Legal Notice

1. Identifying data

In compliance with Article 10 of Law 34/2002 on Information Society and Electronic Commerce Services (LSSI-CE), the following information is provided:

• Company name: Ryans Coral S.L.
• NIF/CIF: ES B13855739
• Registered address: C/ Jaume I s/n, 2 - Edificio Odysseus, 07817 Sant Jordi de ses Salines, Ibiza, Spain
• Company Register: Data available upon request by the interested party
• Contact email: info@coralstarhotel.com
• Telephone: (+34) 971 343 250
• Coralstarhotel.com

2. Object and scope

This Legal Notice governs the use of the website coralstarhotel.com (hereinafter, "the Website"), owned by Ryans Coral S.L. Accessing and using the Website confers the status of user and implies full acceptance of the conditions included in this Legal Notice.

3. Access and usage conditions

The user undertakes to use the Website and its content in accordance with the law, morality, and public order, refraining from using them in a manner contrary to this Legal Notice, harmful to the rights of third parties, or which in any way may damage, render useless, or overload the Website or impede its normal use.

Ryans Coral S.L. may modify, without prior notice, the content of the Website, as well as its configuration and presentation.

4. Intellectual and industrial property

All content on the website (texts, images, trademarks, logos, designs, source code, etc.) is the property of Ryans Coral S.L. or third parties who have authorised its use, and is protected by intellectual and industrial property regulations. Reproduction, distribution, or transformation without express authorisation is prohibited.

5. Exclusion of warranties and liability

Ryans Coral S.L. does not guarantee the continuous availability of the Website or the absence of errors in its content, although it will take the necessary measures for their correction. Ryans Coral S.L. is not responsible for damages resulting from the misuse of the Website or the content of linked sites not managed by it.

6. Links

The Web may include links to third-party sites. Ryans Coral S.L. does not assume any responsibility for the content, operation, or availability of such sites.

7. Applicable legislation and jurisdiction

These terms and conditions are governed by Spanish law. For the resolution of any dispute, the parties submit to the Courts and Tribunals of Ibiza, waiving any other jurisdiction that may correspond to them.

8. Online dispute resolution

In accordance with Regulation (EU) No 524/2013, the following link to the European Union's online dispute resolution platform is made available to the user/consumer: http://ec.europa.eu/consumers/odr/

Privacy Policy

1. Data controller

• Responsible Person: Ryans Coral S.L.
• NIF/CIF: ES B13855739
• Registered address: C/ Jaume I s/n, 2 - Edificio Odysseus, 07817 Sant Jordi de ses Salines, Ibiza, Spain
• Contact for data protection matters: info@coralstarhotel.com

The appointment of a Data Protection Officer (DPO) is not mandatory, in accordance with Article 37 of the GDPR, given the nature and volume of the processing carried out.

2. Purposes of processing

• Manage room and extra service bookings, and the contractual relationship with the client.
• Handle enquiries, contact requests and job applications.
• Send commercial communications (newsletters, offers) only if the user has given express consent.
• Develop web usage statistics and improve its functionality (analytical cookies, subject to consent).
• Show personalised advertising only if the user has accepted advertising/behavioural cookies.

3. Legal basis

• Execution of a contractual relationship (reservations and provision of hotel services).
• Consent of the data subject (newsletter, non-essential cookies, data transfer for job market purposes).
• Compliance with legal obligations (invoicing, tourism and safety regulations).

4. Retention period

The data will be retained for as long as the contractual relationship subsists or until consent is revoked, and thereafter for the statutory periods for the prescription of liabilities. Resumes received will be kept for a maximum of one year, unless otherwise indicated by the applicant.

5. Recipients and international transfers

The data may be communicated to the following categories of recipients, for the sole purpose of managing the booking, the website, and the contracted services:

• Neobookings (booking engine) — online booking management. Acts as the data controller.
• Analytics and advertising providers (Google, and if applicable Meta) — only if the user consents to the corresponding cookies.
• Group companies: Ocean & Ryans Management S.L. and other companies within the Gruporamat group involved in the provision of hotel services.

Should any of the aforementioned providers transfer data outside the European Economic Area, such transfer will be carried out under an adequacy decision from the European Commission or through standard contractual clauses, ensuring in all cases a level of protection equivalent to that required by the GDPR.

6. Rights of data subjects

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated individual decision-making by writing to C/ Jaume I s/n, 2 - Edificio Odysseus, 07817 Sant Jordi de ses Salines, Ibiza, Spain or by email to info@coralstarhotel.com, stating "DATA PROTECTION" in the subject line and attaching a copy of a document proving your identity.

Furthermore, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.esit is considered that the treatment does not comply with current regulations.

7. Safety measures

Ryans Coral S.L. has adopted the necessary technical and organisational measures to guarantee the security and integrity of personal data and to prevent its alteration, loss, unauthorised processing or access.

8. Updates

This Privacy Policy may be amended to adapt to legislative changes or changes in data processing. Periodic review is recommended.

Cookie Policy

What are cookies?

Cookies are small text files that are stored on your device when you visit the Web. They allow, among other things, to remember your preferences, analyse the use of the Web, and, where applicable, display advertising tailored to your interests.

2. Types of cookies used

• Technical cookies (necessary): essential for the website's functionality. They do not require consent.
• Customisation/functionality cookies: remember language or navigation options.
• Analytical cookies: allow us to measure website usage (e.g. Google Analytics).
• Advertising/behavioural cookies: manage advertising spaces and, where applicable, personalised advertising based on your browsing.
• Third-party cookies embedded in the booking engine (Neobookings) and other service providers embedded in the Web.

3. Cookies used on this website

Analytical, personalisation and advertising cookies are only installed if you give your consent via the settings panel. The cookies identified as of this review are detailed below:

Cookie	Holder	Expiry	Purpose
PHPSESSID	Holder	Session	User session management. Technical, essential.
XSRF-TOKEN	Holder	Session	Security. Technical, essential.
_ga / _gat / _gid	Google	2 years / session	Website usage statistics (Google Analytics).
_cfuvid / _cf_bm	CloudFlare	Session / 30 min	User identification and automated traffic mitigation.
OptanonConsent / OptanonAlertBoxClosed	OneTrust	1 year	User Cookie Preferences Log.
Reservation engine cookie(s)	Neobookings	Session / up to 1 year depending on configuration	Online booking process management and, where applicable, proprietary analytics of the booking engine provider.

This list is reviewed periodically. If new analytics, marketing tools, or third-party providers are incorporated, the table will be updated accordingly.

4. Consent Management

When you access the website, a consent panel is displayed with the options "Accept", "Reject" and "Configure cookies", presented with the same level of visibility. You can change your decision at any time via the "Cookie Settings" link available in the footer, or withdraw your consent by contacting us at the email address indicated in section 6.

Additionally, you can configure your browser to block or delete installed cookies, although this may affect the proper provision of some services on the Web.

5. Classification by level of intrusion

• Level 1: Essential technical cookies for the website's operation.
• Level 2: Anonymous cookies necessary for content maintenance and navigation.
• Level 3: third-party cookies not expressly requested by the user, which allow tracking across websites. Their installation is subject to prior express consent.

6. Updates and contact

This Cookie Policy may be updated based on the services and cookies used. For any queries or to withdraw consent given, you can write to info@coralstarhotel.com, indicating "Cookie Policy" in the subject line.