I.- Who is responsible for processing your data?
The entity in charge of your data is Barceló Gestión Hotelera, S.L. (hereinafter, for the purposes of this document, “BGH” or “Barceló”) with registered office at c/ Josep Rover Motta, 27, Palma de Mallorca, 07006. If you have any queries regarding data protection, please contact the Barceló Group Data Protection Office by sending an e-mail to firstname.lastname@example.org.
II.- Why do we process your data?
BGH hereby informs the Interested Party that their personal data will be processed by Barceló for the following purposes:
1. Managing user requests.
Barceló will process the data required to answer user requests for information. That is how we will process data like your name, surname(s), email and telephone number. Processing will be carried out in the same manner when the request is made by a journalist or similar, in which case Barceló will also capture information about the media outlet represented and the information request submitted by the journalist.
Legal basis: This data will only be processed if BGH has received user consent.
2. Analysing and studying how users interact with the website.
Barceló may process website users’ personal data through their IP or MAC address, or if the user is a member of my Barceló, by linking their IP or MAC address to the identification information provided by the user, in order to analyse the interactions, movements, scrolls, visits and product enquiries that the user made on its website.
Legal basis: Such processing is required to satisfy the legitimate interests of BGH. Customers can oppose the processing of their data for such purposes by following the instructions set out in section V.
3. Sending of commercial communications about products and services of Barceló.
BGH, in the event having the consent of the interested party, can send him/her promotional offers on its products and services, such as offers and promotions for certain hotels, products that can acquired in the hotel itself, trip packages, etc.
Legal basis: This processing shall only be carried out if BGH has received consent from the interested party. The interested party can revoke his/her consent by following the indications in section V.
4. Website monitoring.
Barceló will monitor and control website use to prevent and detect any fraudulent use, unauthorised access, alterations or loss of personal or other data.
Legal basis: Such data processing is necessary to comply with the obligations under the Law on Information Society Services and Electronic Commerce, as well as to satisfy Barceló’s legitimate interest in guaranteeing internet and data security.
5. Attending to user rights requests.
Legal basis: Such processing is necessary to fulfil Barceló’s user rights obligations under data protection regulations.
6. Processing of cookies data: Information regarding the cookies policy is located in the following link
III.- How long will we keep your data for?
Any personal data to which BGH has access will be handled for the necessary amount of time to achieve the purpose for which they were collected. Following this time, BGH shall store your personal data, in a duly blocked manner, even when they are no longer pertinent for the purpose for which they were collected, in order to make them available to any competent Public Administration services, Judges and Courts, or the Prosecution Service during the statutory time limit for personal actions that may have arisen from the relationship held with the guest and/or legally established storage periods. Once said time frames have passed, BGH shall proceed with the physical deletion of your data.
IV.- Who will we share your data with?
BGH may communicate data to:
- Hotel holding companies, to answer user requests, including the exercise of a specific right.
- Third-party collaborators who may have received user information at the user’s request.
- Competent Public Bodies, Judges and Courts.
- Beside the aforementioned data sharing, BGH works with third parties who provide services and have access to the personal data of the customers, which they process in representation and on behalf of BGH as a result of providing said services. Specifically, BGH hires third parties to supply, for example and not limited to, services in the following sectors: legal advice, multidisciplinary professional services, tech services, IT services. Providers include Salesforce Inc., a company located in the United States that complies with the Privacy Shield.
V.- What rights do you have when providing us with your data?
The Interested Parties may, if they so wish, exercise their right to access, amend and delete their data, request that the handling of their data be limited, oppose it, request the portability of their data, as well as request to not be the object of automated individual decisions, by means of the following:
- By writing to the postal address provided above.
- By emailing your request email@example.com.
Data subjects can withdraw their consent for the data processing carried out on the basis of their consent, by following the steps described in the previous paragraph.
VI.- I have detected an abnormality regarding my personal data or a third-party’s data, how can I give notice of this?
The Interested Party, who, by any means, has become aware of a possible breach or security-related incident that has allowed the non-authorised access, tampering, amendment, or non-authorised deletion of his/her personal data or data that is property of a third party, has a series of forms at his/her disposal at the www.barcelo.com web page in order to inform Barceló of the detected incident.
In any case, the user can send this incident to the email firstname.lastname@example.org.
VII.- How have we obtained your data?
The personal data handled by BGH is the personal data collected using online forms.
VIII.- With which authority can you exercise your right to claim?
The Interested Parties may file a claim with the Agencia Española de Protección de Datos [Spanish Data Protection Agency] regarding any response they have received from BGH in supporting their rights.
In any event, the user is hereby informed that any claim relating to the handling of personal data shall be managed and processed by [contacting] the Data Protection Officer of Barceló Hotel Group, located at c/ Josep Rover Motta, 27, 07006, in Palma de Mallorca, or by sending an e-mail to: email@example.com, attaching to this request, in both cases, a copy of your National Identity Document, Tax ID number, or an official document that identifies you.