we aim to inform you about how we collect, use, store and protect your personal data.

This Privacy Policy establishes the basis on which ALTAURBANA GESTION SL, owner of Mythic, processes the personal data that users voluntarily provide through the website.

This policy shall apply whenever personal data is provided to ALTAURBANA GESTION SL, whether through contact forms, requests for information, subscriptions, recruitment processes or other means made available on the website.

OUR COMMITMENTS

ALTAURBANA GESTION SL undertakes to:

• Respect users' privacy and process their personal data in accordance with current regulations.
• Collect only personal data that is adequate, relevant and necessary for the corresponding purpose.
• Process personal data securely and confidentially, adopting the necessary technical and organisational measures to prevent unauthorised access, loss, alteration or misuse.
• Not use personal data for purposes other than those for which it was collected, unless there is a legal basis permitting such use.
• Not disclose personal data to third parties unless this is necessary to provide the requested service, there is a legal obligation or another legal basis legitimises such disclosure.
• Retain personal data only for as long as necessary to fulfil the purpose for which it was collected and the applicable legal obligations.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA

Details	Information
Data controller	ALTAURBANA GESTION SL
Trade name	Mythic
NIF	B98959356
Address	Calle Poeta Monmeneu, 16
Postcode	46009
City	Valencia
Province	Valencia
Privacy email address	[TO BE COMPLETED]

WHAT IS PERSONAL DATA AND WHAT IS MEANT BY PROCESSING

Personal data is any information relating to an identified or identifiable natural person.

An identifiable natural person is one whose identity can be determined, directly or indirectly, by means of data such as a name, identification number, location data, online identifiers or other elements specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

The processing of personal data includes any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, alteration, consultation, use, disclosure, restriction, erasure or destruction.

WHAT PROCESSING WE CARRY OUT AND FOR WHAT PURPOSES

Information and contact requests

Data provided through contact forms, email, telephone or other available means will be used to respond to and manage enquiries, requests for information or requests made by the user.

Newsletter subscription or commercial communications

If the website allows subscription to commercial communications, we will use the data provided to manage the sending of information, news, promotions or communications related to Mythic.

The user may unsubscribe at any time using the mechanism included in the communications themselves or by contacting us.

Recruitment processes and CV submission

If the user provides their curriculum vitae, the data provided will be processed to manage their application and, where appropriate, their participation in current or future recruitment processes.

Registration and access to the user profile

If the website has a private area or user account, the data may be used to manage registration, authentication and access to that area, as well as the services linked to the account.

Comments or participation tools

If the website has a blog, review forms, comments or other participation features, the data provided may be processed for the purpose of managing such interactions.

Booking management

When the user makes or requests a booking, their data may be processed to manage the request, formalise the contract, provide the requested accommodation services and carry out the related administrative and financial procedures.

WHAT PERSONAL DATA WE MAY COLLECT

The data processed will depend on the user's interaction with the website and the services used.

We may process, among others:

• First name and surname.
• Email address.
• Telephone number.
• Data included in requests or enquiries.
• Data necessary to manage a booking.
• Billing information where applicable.
• Data included in a curriculum vitae.
• Access or identification data for a user account.
• Information voluntarily provided through comments, forms or other enabled fields.

We will only request data that is necessary for the specific corresponding purpose.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA

The processing of personal data may be based, depending on the circumstances, on:

• The data subject's consent, for example, to receive certain commercial communications.
• The performance of a contract or the implementation of pre-contractual measures, for example, to manage a booking or a request related to our services.
• Compliance with legal obligations applicable to ALTAURBANA GESTION SL.
• Legitimate interests, where applicable and provided that the rights and freedoms of the data subject do not prevail.

Where processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

WHAT RIGHTS DO YOU HAVE REGARDING YOUR PERSONAL DATA

The user may exercise the following rights:

• Right of access: to know whether we are processing their personal data and, where applicable, to obtain information about such processing.
• Right to rectification: to request the correction of personal data that is inaccurate or incomplete.
• Right to erasure: to request the deletion of personal data where the legally established requirements are met.
• Right to object: to object to the processing of personal data in certain circumstances provided for by law.
• Right to restriction of processing: to request that the processing of their data be restricted in certain circumstances.
• Right to data portability: to receive their personal data in a structured, commonly used and machine-readable format and, where technically feasible, to request its transmission to another controller.
• Right to withdraw consent: where processing is based on consent, it may be withdrawn at any time.

To exercise these rights, the data subject may send a request to:

ALTAURBANA GESTION SL
Calle Poeta Monmeneu, 16
46009 Valencia
Valencia

or by email to:

[MYTHIC PRIVACY EMAIL ADDRESS]

The request must provide sufficient information to identify the data subject and specify the right they wish to exercise.

Furthermore, if you believe that the processing of your personal data does not comply with current regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

DATA SECURITY

ALTAURBANA GESTION SL will adopt appropriate technical and organisational measures to ensure a level of security appropriate to the risk and to protect personal data against destruction, loss, alteration, disclosure or unauthorised access.

Security measures will be reviewed and updated where necessary, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of the processing.

HOW LONG WE RETAIN YOUR DATA

Personal data will be retained for the time necessary to fulfil the purpose for which it was collected.

Once that purpose has ended, the data may be retained, duly blocked, for the periods required by applicable legislation in order to address any potential legal liabilities.

Where processing is based exclusively on consent, the data may be retained until the user withdraws such consent, without prejudice to any applicable statutory retention periods.

WHAT PERSONAL DATA WE SHARE WITH THIRD PARTIES

Personal data will not be disclosed to third parties unless:

• there is a legal obligation;
• it is necessary to provide the requested services;
• it is necessary for the performance of a contractual relationship;
• there is another legal basis legitimising such disclosure.

Likewise, ALTAURBANA GESTION SL may use service providers that need access to certain personal data in order to provide services on behalf of the company, such as technology providers, booking systems, web hosting, IT maintenance, communication services or management tools.

Where applicable, these providers will act as data processors and will be subject to the contractual obligations required by data protection regulations.

INTERNATIONAL DATA TRANSFERS

As a general rule, no international data transfers are envisaged.

However, if technology providers located outside the European Economic Area are used, or if international data transfers are involved, such transfers will be carried out in accordance with the safeguards established by applicable data protection regulations.

CHANGES TO THE PRIVACY POLICY

ALTAURBANA GESTION SL reserves the right to modify this Privacy Policy in order to adapt it to legislative, case-law or technical changes, or changes related to the provision of its services.

When significant changes are made, the updated version will be published on the website.